x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0xfffffffffffffffd, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffd6f) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0x1b8, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffff7f}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r9 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r10 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r10, &(0x7f0000000000), 0x1c) dup(r10) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000240)='./file2\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x1c, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x38000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}}, r13, 0x5, 0xffffffffffffffff, 0x0) [ 273.095797][ T9838] input: syz0 as /devices/virtual/input/input14 18:48:05 executing program 3: bpf$PROG_LOAD(0x2, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 273.235725][ T9839] input: syz0 as /devices/virtual/input/input15 18:48:06 executing program 3: bpf$PROG_LOAD(0x3, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:06 executing program 3: bpf$PROG_LOAD(0x4, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:06 executing program 3: bpf$PROG_LOAD(0x6, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 274.069835][ T9871] input: syz0 as /devices/virtual/input/input17 18:48:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x648000, 0x140) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/196) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 18:48:08 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x160, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="2e360f2b99dc00660f71e0ff0f01c80fe0b41e002e0f01cb0f01cfba4000b860bdef0f58bd00000f01b100000f0118", 0x2f}], 0x357, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="010040002f790745175a24821465bba887c4a554b10000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r7 = dup(0xffffffffffffffff) write$FUSE_ATTR(r7, &(0x7f0000000040)={0xffffffffffffffd5}, 0x10113) prctl$PR_MCE_KILL_GET(0x22) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev, 'bridge0\x00'}}, 0x1e) 18:48:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x8000) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/102400, 0x19000}, 0x0) 18:48:08 executing program 3: bpf$PROG_LOAD(0x7, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x10082) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'%at\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x220) 18:48:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 275.616456][ T9893] xt_time: unknown flags 0xa0 18:48:08 executing program 3: bpf$PROG_LOAD(0x8, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 275.650141][ T9899] input: syz0 as /devices/virtual/input/input18 18:48:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x30000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x9d5, 0x10001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000100000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c0002000000aaaaaa000000140003006272696467655f73046176655f310000"], 0x40}}, 0x0) 18:48:08 executing program 3: bpf$PROG_LOAD(0x9, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:08 executing program 3: bpf$PROG_LOAD(0xa, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:08 executing program 2: epoll_create(0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req3={0x6, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000080)={0x0, r3+30000000}, 0x0) 18:48:10 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x160, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="2e360f2b99dc00660f71e0ff0f01c80fe0b41e002e0f01cb0f01cfba4000b860bdef0f58bd00000f01b100000f0118", 0x2f}], 0x357, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = socket$inet6(0xa, 0x100800000000002, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="010040002f790745175a24821465bba887c4a554b10000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r7 = dup(0xffffffffffffffff) write$FUSE_ATTR(r7, &(0x7f0000000040)={0xffffffffffffffd5}, 0x10113) prctl$PR_MCE_KILL_GET(0x22) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev, 'bridge0\x00'}}, 0x1e) 18:48:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0xfff, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xe00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xf4, 0x0, 0x418, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x408000c}, 0x4004084) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) io_setup(0x4, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076299482cbf9e84808d7379ab5cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd7", 0xfffffffffffffec9, 0x8000, 0x0, 0x0) read(r1, &(0x7f0000000ac0)=""/245, 0x100000394) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={0x5c, 0xffff, "deeb8d9d0626ea519b8b9a003b3fa5f8c8a5bdd46aa8d68a6b5ad79c8ca70f91d10df7f58890784a424b46ec07d55156156e5541d48ed541dadda29c18f7a25f1001bc9b6ac44b443009de87da98e713072fe160"}, &(0x7f0000000540), 0x2200) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:48:10 executing program 3: bpf$PROG_LOAD(0xb, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:10 executing program 2: mlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000465f8e)=""/114, 0x72) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r8, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r10, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r12, r13, 0x0, 0x0, r14]) getgroups(0x1, &(0x7f0000000140)=[0x0]) r16 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() fstat(r16, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r17, r18, 0x0, 0x0, r19]) r20 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getgid() fstat(r20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r21, r22, 0x0, 0x0, r23]) r24 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getgid() fstat(r24, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r25, r26, 0x0, 0x0, r27]) r28 = getegid() r29 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r29, &(0x7f0000465f8e)=""/114, 0x72) fstat(r29, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r33 = getgid() fstat(r31, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r32, r33, 0x0, 0x0, r34]) r35 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r37 = getgid() fstat(r35, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r36, r37, 0x0, 0x0, r38]) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x8}, [{0x2, 0x843bbef002c31ec7, r8}, {0x2, 0x6, r10}, {0x2, 0x2, r4}], {0x4, 0x7}, [{0x8, 0x8, r13}, {0x8, 0x0, r15}, {0x8, 0xd16227d385f3d197, r17}, {0x8, 0x7, r21}, {0x8, 0x2, r27}, {0x8, 0x4, r28}, {0x8, 0x4, r30}, {0x8, 0x5, r33}, {0x8, 0x6, r5}, {0x8, 0x5, r36}], {0x10, 0x6}, {0x20, 0xe}}, 0x8c, 0x1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 18:48:10 executing program 3: bpf$PROG_LOAD(0xc, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:10 executing program 3: bpf$PROG_LOAD(0xd, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:10 executing program 3: bpf$PROG_LOAD(0xe, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 278.966534][ T2795] device bridge_slave_1 left promiscuous mode [ 278.972809][ T2795] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.026375][ T2795] device bridge_slave_0 left promiscuous mode [ 279.033745][ T2795] bridge0: port 1(bridge_slave_0) entered disabled state 18:48:12 executing program 3: bpf$PROG_LOAD(0xf, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:12 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54c2f71c4e0bd381c81d3fb40258f08870408d5832949fa7c57bfd918a1c917d726a91d8676b1aa7301332038471a84aee821fb6c26b67053c39bfefee658592c9b6ea8e368f40c9b6172d14fd0d345b5d66db78", 0x9f}], 0x0, 0x0, 0xfffffffffffffd7d}, 0x800) 18:48:12 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r3, 0x6609, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x305080) bind$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0xfa, 0x40, 0x5, 0x2, 0x4, 0x6}, 0x6}, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0)='threaded\x00', 0x9) 18:48:12 executing program 2: r0 = socket(0x10, 0x7, 0xff) r1 = dup(r0) write(r1, &(0x7f0000000100)="240000005800010000000000002304000a04f51108000100020100020100000005000000", 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000400)="19000ac91c63ee6f2133e81ac8869fd0205276203e4f20b480abdb55d138a6ce55ee2a3d6b300084566ae61b7e4e4d", 0x2f}, {&(0x7f0000000180)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f0000000440)="6c9c382316614ba93a1bcef2069e6380a7309e5db709794a7b12d244a73d522d8316d16a244bdae43b8a697bcb3666f9c55e021052d449188b905850344763255e377d059f5fcffa26f0752dabd1a7be269794658d5c9d0e51b549c0f3642c3d489971965743634f46979080d49a779533b04e9db97b70d747d824b2c1e47d86875c7e37e9699aef0fdf99b975680ba810abb07fbfd261b13c2dc5cd808081aea3e945aad7a72b9a07fcb10d15f9688616b909d2fea3011c104b821b968ef5ab5035cda21a92ba5861a84bc86373de46f962e52c4cedf5e98ce45cf511dd2179fa8c4643", 0xe4}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r3 = socket(0x0, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x240, 0x1}, &(0x7f0000000040)=0x8) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x110, r1, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r6, 0x2}, &(0x7f00000000c0)=0x8) 18:48:12 executing program 3: bpf$PROG_LOAD(0x10, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:12 executing program 2: socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000001600)=0x60) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="f9cdb45fe4b6eeadf973f06ebf8273ddc782ed7b4ca4f888e22b8b276412accadb63233c43ccd5ef637e6b0ce0cf3c741533e0c4952a1b02f2f183508d6041465d776f338a1a8b78016315ea74f617f1302a3c4b81815248725bd67994f39291498f6ff84f"}, {&(0x7f00000001c0)="08bf728b1d3325b6f33329cac4bea297365ee02bc532d2d12ae2ced246633dd633f1b4b8374b605f21415d78d4685b9596986d2e7bd26c5e80aded67e4962ee5be0f19726164b575bc9c9caece642c04e2673107f98f3054a197c12c87"}, {&(0x7f0000000240)="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"}, {&(0x7f0000001240)="ac188f2fa8e5562cf83b8a9bf2fd9cef70a645a60381ef44d89d917e5055a691bceb90ca799f7bd9528ea314be6683acbd043a15ab6db288a75b00fae073199a14e27443eda01a03019c635a"}, {&(0x7f00000012c0)="56f4f79a144eef78f98fde489aa808e0b899de1b5458bcd0e83aaf056a7a09bb6244cf12dd702e3d9c2381bee10d0f798f29576536912a49d5a4f81055276486892e85fc2cc9b5bbb61fe9f1a7a743219a9b4811fff578b89dcc8133fa3b706a5ce3654dc7fce4a6e84a01d107226be768d09fe6c393c9669fdc0129a6bb72f68ebc6f65f8eb98a053844cf81731abbd4953c28177ff639aa304abd53b"}, {&(0x7f0000001380)="f6fb54befb74ef59f56ce0115c187daad0ae7d94375ee09dafdd5308fc9dabbc4f9e42bcc86831d410cdda20f385d31ee7ae8ecb47a7c0d7224cbac44b15440da2b8e0adc4cde08e"}, {&(0x7f0000000140)="7361dce0972da62bdca016e37ef52526fdd27e0a1b1eb83dd3b75f9cc623181a45efc8f26534365d3c9880ffa73dc2c5b1"}, {&(0x7f0000001400)="057736a82e70e6ecb1efae3934a33a6e171b6d299c9cea2c7745538a58cd8b14"}, {&(0x7f0000001440)="f61f5d4cea4a599e2a69e2c1773ecac4b18b45f744f520509cfaf7e275670d19f9285e02e6097614f1b2c9c30c2a2dd31a0c34a4a7af419d9c22c0719deb6f9fd483377d727fa6b868b54a421f3bad9dde5cd1b49d0a638fa261d88148adf8e0c073e49b6e7dbed9a73c328b80bd"}, {&(0x7f00000014c0)="4d03699123e7a92b6f8701efc6ad3c3b584596fd78373d5a3d1d0ef5db6632a412a700a4e485b9e99f175cb2041ce98e5a26f6c0ea819884e062ae8d8eac474809dec575140ed5c2e1137c1b81d83c04ef5c49ab8d87d3b147fa57a056c7"}], 0xfffff6a, 0x0, 0x299}, 0x40) 18:48:12 executing program 3: bpf$PROG_LOAD(0x11, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 279.892981][T10020] input: syz0 as /devices/virtual/input/input28 18:48:12 executing program 3: bpf$PROG_LOAD(0x12, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:12 executing program 3: bpf$PROG_LOAD(0x13, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:13 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 282.345772][ T2795] device hsr_slave_0 left promiscuous mode [ 282.405422][ T2795] device hsr_slave_1 left promiscuous mode [ 282.469560][ T2795] team0 (unregistering): Port device team_slave_1 removed [ 282.481410][ T2795] team0 (unregistering): Port device team_slave_0 removed [ 282.494962][ T2795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.539749][ T2795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.681835][ T2795] bond0 (unregistering): Released all slaves 18:48:15 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r3, 0x6609, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x305080) bind$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0xfa, 0x40, 0x5, 0x2, 0x4, 0x6}, 0x6}, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0)='threaded\x00', 0x9) 18:48:15 executing program 3: bpf$PROG_LOAD(0x14, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:15 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="7371b89237380777d862cb845206f80604984804449ac3622af0677d4313bd3b4e7c0696dc9a4068aa17dceb1b0d0a3f0018c1f19f36195640bc6bb4ae6813604efb82741d74d8b25706e4f3307b532cdd95a9ab990334d3eaec20f3f28e54927615d5e0c1579b52d626f3e9b0c666729d01eb83db932a2cb66f9f97c3898719ee33a4dc4efdcc82e2154382c39f028a647a5a09c014310a465ad35b88f91d957fddc13e4a8e8140147d61a0de9077426f875e4c4c2ad0758dd47216142c3409830f1020810000000000000000", @ANYRES16=r5, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x2, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r11, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) connect$can_bcm(r6, &(0x7f0000000340)={0x1d, r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x35}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r14}]]}}}]}, 0x48}}, 0x0) 18:48:15 executing program 2: creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x1c0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x0, 0x1, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x50000, 0x0) write$capi20(r7, &(0x7f0000000300)={0x10, 0x8, 0x82, 0xc3, 0x1, 0x2bb8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r8, r10}}, 0x18) 18:48:15 executing program 3: bpf$PROG_LOAD(0x15, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 283.017725][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 283.017767][ T26] audit: type=1804 audit(1573411695.647:31): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir077343000/syzkaller.RvINWG/54/bus" dev="sda1" ino=16785 res=1 18:48:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:15 executing program 4: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = memfd_create(&(0x7f0000000080)='\'\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r3}, &(0x7f0000000440)=""/243, 0x23d, &(0x7f0000000240)={&(0x7f0000000080)={'tgr128-generic\x00'}}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r3, 0xda, 0xec}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'streebog256-generic\x00'}}, &(0x7f00000001c0)="3cfba9aa7574d93627f1c6c8fb7a4eca4d2f02299adda83a54db73236aa18ce09b4625d4ec1bd8e262a46aa6c0ee1c23b603127bac55fd2f391965dc14d195def7db24b2b4e7f32460c7250e1fa9c88bb2d8a3a4435293f09db82222557618f7aa1f82e951621b91abbf051eb88d1833d01f8daea207cac7b6db2a5a738764d668dfdea54b396deaf992bdac0bb9b8602214bb5c3ed4613f4c9df9e51bd5d518136687598d72b764cc0dfef1c866cbe1c327eb41a666eedcbe9b2190ea5ea28d9a2965b5d3b1e3ee9f367c41a8ee979fe5d041152adcc302f0b6", &(0x7f00000002c0)="7805840757472391aaec25e6a36e031c5cdf5e70d4dcf2f589febd3488c306a9e2ff6fa48fd1566d442058108e2fe0a95f965c3bee0edd40d98de809adc3ac4ed5d11a689dcfaf393e795ff0ded480fe5017f81773f4f82f280f27321d63927d90336e25ff4b16666465c1b157647348ffabc9cae19741e02e239f2bf3d766c29f0173784a18837c6d253c9bcf1819547cf2819699c15d43ff27ad345f887c64f5fe714efbb893aa6468d4ff3421350930d999c19baaa3be3fb653b91e84e0be10d450f4e5079b6b9248e06fa62a99547875e7b7ef70ff65813a64fdc8370d95e93e31ca5a2a9b3f66c7b3cd") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000000)='team0\x00') 18:48:15 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:15 executing program 3: bpf$PROG_LOAD(0x16, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 283.214785][ T26] audit: type=1804 audit(1573411695.707:32): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir077343000/syzkaller.RvINWG/54/bus" dev="sda1" ino=16785 res=1 18:48:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x89, 0x4, 0x44e3}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000640)={0x8, &(0x7f0000000600)=[{0x3, 0x3f, 0x1, 0x8}, {0x7, 0xf6, 0x4, 0x2}, {0x0, 0xfd, 0x0, 0x4009}, {0x7571, 0x8, 0x7, 0x6}, {0x1f, 0x2, 0x3, 0xc5}, {0x1ff, 0x5, 0x0, 0x2}, {0xb3, 0xff, 0x3c, 0x5}, {0x10, 0x9, 0x4, 0x9}]}, 0x10) r5 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x8, 0xfa00, {0x4, &(0x7f00000001c0), 0x2, 0x4}}, 0xe) r8 = syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x6000) write$P9_RLOCK(r8, &(0x7f00000006c0)={0x8, 0x35, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000000)={0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeca04aa2ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r5, &(0x7f0000000240)="79c207d7e4045924b6e9a6df34d022da99609c58debc8414c206c77255f506dfc1", &(0x7f0000000280)=""/189, 0x4}, 0x20) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x400, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/11, 0xb}], 0x1, &(0x7f0000000480)=""/142, 0x8e}, 0xe5) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000580)={@remote}, 0x14) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000140)=0x1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000005c0)) [ 283.444856][ T26] audit: type=1804 audit(1573411695.707:33): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir077343000/syzkaller.RvINWG/54/bus" dev="sda1" ino=16785 res=1 [ 283.574184][ T26] audit: type=1804 audit(1573411695.707:34): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir077343000/syzkaller.RvINWG/54/bus" dev="sda1" ino=16785 res=1 18:48:16 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r3, 0x6609, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x305080) bind$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0xfa, 0x40, 0x5, 0x2, 0x4, 0x6}, 0x6}, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0)='threaded\x00', 0x9) 18:48:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:16 executing program 3: bpf$PROG_LOAD(0x17, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) 18:48:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000080)='vboxnet0\\prockeyringsystemeth1\x00', 0x4) fallocate(r5, 0x0, 0x0, 0x4) dup(r4) dup3(r1, r4, 0x3548ffeb6091824a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x87, @multicast1, 0x4e20, 0x1, 'wrr\x00', 0x20, 0x3563, 0x35}, {@loopback, 0x4e22, 0x3, 0xfffff801, 0xd, 0x6f274c88}}, 0x44) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000000c0)={0x2}) syz_mount_image$xfs(&(0x7f0000000440)='xfs\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="83cc021cd00ea08e0f9bdde4299742cd4cfab8dda2b359880bc40ae376f3c05f348f84bb06ffcdd3ac03f8f09aeb13b9576fff18a80ca086d0e0b3a63dfaaa2d24b50297009b99b1855fbe3d8a964fceefa1b1da87c34f623993fd4949dfc07ba8ae5e4d0b912813e8725d3c47dbaebe15518b80129fff58b4080000000000ca332d7b5c"]) [ 283.784997][T10115] input: syz0 as /devices/virtual/input/input33 18:48:16 executing program 3: bpf$PROG_LOAD(0x63, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 284.001492][T10122] XFS (loop2): unknown mount option [ƒÌРŽ›Ýä)—BÍLú¸Ý¢³Yˆ Ä [ 284.001492][T10122] ãvóÀ_4„»ÿÍÓ¬øðšë¹Woÿ¨  †Ð೦=úª-$µ—]. 18:48:16 executing program 3: bpf$PROG_LOAD(0xc0, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 284.289407][T10150] input: syz0 as /devices/virtual/input/input34 18:48:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="6ca3b9d07b1842e50cde7a947137a578979595710791932c8c77c2d3b734ef82b94afacc98e1297febc2687b1342465c04b23e8ec965bcb07edf8794207272426f49fef3b7752e607767c5e512bfb1551341623d939e1bdbe79acb804fa1fdd802acfe6ed3a5e8bfb1cf07c140104e1a0cd87d3bda992d7fdf87864bdd3752d3490044d764b67bf0151d3d31a857fee118f1c1f6a74bd6b410bcdc80acf9d35efdb1d39d042f9419ddfdad54802716ac3c4c391ff83ded1edb6c31bfa53c4a0893e8181eacf19d31e6f41bc142739038bfb8e284c6dce08f9d9f2eb017d45578771e69499cf3ced461dbf78c71579cfa06c01f7c19a5133794bf0f20d29efdbd7a85cf87e0ab381305b4b10693200b1faef749b8a371d604934510cb5f85a58fbd78d2b5bbe8f71d472faab2f77d6036209ab1ba563f821d6601e1458dd8141be8574faa57f20378e1b044aaf5d0f41db8be7db67a50d9af69a2232cfdc7ad3e0816a978e208dc462c192ac25cfab2fabbadd12c5791389b433d10825eea964ab1df756e706232c7fc3fe79fbcf66789bbd195028b053d2f849bcb8c9d72ae0c8a4bdb00e003a940ed18eff4c862dd809ff6dc99265df13518292a199f3743453e38495b3a9c76039271fb25520b2ed3182980c2800c2f5328c7aa6b95825dc92a4e8fd1c90bc1d5b84f1ff91eeff1a1288c1e16a5828155cb63fe7ceb0b58bbf69e29f9ae1c60b25ec0cc99890eb357d1e9c9c1c9136a5a0abe87408696effc971de80fe1c0eb569a7bc7fa8dc24433d9790f2dfeea211cead617f2081d096fd861dc0bd8b80e05d37f24071d62a8ddbaa46eebbeb77fd770033a58b672a061c0728ff8cebc36e68de3379464a33f45d49d88b00a753569bdeeede2f74c7c6c45b67a690d8010235dacb923c5a5469bfcf06d3ed42d12b0a784d307122e38d7d2bac54d78b966b4974a81dd4b4fc8c14dec886e9ffbdf90dbb9983e95c53adf2d9e65b03e0f1da20520eb6b29ee524f1dbb7324f4671c558b18bcd85ca4de77d35d00e579fcfc457165f952c2946375baec44371da0bfd19294d0cbf2f24eee53fb2922453a9c5f5279b77fa402b795072fbe22379b3b3b1e8f8072d6d4174640ea0775b36745504f2680c9b416ceaeb479a1aeebc25089f5c82bdecee33bbc5143c2ac20ccbe83f7e262894aa4180f30f8ddf6b0ecefa3c5e2a0f6a61a1f23638a2c4f96f7ca848c210ace78c2914e590a2a326aa5c1c92b9dae971a0932fdbda652439901937c9968a1e46058829d06f771d0a98f9d76243ff147fbd9c12ef24b9bc530d8a5f461eb2ec9d7074bf19650703f9e5269cf57ba777fa4f98dd0d7f7646a777b420ca9067cf53947c0f68dfecabc4176aa60e015a24a55c039042f922ae386272f199572b879cec42e994869608ceab62c81e03cf297c571a0edc195ec253bc6e0adea8289982ecf72ede43094507f3770b4897c9257b7e747f6cd518bf9bead9fcdac1ab5d37d04a83070c1ac8881e2ba6d17fa91164b11dff8fd444a6bbaad9809d915c14acebf8563486f5a682fa1218ae6f65e4d94a2600eae59f28b12109f4d63917c29055a72f10c2c4bf5620152d5431362906468be296c42190cf355fb5b44f2983c5a5f3c0c77cdd3502eba1d7e52b15aaa0169c75bfee2024988b89571f549470ea9a4b77cd36037597cb0af16f89c44e43b78690c6325493efcd438f6b28f4fdb22e43e616d5fa76ee0ace4fffb96e87342b6b405ac0768d73d519a080d993968ef9c5b35f49dd1fe1199d8d69d697acaa7079c01540db6d845506ac3cc62193ee68e32eeda49048c201a56bc6782c01e5d69af9f8b4ae0d3609cda75d574e7bc46093764b140757f60db032ae669f212775b7c7b8d70a625847e272bd3114d54aaaf8799e5417b670b797e2a9ea9e1b43c1caed95f7292a0a2cb0174039e75024f4c38673d6d7c29274d4cbedde40452fe1ca1b2db14a1ff5ca751a1fcc4dd16a7321673a20df105ce43dff12370d16620961b8e503a7af41dec3e1560b53aa44f1979f754dcd8b336785b5b539640ee29c8c71a0600b0ce5147353c38026abda7cdc6c2168d58b3e3bd9e6494612669e555e1fc08c0a3417074297e679c7b48cbc553bafd1dd81167dac8bf47fee13541b1cb4d818f6201d6b68e3ac2cb3252d1f2f83251c44d552aae20c17d43e2be37745e0ae53fb47b07622600c2e378fa661e5f3c9e5606214a0afdbb8a77be3d7c800d66f7db24fca790f4989c9ee2c1d7a6f5c4e5eefd91dbb0000868c5a813c54b9c482fd267b72eec2768ac27411084af0a9309f4c312d712808af096f62cea974205b8c8663ad7c61bf8d893b78257a64d1174879c22e11715699c8dda2928862b13b7ed79abb2674cb807e5baa025a5f964feaaa2a9953f77240bbf02cf47af2728514668ebc4d6c5bfedd0bf45489cb9d44652f612cfa31d79509b93cf2565f632042f9a4b09df19e3572c9e81c8226259cadc10d1fc8ef37c2fc2477cb29320529dff6761cafd4cbe088f0d8ad9f92d9eaeb9e9dfb286cd86d606b06dca3aff5c579a03492962a5d250cc1e04a376d6cc6a8dae9428ec622197ab57bab11a230b44062d4373e5130a55c3e0aed9d7b50203c8da35967f669101176989c873a749d29cc642e24573cc6b82048ea1f8397792335e87d185a88eeb6d459f79334f95ddeac723afb28855fed8523c3621fcf4452e48c716daf10161cba52fddd321db821aac21a10943e87be9e284d8b0201155335584243192ea62e899f7bcd47e59d6914a457496b37ac281c2521c7f166595cd708f391094a3a3f122bd62e94e94e8e85153ba2145193d2db23b013bd89840f535698ee8d13d532893be17e4b0b39344d02ebe3aa35431696796962b8a752e75b29dd926589f54497d3653a113339f5f873b27e7c2068941c4573a91fd15eab04ee607c7c63a347736035a8573de8d0dce1e09526acabe12f4237f04d521281c18951e3ba45b0936f8225fa425379265cab0ec24b9295c34693a7cc1a5f80d20f1f1f10207f10f4d413c0200031fb646af66eaf8856b716368acbdd86fedece30b122ead6d12cdbd16cfbc4487f3d06a2bef570a738e9f448c7cd5d39807c97fac88d1a111abae23fda7d075f94fe3bcea83714b9a3e12a4f81da6c667884d9aa32257f421a411b8adace95f85cf2dfc08475654086d365b737a64affbc21c850a326acf8be1a71757dac12d4f9085b9a0e7d0dba1d8220dc9b9641148af5d35ed666e355eaf133439af45bd53dbbc966177749fe5456f138ec6d20c755a85957256de446113a11d10e9bc30c3024584fb57c621aa1d67d2f8fe26bdde3dbb9edfcaacfccf998c058ea6b6a05772208f7ee3926af9adea16c0d21b8c43d4f07c457c36baaa90300da133757b1efd93106a1a5497d558be2e52e4b3d8cd6dac64dbd7534c1a1c17c81e19c7e1e3b3f419277ff741b8c2d6ad6befa772468bbcab9fc16fbe9b74a508cd55f07c1d6ba390c28ece456d7d2eb3b19ea009ec8b824244bc0819da85ac58447250f55c447214bd52d5df491f7d64f5e4cde653cafe76c31e2248566a38db8a514d868b7eddc9a7ac3caeb806cb899c308be23ea4c4da3ec51862c603c1bb05868de26a1f40a87a62fd21b02130d587552f5b22e9a92c269b870842893792d1f1af21a15e42d6e82c77245e9e405358122595c904f87aed8a3f975efe46fb900fe3d67071818bcc9d044f500103f49c25d2411585e7d32d5709eb0a4df6684d13742ec0e23377b76c64f9c034d2f464dcc4739108ade1f772e21bd209cff531ac6926b75a7b7b82e42abe16d92f0bec9d1e9c020cd00daf46ba9b9dc1f8cfcfcb94cdaad9f1865b8be529e7f8a90f434a1696742b8b9482b491d5377cca6fefb49fa329a3d231a82eb58e854be91504014ac0e348287e26ebff42f217dd9333b22855d9243429661b2895d6f6afc4585f25e58d54fd8a51784d4e596729c8316ca685312261af5daf11b3a1d8a8bad9ab4cf56bb7b9e3cbd2571ec6c1dade8170b4b42b50e6b1747df0907579e5ab0c36a0abe4bee44d0953fc030605b6982e193f74264ebe9962bd65e070810c10b4f4202b86cea76ff23ad363ff64353ca3e1e2261dd21c494aa1f7ef307a61852e2020e9894578a6ce96b1c50c6251e3dd210d8875d78da938be938d3939dbc7f3576a486372f85b452fe1f958a3dfbeb2a23e750e239c4ef041b0b44987d8b9a2ea58d7a29a563603924590b918054a42b9c63493083cf5afd64b662df6aa1c53a28d6c11d507ad09fc7bd0ab9c14082ecce32e74d86250fd1d2db704c9c44983da256fe096cfd4ebd5d9c4097bfe7d1949dc425030e4c01820bebacb881adb67d1769310b464a56c66c9eb384d30ec2c29a1a93addcc7736a0b2a13d4326cfc24f57087e29c7a9cf96c546fbae556ffc5abc2b29c2878bf94601b509d18f53c8bafc7e19ea29fc5f7b202ce4313c119642d78a4bc77622d2ef5c83842f39bc91d23d0510c6fe43e4d2aa3a78670c3376de41c248cb1c61d246ba0f644db6a9f503b6d68d6e527b337856f28b80346cd7d72edabae5fec5f84a7f31fa5b987be384e354faf6f7c9a6f92cbb013fef25cc161918bad5120da3688c06c58c0c6a27072c573d41e9336791f21e6ffcebdcc9bdc844c78c508a9233ba92a9daa800a54c68e63a44e51296b7b9ca79fd99931417a7cf48d11d2b5fd1fec1bdb38a42c730df506edcc56774a9f5f63795f7098f06759f36e3e50dd421f44e37226235ee76ea85f2635bf36336e2a5b81bd75981eaa4302cb3532dc4f72b9b3caa72aecf22404980274cd90446945b1c329ac0c06e3f2da07a9a87ab702ec1048ceb15bde337424205ab42f42a0d22455e0ebb2d45866956f67773c0d46220b35d121969178926802c1826b4cf49c0141ae6e4c33577dc254b07b4399859c6739790e961f702b5a96155f100ccad7e9630983c5dc6ab00261740416b9de85d3563c41d46ed00a25d337ce1a4542d9968166fea8b3490a22fcaea22f2fb1f2c584bc4df3433062cb7bfe796b9732d123689985aa3e4c17709d692d653476b025251b63b7e6cef4a6a9e0821bda562b8d9c3fdcdfb8d647359aad1743dc00f23ede2b14bac1d7286753d90ef094ff19feb4c2a9101d1a55e5e55b3581190ede76e7d645a34a75985c7fc883e039ebc35173b278cf7ab65917a65e764f9c3015fe3360e0292360150e1052006ed755c670f3578183f5e8c71200e7ce1e2a6cb4b666b2ed00a844d05921e9f4609851b5ece08cd0f742543b3e808b7116cb6845292a36daf9fbfb491c74e48663059c53ef7b0a8272b38824e7c208327e05c4f31aecfed290e9acbbbc7255a241415d861c542963bfc88af486d7a944e275e6391e71ec065ed410b1e1081461e9b48edaaac8cb79bb6630ec011b685e0e039a5276ece047cde8738bc6d00a039d080026d42427783519885aa1f7cacab894aab2744e62d25d528e5a2b543de390630de7f20d8bf7a0975613a13c5c82323c4e19b79934cd0dd69b7dfa344674a10ca5b66e508117972dc76a257e428e710025f79e8a27defbcd7fcd36d3fcc5c0eefb939f4db409d0807d63833c712f428e1c39389726a668e29e47fd47b02df17c54c84663dc5b0bbafb57ab9e64b643e3421570841b79c31b46fc3da35e2bc570011a1852d642d1edeed540b62d5f3d75e1ac9cae3c6650a637bc55327627851ed7f9590bc8a1a6f950322b13e", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) 18:48:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) 18:48:18 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r3, 0x6609, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x305080) bind$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0xfa, 0x40, 0x5, 0x2, 0x4, 0x6}, 0x6}, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0)='threaded\x00', 0x9) 18:48:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:18 executing program 3: bpf$PROG_LOAD(0x3f2, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) 18:48:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) [ 286.341442][T10205] input: syz0 as /devices/virtual/input/input35 18:48:19 executing program 3: bpf$PROG_LOAD(0x3f9, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:19 executing program 3: bpf$PROG_LOAD(0x3fd, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) [ 287.137493][T10257] input: syz0 as /devices/virtual/input/input36 18:48:20 executing program 3: bpf$PROG_LOAD(0x3fe, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = semget(0x2, 0x1, 0xfb603d8de80389a9) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f00000004c0)=""/205) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) userfaultfd(0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, &(0x7f0000000200)=@ipx={0x4, 0x6, 0x1f, "77accd03839a", 0x1f}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) dup2(r5, r7) 18:48:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:21 executing program 3: bpf$PROG_LOAD(0xf4240, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:21 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a5"], 0x1) truncate(&(0x7f0000000240)='./bus\x00', 0x7fff) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x8fff) 18:48:21 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r5, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x2, 0x81}, {0xa0, 0x4}], r5}, 0x18, 0x2) r6 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffff85c, 0x440000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000180)={{0xcc}, {0x0, 0x3f}, 0x0, 0x0, 0x1f}) [ 289.149819][T10305] input: syz0 as /devices/virtual/input/input39 [ 289.194397][ T26] audit: type=1804 audit(1573411701.827:35): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir288132521/syzkaller.cNp6R1/13/bus" dev="sda1" ino=16817 res=1 18:48:21 executing program 3: bpf$PROG_LOAD(0x2000cf90, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 289.406978][ T26] audit: type=1804 audit(1573411701.987:36): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir288132521/syzkaller.cNp6R1/13/bus" dev="sda1" ino=16817 res=1 18:48:22 executing program 3: bpf$PROG_LOAD(0x2000cfc0, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 289.550746][ T8963] Bluetooth: hci0: Frame reassembly failed (-84) 18:48:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:22 executing program 3: bpf$PROG_LOAD(0x2000cfdb, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="b9fc0a00000f32b9800200000f3266ba2000b000ee9af80000000901b9c70a00000f320fc77698360f01c8650f2169660fc772ae650fc769b2", 0x39}], 0x0, 0x0, 0x0, 0xfecb) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="6700000404000000010001006c0b28d78739a6b85970aebdc8b7e797f328ad53ddcc4f24e6af96d1b23a136ac25556eeb8254a846fb15bc8392b380a160e767d9b9878d2703d4419b499d484b1f639410a2387aab1495a3f65b68027f2d3bf9be563665f75686f1515f7000000000000000000"]) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r6, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) connect(r7, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = gettid() r9 = gettid() sendmmsg$unix(r7, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x70}], 0xfd, 0x0) syz_open_procfs(r8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() fstat(r11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r12, r13, 0x0, 0x0, r14]) getgroups(0x7, &(0x7f0000000580)=[0xee01, 0xee01, 0x0, 0xee01, r14, 0x0, 0xee01]) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) mount$9p_virtio(&(0x7f00000004c0)='+_\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x800, &(0x7f0000000680)={'trans=virtio,', {[{@access_user='access=user'}, {@uname={'uname', 0x3d, '/dev/kvm\x00'}}, {@privport='privport'}, {@dfltgid={'dfltgid', 0x3d, r15}}, {@access_any='access=any'}, {@msize={'msize', 0x3d, 0x9}}, {@access_client='access=client'}], [{@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@fowner_gt={'fowner>', r16}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#cgroupkeyringem1vboxnet0}posix_acl_accesskeyring\xb5userppp1'}}]}}) r17 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r17, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000000)=[0x10001, 0x5, 0x1000, 0xfffffff8], 0x4, 0xffff, 0x779a, 0xffffff80, 0x9, 0x54, {0x9, 0x8, 0xb34, 0x69e, 0x0, 0x101, 0xfff, 0x1, 0x40, 0x8, 0x40, 0x57, 0x78d6, 0xffffffe0, "f322fb6d2a2e250e649651f42e9bd720a02705917a6236ca1622795f920a980b"}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) socketpair(0xa, 0x80800, 0x1f, &(0x7f0000000780)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r18 = userfaultfd(0x0) ioctl$UFFDIO_API(r18, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r18, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r18, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r19 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) accept$packet(r19, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup(r21) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) ioctl$sock_inet6_SIOCDELRT(r22, 0x890c, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x25}, @mcast1, @local, 0xffff, 0x80, 0x7, 0x0, 0x3, 0x6dc04e7d73c8a528, r20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 289.896507][T10348] input: syz0 as /devices/virtual/input/input42 18:48:22 executing program 3: bpf$PROG_LOAD(0x2000cfe0, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:22 executing program 5: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 3: bpf$PROG_LOAD(0x2000d008, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x188800) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x480, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0xffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x39}]]}}}]}, 0x38}}, 0x0) 18:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 5: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 1: syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x24000001) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x10002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') shmget(0x2, 0x1000, 0xa8001000, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') 18:48:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x200000000000000, 0x0, 0x0, 0xfde4) [ 291.546041][ T17] Bluetooth: hci0: command 0xfc11 tx timeout [ 291.552730][ T1527] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 291.609326][T10392] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:48:24 executing program 3: bpf$PROG_LOAD(0x2000d038, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 5: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x285}, "1b49692d4cecac57", "19a1d329f55d119e7469aa248ddf413c", "22eccf15", "6e336adfe4ff53a8"}, 0x28) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) ioctl$TCFLSH(r4, 0x540b, 0x11eac000000) write$binfmt_elf32(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/406], 0x534) 18:48:24 executing program 3: bpf$PROG_LOAD(0x2000d053, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:24 executing program 1: lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3e76fbd38aa2223f) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) write(r0, &(0x7f0000000000)="acf3d9f5765bd0a0add532251a85c24c7499c66251bc66b3a59e7f9e77ce07c0d108cbc5b4d29f49f1bd3b8a7d7ac8bf19fa20f98aaac1d3abc16c740ea69fcf71b141a6371655cadfe4f1c77bf912d7941cccf7b0241e208b0caf1d01959cc6a2bd4a60796e917c21d942b93ba45c4dfbb68fefbcff05cfa278a4e9fdb51062191961d6a3b27ff5147d1854e732a862554245bee9f73871c22748b4f995b59780d6d917990af595fb7cb6d128e6", 0xae) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) unshare(0x40040400) 18:48:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001ac0)={0x0, 0x0}) fcntl$setown(r0, 0x8, r3) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='tmpfs\x00', 0x0, 0x0) getresuid(&(0x7f0000001840), &(0x7f0000001880)=0x0, &(0x7f00000018c0)) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000100)='./file0\x00', 0xeb8, 0xaaaab87, &(0x7f0000001780)=[{&(0x7f00000002c0)="d23d82852b3e31cf9082b60db0158b1942ef4393ce0d6239c9b3b24ab6602dc7a71cc2ac9b1220e596f3051618b0246d375d9e035a6b881b5c577c2deaffd205b8a171e89e90310d44e667c4e5f1988cd5da6e89bbd78d06eba7647c392149a20b3a363cb87935cbcc98e5b5f1721baa234257139122b0642754e6cbccb4131db3d90b7fec0663deecf88fcc59182fefa57cc32ab4762b9ff55d8ab976e53fcbc23113c29a837a3bfc7b1bc0d3a55308f9cd81d29228fbaf9aa956c6ae9b33f4be32903c7e40c620677e17e6210b73efdf1426ea1f570eef0a99acbbd8c38714ead7a11da151005209c818059a93056506f76135bdc1280b06c2a95f", 0xfc, 0x8}, {&(0x7f0000000400)="bffec33e706c0822dda758a85c9d09ea0fa329ee0d92da6ae1f276708c899274eeee432569390d1e177ce9173e86f7046462f9b54798a809148a3d79f2dd7f6c76c250899f5bf595c9e82c0f0e94992cc3c3e550df51b50ac63edffbcc53ad26f254a3627dd00d24c2557a24e57e405e", 0x70, 0x5c}, {&(0x7f0000000480)="8cf37974672edf28664b66a18884c0bc9a09fc7bd62b556c83447b532601ad40339f8d8722d921aca5c0f354fb9bc480ba563233d6b7aec63982969783f089e0e6da835f9f2445e0bdad797de4b14a5e597cda55e346ff12b46cd1bf", 0x5c, 0x101}, {&(0x7f0000000500)="c0276cda96ba882f8f358d2d2e8b8a306fef055329599610e6ed4a87229269233fb992827f429f08d6959007083cbf99396168e3bdeeda1b3d09ed6d57aa8b86a4244212bcab7aa2eb9e10aa1765a5b638822faf8521f86533d57764080c118157fe83cd385043f28d2a7482424e04da86121403986b76a86d9ef0f70629e14b161e5702f4b4e16208c2bbdbc9f83ebc9640f500b6dc2b308257db238342cc0141ecfac63466c3f47953e30cb161b1d205313a94ee66c2f805b1aabc6c0eb51d4714f4fcb451bf398ec69332cc2b63629063dd8433c7defb5f18fea104f93e6d0df466406e4d63", 0x1a8, 0x6}, {&(0x7f0000000600)="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", 0x1000, 0x9}, {&(0x7f0000001600)="fd704ff54eefc273a633e66a95f8b59a8675d1fb3888068111bad4e20e585c9626357a8de3fa24021635fab7771ed97679499c16f7ba23b9d4f416b2a8f28996a1f18b1e88c3a42ea176e9a5bb612773543934b2b11308473247b2f6bc6f94a4c4a722", 0x63}, {&(0x7f0000001680), 0x0, 0x8}, {&(0x7f00000016c0)="8bedd936d73c278bacf51b89b4443ea8b365873af482fdf70a578980bff53fb4902ca4b282c87c3896713a828985208ea8d2bec8c60e7da9f5180635d3cb1865d2eb2fdd25a90b6fa48a28f6fbb8ee4a84d27ff6f78554bb1e16be31657df38ed5b3aa88bf7a0dfbf1382e6ab86c70a0597b118856e7d553ce5f1a9c011ed73641bdb473751eea353640e2623c98d8cc9bd6582e", 0x94}], 0x1000, &(0x7f0000001900)={[{@allow_utime={'allow_utime', 0x3d, 0x80000000}}, {@discard='discard'}, {@allow_utime={'allow_utime', 0x3d, 0xfffffffffffffdf7}}, {@errors_continue='errors=continue'}, {@dmask={'dmask', 0x3d, 0x280000000000}}, {@discard='discard'}, {@fmask={'fmask'}}, {@dmask={'dmask', 0x3d, 0x7}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x1, 0x61, 0x32, 0x33, 0x31, 0xdb0de0dec47467e9, 0x64], 0x2d, [0x0, 0x0, 0x32, 0x61], 0x2d, [0x65, 0x32, 0x30, 0x66], 0x2d, [0xa, 0x37, 0x34, 0x33], 0x2d, [0x35, 0x34, 0x38, 0x32, 0x33, 0x65, 0x66, 0x34]}}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r4}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000040)={0x30}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fallocate(r5, 0x0, 0x0, 0x110001) 18:48:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, 0x0, &(0x7f0000000300)=0xb301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 18:48:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:24 executing program 3: bpf$PROG_LOAD(0x2000d058, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, 0x0, &(0x7f0000000300)=0xb301) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 18:48:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 292.418438][T10436] IPVS: ftp: loaded support on port[0] = 21 18:48:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KDENABIO(r0, 0x4b36) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0xdb, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:48:25 executing program 1: lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3e76fbd38aa2223f) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) write(r0, &(0x7f0000000000)="acf3d9f5765bd0a0add532251a85c24c7499c66251bc66b3a59e7f9e77ce07c0d108cbc5b4d29f49f1bd3b8a7d7ac8bf19fa20f98aaac1d3abc16c740ea69fcf71b141a6371655cadfe4f1c77bf912d7941cccf7b0241e208b0caf1d01959cc6a2bd4a60796e917c21d942b93ba45c4dfbb68fefbcff05cfa278a4e9fdb51062191961d6a3b27ff5147d1854e732a862554245bee9f73871c22748b4f995b59780d6d917990af595fb7cb6d128e6", 0xae) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) unshare(0x40040400) 18:48:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xeffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f000033efc8)={0x0, 0xffffff7f, 0x0}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002004e20e00000010000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c8fa2f78ded4414b622a5446fe934559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c"], 0x139}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) pipe(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 18:48:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000001200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x8000) 18:48:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 293.299229][T10504] IPVS: ftp: loaded support on port[0] = 21 18:48:26 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x6}, 0x0, 0x44}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000040)={{0x2, 0x4e22, @remote}, {0xd, @local}, 0xa, {0x2, 0x4e20, @loopback}, 'team_slave_0\x00'}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) dup(r1) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000100)={'ifb0\x00', @ifru_names='bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_ifreq(r6, 0x0, &(0x7f0000000340)={'bridge0\x00', @ifru_ivalue=0x200}) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) r7 = semget(0x0, 0x3, 0x0) semctl$SETVAL(r7, 0x0, 0x10, &(0x7f0000000080)=0x101) semctl$GETVAL(r7, 0x4, 0xc, &(0x7f0000000280)=""/192) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x3000)=nil, 0x9000}, &(0x7f00000000c0)=0x10) [ 293.347087][T10518] input: syz0 as /devices/virtual/input/input51 18:48:26 executing program 4: mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xeffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8beffff0000000200010000030005000000000002004e20e00000010000000000000000e8ee2a20c81e5bcd20f26da342882e4189da06b5ddfbba41e0e7a605cae91e7d8c9c211c7ddba5ded1f6ecb3d3654daff905f6cb9be0b6b530ce576d07b940a5b7d67140393890b8fc08803e4b5fc2a44da4fa31288a64e950a95978cf0fa0f4515e45acf64c63e23822a493d878dac5c8fa2f78ded4414b622a5446fe934559b7a9635df6c786cbd0a2705cf98318da11f787bc3c290caa2c3f22be876f8838ea59e3a87f10159efd4bfb825f8c412ffafdb4f4a6a685b020a9e96fc4681140744c55712ce2063af46c6f9dfe41944e2a0c248b43d5c4720c1d78e8"], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f000033efc8)={0x0, 0xffffff7f, 0x0}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x139}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) set_tid_address(&(0x7f0000000300)) pipe(0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 18:48:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket(0x10, 0x3, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280)='keyri.g\x00', 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$revoke(0x3, r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r5 = accept(r0, 0x0, 0x0) write(r4, &(0x7f0000000100), 0x1ede5) shutdown(r4, 0x2) sendto$packet(r5, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) r6 = creat(0x0, 0x1) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000140)=""/108, &(0x7f0000000300)=0x6c) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="233bdcf37b055c4eff07000001a4c802"], 0x10) ioctl$RTC_UIE_ON(r6, 0x7003) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="00000001"], 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r8, 0x2, 0x60, "0fa7bfe125045942ecd8ab32c5a6604a4695f872990c2404559a0b055af2f806bb2aa5fae370a514e155a2dd16c8352588385e8f9629a34e88336214f97baa6bb46b4367e41dcf911f24fcd3ad9cac4d17735832822af977aae2b9b509015482"}, 0x68) 18:48:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000507000000000000000000000000d93703c9e3231fc116664a780c1c6fcb535c49c27c01bd789973da8a144866ec8fdcdf2e639715cb71520ae187410fdcb222ea8f5ec9f6ed12b276d34f180d7d4ab5622a225fd5b8a14fa1ba68feded355260cf8d55215869cfcb8c222bf1f8ca3f1304e6d7e19b928cb034f95a0676b72474adad42eb0bfc45ac1f090504c872e8591916525a7d259c8a5be1a05ad7c511f199c3ce006feff36677bf5046eced8302bedd80acce4eb31db73bd87f6978195c9", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012001000010069703665727370616e00000010000200040012000800160002000000"], 0x44}}, 0x0) semget(0x3, 0x5, 0x400) [ 293.775044][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.807141][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 18:48:26 executing program 1: socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x97d9448befc253be, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000580)={0x3, 0x0, {0x3, 0x1, 0x4, 0x1, 0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000600)={0x0, 0x0, 'client1\x00', 0x9362c82f4615f805, "9af9b04e00898829", "31412804d3330449e606d4022c6669848ad1d9bf02170c2ed6c2c8a32616a661", 0x7, 0x9}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000200)="919382b28a20d82aff23465ee56bf10b7ceb78144a45dfcfb32ae859ddd73363c04e6027b5c79ac2c50e3952c1f4d262c536dbc17199bea3a60533023d25c89adac3d6ec8d0abdb8649c5c7bceede802016b819e32c5bee3faff7b59d3f9499b6510b25a5c5341aecb6dc0de9b4ebca54131c65e6bf70e8f16428a3874de0586c4ae82c16abb71a0487faf0283972a59391d110820906a21d78d4d01c7"}, {&(0x7f00000002c0)="effd96703c736eb5b4143c79ce3ba72d91f2cf22f766a6853ff5d1648f84f9d34b2759d42356c03016bad18f68eb6be908c31def71d92c4be165cef9afe878645b15b6cf68449fca239f0f525cc0c972621f7256cfcdc1837bb187bd0a1a7ac6caf40fde6e14bb0664682cd3c5004eccae9b6691196b9b385b8afd19b5d30721e998b20fa2e1f50671419140a21773d9724855e9905e8b62701d910e42f0684ff48468454d79ea2d45ec5cd56f3387f45e38"}, {&(0x7f0000000100)="80e73ebb"}, {&(0x7f0000000380)="efe9efe364016544d273525dcc6afadac201d17a2109088c2cbe4cd587838477c3de43e6641dddb2b48921f3e8768d5b72d4db94653e9ba4836de5ff597435eaa59df05cdb6bb94f4ec16ba50df47539ee25a0c876f70313c8a8f0a3b4495c53568b21b28d3e1a7d"}, {&(0x7f0000000400)="f7b54d3d096f72ba0d15f532d22454932e333e52aa1d1f9312cebe93bda418fbbf2fe232ee73e239ce665f4873f15c09df02ee3ce5dc5110e51bb18ee2d7c5016abc6eae47d7df7ee2f740f48379ce516e1d2a38671690d7ccabf6bf94084697b4fbcbde267e1b7c5bf8921972a7c1b8bf5ec65c9325098ef3c662880a3dbe7499d35be502428731e54f51cf9128e61803a3491da1835ad01888e0ea5b5edcabe76101e9a8d3e0f56ccfdd16af89b1430687b5c3d8b1f56592c88231bd54c78111e3c0d6466c9640081c3fdf4f4b722dc8f91b78ca803b6fb6583b2a28"}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) [ 293.841887][T10548] input: syz0 as /devices/virtual/input/input53 18:48:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:26 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) setpgid(r5, r6) write(r1, &(0x7f0000000240)='h', 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r7, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r8) keyctl$setperm(0x5, r7, 0xd031010) sendto$inet(r0, &(0x7f00000002c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc8a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba871b0c6eb444a3b60cb7cbc608c98977e333fb899f54e8d75306ff4331cf99b47cdfe34a8a0859ad5f672bb2a8fabc8ebd63dd3a245dc31669cae61ad9c8ca3367f495c87811cf7a2eea5e8ed1ab1cc2d9fface0970d4aae1e0e57da133dfe06784156c55160ab0eabb8cb893867bc9ac52fc73e6cee4e8941304a27", 0xc9, 0x11, 0x0, 0xffffffffffffffb0) 18:48:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:26 executing program 1: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x93b68ae868382efe, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0xfff8, 0xc, 0x9, 0x6}, {0x3, 0x1, 0x9, 0x6a879b6a}, {0x3, 0x6, 0x1, 0x200034d}, {0x7f8, 0x8, 0x3f, 0x81}, {0x2b, 0x9, 0x5}, {0x7fff, 0x0, 0x4, 0x3}, {0x8, 0x8, 0x1, 0x3}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) 18:48:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 294.232450][T10582] input: syz0 as /devices/virtual/input/input55 18:48:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@loopback, r2}, 0x14) sendmsg$key(r0, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x78}}, 0x0) 18:48:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:27 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) setpgid(r5, r6) write(r1, &(0x7f0000000240)='h', 0x1) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair(0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r7, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r8) keyctl$setperm(0x5, r7, 0xd031010) sendto$inet(r0, &(0x7f00000002c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc8a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba871b0c6eb444a3b60cb7cbc608c98977e333fb899f54e8d75306ff4331cf99b47cdfe34a8a0859ad5f672bb2a8fabc8ebd63dd3a245dc31669cae61ad9c8ca3367f495c87811cf7a2eea5e8ed1ab1cc2d9fface0970d4aae1e0e57da133dfe06784156c55160ab0eabb8cb893867bc9ac52fc73e6cee4e8941304a27", 0xc9, 0x11, 0x0, 0xffffffffffffffb0) 18:48:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000003c0)) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="640f01c366b8ad008ed00f08c4417b2c020f3548b800000100000000000f23c00f21f835010008000f23f80fc778fc0f350fd8060f30", 0x36}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x80000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080), 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) [ 294.755785][T10611] input: syz0 as /devices/virtual/input/input57 18:48:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:27 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) msgget(0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) shutdown(r1, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20281, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000140)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000980)=""/34) pipe2(0x0, 0x0) [ 295.097821][T10635] input: syz0 as /devices/virtual/input/input59 18:48:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000006b41e70a43beb5ef5c1fd44b790952c130f905a616cdbe6c0287a2daff1aeaea6a900aa1f018112e378ce92915cee3b87c8a4e6e8f13cfc32d953c30d4c0666f96fdefb319d38387014cba63e59b55cac096ceb2f810b8e5e51a0af70d5166"], 0x0, 0x0, 0x55, &(0x7f0000000100)=""/85, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000440)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1ff, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 18:48:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 295.546982][T10608] debugfs: Directory '10608-4' with parent 'kvm' already present! [ 295.584919][T10662] input: syz0 as /devices/virtual/input/input61 18:48:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nogrpid,noattrr,\x00;']) 18:48:28 executing program 2: ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={{0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, "43a4aa0223c9777c270174ad69d4eeb1529ac8c5895839be2f51f99cfe6c7c08d57453b1895a299b638be928d890fc167211c04ebbc7397a25c432fb8d073e6a9009e83f4e2bd525ad502afaa5beccf516af349356faf54e32c4d812cb7cfb098c2b823fe2efc1c68797ba428f3f30000000000000000100"}) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 18:48:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 295.971622][T10688] XFS (loop1): unknown mount option [noattrr]. [ 295.999809][T10691] dns_resolver: Unsupported content type (129) [ 296.012801][T10693] input: syz0 as /devices/virtual/input/input63 [ 296.081398][T10702] dns_resolver: Unsupported content type (129) 18:48:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 296.222869][T10688] XFS (loop1): unknown mount option [noattrr]. [ 296.338145][T10676] device team0 entered promiscuous mode [ 296.383373][T10716] input: syz0 as /devices/virtual/input/input66 [ 296.403922][T10676] device team_slave_0 entered promiscuous mode [ 296.453189][T10676] device team_slave_1 entered promiscuous mode [ 296.483299][T10676] 8021q: adding VLAN 0 to HW filter on device team0 18:48:29 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote, 0x8000}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt(r1, 0x10001, 0x9, &(0x7f0000000040)=""/213, &(0x7f0000000180)=0xd5) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000000000001001000081000000ec00000000000000"], 0x18}, 0xf00}], 0x1, 0x0) 18:48:29 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(0x0, 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000a00)={"c5c48455550c5f15d6a1e54e8434d392b1ee8ce0d8cc789e6f9f5fff37ea66e3ca2631545d2fac4abc17eb7ac022137c40ce9850330e934af106b6d2b7b23ab19ac6157f94543f7759d7d90386c0a66d13d3e29cd3c6af3aacf0403dfd57a8f8135dc35686b0919abd7055617083c2d27e3b8f482c0f739c8d5b6b8550e111346a569c4ef7974920a0d7d047f3aa354d1ecdd6032a60c603c404884d346b4f5f2a11da56be949d0f7631fc8cfaaad5c4a62696e3e255e89ea6a55cd3d7c072f17a1259489e5c8c35e774bdf939b28c750dbbcabb6f8243e7ddc524c53053d507b8d8841c66088bb387c003a38c6b56c6d3943436d3bfaee3a64f70cf0786eeefcb20c20d6ccab79d6b56c389e2c2036dd5c530cf9375fcdfc5c64ed37d249442e633724fc2a1c05ceb01c61a1ec83aa77af2a86431dbd70b1f57d83b558d5b7f991e59e4de3d94ecfd0d1ee35e28b03fc0c4edf919b649dbe0bee545c8a523de067f6d4c93585430d396a84a8128244e7880b3fb27d3e25bbdae3248a60f3835a8e5c1b8ec9054f0b28c3b8f3bb8805756908d313f77fe38934b57b1626bf795f20ded88ac5593dfd331d6ee199ae59864a789c50a0716705a5066680491ae4865f94eb777f1af9cecf98eba79e57ba4f056fc2faafc2b6b876323a192fad3e9e2328191df6def6cc8a74e7bf7032a69810371780f6035b205461f06194bee219f01225d7770067d4b8368b6e76cad966e9c68b3fa9129196dc06422e56a72c96dd97c436c97fc9c0fafbe9a70db131c4ccc0c16e37b3dd16b47c80c8dbf457f5eeb2a0bd1bd121d55092b7a421af41520af3a14d021ac7a5b687be522b7077604441a420679cc1f7dc60c6a7a9c38d5cc925f45180bf6c3d03296df35e80cee74a9d5112ad31d9f73a929f26ab98b78034136f5c780db45f6685ef241766a1b1e6b1022867fee580f6d4edd7209d80a69d5a9c14f5c8f40d0146fd345c293f8f528fd0f769ba1d3e1afb2d7ecc7642d84f5427bc7eb8d3df8587fdf9c8a1ae6fb8da5f4c7f41dcc4357aa174bc748f2b7b936acf1a571b37051f582e64662547b5b5a300dad70abe401d31ab0ee0f954836e504b2600fac22a7563f765a5e28a9c8e5070f87c7108d2bba9dd471e07f853794ecc5b07ed9613474efee45e3cbf4d1e8731f6f2fc4916eeb5477e38618149221fdcb7fa0b96dc6d93300310ac036e2bca6de88be17d01ef15da72524dc3c3414aeb8035892e6cb9a8a8e0ede1f083fe121e6d968e2c5974db5a86f9087e11c0e07ed02df3cf64be47e80c63925975d2514335b6cd952154bbc1bf2b52adf0c6529d9d05acf16f5b2178395e7df8ad6223d19a38d63d6785ef1fc69100b79a92325e358f75f8213f858e725fc0c1246ad2f0c1cdb3fc933e7ba971de2707689bfe56cc62cb0179b090d83435d3b"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) r4 = getpgrp(0x0) setpriority(0x0, r4, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x3, 0xf8}) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 18:48:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:29 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x24000) r1 = socket$netlink(0x10, 0x3, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r2 = socket(0x0, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001b40)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) r5 = socket$netlink(0x10, 0x3, 0x0) pwritev(r5, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r6 = socket(0x0, 0x2, 0x0) close(r6) r7 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001b40)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r8, 0x25, "3953935835ce100469c63eebd8fc783ca6685498b28e0330f686263ea5f89ea69abeddf76d"}, &(0x7f0000000100)=0x2d) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581fffffff00004000632f77fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 18:48:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x0, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 296.865984][T10739] input: syz0 as /devices/virtual/input/input68 18:48:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:29 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote, 0x8000}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_dccp_int(r3, 0x21, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt(r1, 0x10001, 0x9, &(0x7f0000000040)=""/213, &(0x7f0000000180)=0xd5) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000000000001001000081000000ec00000000000000"], 0x18}, 0xf00}], 0x1, 0x0) 18:48:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x21, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 297.296648][T10771] input: syz0 as /devices/virtual/input/input70 18:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) 18:48:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000600)="ef5112459ae351749958ce983244fe683c9b49fc7624d0612e1f9732da3b18ef5c88ae14eccfdee7415ad01b2cc405347ab7c00fbcd3d70c0496613ab7f341541849489929721e53", 0x48) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) sendto(r2, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x20040080, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x6, &(0x7f0000003700)={r3, r4+30000000}) pwrite64(r0, &(0x7f0000000140)="ea2b7b9df68095a06c968d31617992ecc1f7eab7dcee8f1e55d77427fa08368c4732bb292d100ef65c9c65bb79b5ec5e1e8df7ff638d1e7a8c2fadde9f0d1d2ba3c3fd997e59a53545a50d450d70d8de43332ecb75d0d618f51d7ea3fb0582a5929b8944e36a66cb14d3b95e835685c0872f597dba67fcdd79abe7d180321d0c140d58d51c6c5a854f2e2d9bbc7f0accdf1ea4521161b90e76731b0d893d6c97a7f8ce0d300779e176cd5bf69ae2aad60d9642e76b1e1f60372d", 0xba, 0x6) 18:48:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:30 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './bus', [{0x20, '/dev/media#\x00'}]}, 0x16) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() r6 = gettid() sendmmsg$unix(r4, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x70}], 0xfd, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r6) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) 18:48:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x26, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071") r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x94b2b649ceaba983) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x2, 0x4, 0xffff0000, 0x7fffffff, 0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x7, 0x203, 0x0, 0x0, {}, [@nested={0x8, 0x7, [@typed={0x4, 0x1}]}]}, 0x1c}}, 0x0) 18:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 297.743061][T10805] input: syz0 as /devices/virtual/input/input72 18:48:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x30, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 297.813900][T10815] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) 18:48:30 executing program 4: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000002c0)={0x18}, 0xffffffffffffffc5) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/59, &(0x7f0000000280)=0x3b) open(0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000400), 0x8) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x200, 0xf0, 0x0, 0x8, 0xc8, 0x2}, 0x1c) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$inet(0x2, 0x2, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) acct(&(0x7f00000000c0)='./file0\x00') 18:48:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6a, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 298.080078][T10829] input: syz0 as /devices/virtual/input/input75 18:48:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 18:48:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xca, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 298.547334][T10849] input: syz0 as /devices/virtual/input/input77 18:48:31 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000380)) r3 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/67) truncate(&(0x7f0000000140)='./file0\x00', 0x3fc) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="01800000", @ANYRES16=r4, @ANYBLOB="000229bd7000fcdbdf25010000000000000009410000004c0018fffffffd696200"/98], 0x68}, 0x1, 0x0, 0x0, 0xbc23131f02fae4c2}, 0x485) r5 = getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname(r7, &(0x7f00000006c0)=@ethernet={0x0, @link_local}, &(0x7f0000000740)=0x80) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) write$binfmt_elf64(r2, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xa4, 0x3, 0x0, 0xffffffffffff7fff, 0x3, 0x6, 0xbca, 0x0, 0x40, 0x1f4, 0x1000, 0x8, 0x38, 0x1, 0x0, 0x1, 0x39f}, [{0x70000007, 0x0, 0x0, 0x3, 0xffff, 0x9, 0x80000000, 0x18000}], "578b7b954671bc90d570383868ef6db5e2b0395bfeceb343b5b58667c0ad46bc45bcace5acff0733899edabfda64db96923a800722dc320a01298d2aab3d485018d7b087f1f4b37724b826c3e4d088c60ebf45f8f4117886f33725b3e1807e0a0e8e61a44e757c7508b39b2434346b8e421769", [[], [], [], []]}, 0x4eb) sendfile(r2, r2, 0x0, 0x40fdf) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r1, r8) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x5fc}}, 0x4000800) 18:48:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 18:48:31 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$P9_RLINK(r0, &(0x7f0000000100)={0x7}, 0x7) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000040)={0xfff00000}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x208202) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) 18:48:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x300, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:31 executing program 2: socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x230, 0x19, 0x2, 0x70bd25, 0x25dfdbfb, {0xa}, [@typed={0x10, 0x2d, @str='syzkaller\x00'}, @typed={0xdc, 0x6f, @binary="b07359b1677e47a310e029775a5dff113d5dac06a665a181244da06cf2ab965272ff12f9dbf8cfd101f07b295ee53c38c61db209329952948cacf84bfcfd75784e1b78e73e063770177154d732d87b23d78589471d05e4fb089de8da457d152557325c1bc29fbab6c2fd23c4c4bf13a98d79e7edda25e5e86e08c2e4fbcad9db52e3df55b90184e659ba6d15a05d28767a469edfa9c45b4e80746d2a7c83736cbe6f253267d3848eb2628ebb35ad8c7a8033d9265ba495b793342e61cb95d7fecb0d6b70f984d6cd5422a2b079c8b8b261f48f63f38a"}, @nested={0x128, 0x1c, [@typed={0x8, 0x41, @pid=r5}, @generic, @generic="1bf5fc58af3d2f97e0e3d2c4d4cca58a62ca95fede0fe71d49682cdfbac6a4a3e28ebc3588713aa09f9aad3cc610a6943b01ab7c3eb6dc63f06d5e023e4c9e39f65575fc7c9bcd1eec2e97e806c0bd05fa15aa938a89bb95fc925e2a74a91140a087508ae020226935b83cf7372bc9a6368334201b51c81eb363153e6619c409677df9708860a81fc991df0a60954ea3acad49e012ca74326d81ac36f48deaa4afbc9d69b827365bd24f335a47562355c8329af4bcf4c5ffdb3dd60400da4c", @generic="4e31784f717b178479193446d54383476a1c5b87c5715b03417827fec3f8d5de6097536bc57248b1d99ed3f1588de13fcc150eafa3f3055fb660596e27d455b2cb0c9161797330cdc579c2a4b759101696715935e5", @typed={0x8, 0x62, @ipv4=@local}]}, @generic="6aa99b64c7783de1"]}, 0x230}, 0x1, 0x0, 0x0, 0x8050}, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e24ef60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a745f801ff110026e6d2efe31ab7ea0c34f17e3ad6ef3bb62203099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7eaa49c62ba0fe52fa65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b802000000000000ea334d8323893c5337669dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63000000800117009a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390100a9ceafd07e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00001800632f77fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 18:48:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3a0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) [ 298.955723][T10875] input: syz0 as /devices/virtual/input/input79 18:48:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3e7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:31 executing program 4: io_setup(0x1, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='GPL\x00', 0x4) io_getevents(r0, 0x2, 0x30b, &(0x7f0000000300), 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="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", 0x1000) io_destroy(r0) 18:48:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3ec, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 299.443414][T10905] input: syz0 as /devices/virtual/input/input81 18:48:32 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_DESTROY(r4, &(0x7f0000000000), 0x4) 18:48:32 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'eql\x00', 0x1995b4f6ad9742f3}) r5 = gettid() r6 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x70, 0x40009e4}], 0x1, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000000)='net/dev_snmp6\x00') accept$netrom(r7, &(0x7f0000000180)={{0x3, @null}, [@bcast, @rose, @bcast, @bcast, @default, @remote, @bcast, @bcast]}, &(0x7f0000000100)=0x48) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4000000}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}, r8}}}], 0x28}}], 0x2, 0x0) 18:48:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3, 0xfffffffffffffe97) 18:48:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 299.603730][T10913] FAULT_INJECTION: forcing a failure. [ 299.603730][T10913] name failslab, interval 1, probability 0, space 0, times 0 [ 299.708794][T10913] CPU: 0 PID: 10913 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 299.716737][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.726793][T10913] Call Trace: [ 299.730108][T10913] dump_stack+0x197/0x210 [ 299.734454][T10913] should_fail.cold+0xa/0x15 [ 299.739073][T10913] ? fault_create_debugfs_attr+0x180/0x180 [ 299.744890][T10913] ? ___might_sleep+0x163/0x2c0 [ 299.749752][T10913] __should_failslab+0x121/0x190 [ 299.754699][T10913] should_failslab+0x9/0x14 18:48:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f5, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 299.759208][T10913] kmem_cache_alloc+0x2aa/0x710 [ 299.764064][T10913] ? __kasan_check_write+0x14/0x20 [ 299.769179][T10913] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 299.774732][T10913] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 299.780024][T10913] getname_flags+0xd6/0x5b0 [ 299.780044][T10913] getname+0x1a/0x20 [ 299.780060][T10913] do_sys_open+0x2c9/0x5d0 [ 299.780078][T10913] ? filp_open+0x80/0x80 [ 299.792942][T10913] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 299.802601][T10913] ? do_syscall_64+0x26/0x760 [ 299.802620][T10913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.802633][T10913] ? do_syscall_64+0x26/0x760 [ 299.802657][T10913] __x64_sys_open+0x7e/0xc0 [ 299.813355][T10913] do_syscall_64+0xfa/0x760 [ 299.813377][T10913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.813393][T10913] RIP: 0033:0x413fb1 [ 299.836766][T10913] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:48:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)=""/237) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4cb, 0x0, 0xfffffffffffffff7, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe], 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$netlink(r4, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 299.856360][T10913] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 299.856374][T10913] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 299.856383][T10913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 299.856391][T10913] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 299.856400][T10913] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 299.856408][T10913] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:32 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0xc0884123, 0x719000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r1, &(0x7f0000000080)=""/144, 0x90) 18:48:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) fallocate(r3, 0x4000000000000010, 0x7a9a, 0x7fff) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffa) [ 300.122008][T10925] input: syz0 as /devices/virtual/input/input83 18:48:32 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3f9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:33 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000080)=""/231) [ 300.391575][ T26] audit: type=1804 audit(1573411713.027:37): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir288132521/syzkaller.cNp6R1/29/bus" dev="sda1" ino=16519 res=1 18:48:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3fe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 300.490089][T10966] input: syz0 as /devices/virtual/input/input84 [ 300.524388][ T26] audit: type=1804 audit(1573411713.087:38): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir288132521/syzkaller.cNp6R1/29/bus" dev="sda1" ino=16519 res=1 [ 300.630554][T10974] FAULT_INJECTION: forcing a failure. [ 300.630554][T10974] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 300.643778][T10974] CPU: 1 PID: 10974 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 300.651669][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.661825][T10974] Call Trace: [ 300.665138][T10974] dump_stack+0x197/0x210 [ 300.669501][T10974] should_fail.cold+0xa/0x15 [ 300.674109][T10974] ? fault_create_debugfs_attr+0x180/0x180 [ 300.679921][T10974] ? __kasan_check_read+0x11/0x20 [ 300.684949][T10974] ? __lock_acquire+0x16f2/0x4a00 [ 300.689976][T10974] should_fail_alloc_page+0x50/0x60 [ 300.695160][T10974] __alloc_pages_nodemask+0x1a1/0x900 [ 300.700534][T10974] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 300.706171][T10974] ? __alloc_pages_slowpath+0x2920/0x2920 [ 300.711891][T10974] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 300.717531][T10974] ? fault_create_debugfs_attr+0x180/0x180 [ 300.723348][T10974] cache_grow_begin+0x90/0xd20 [ 300.728114][T10974] ? getname_flags+0xd6/0x5b0 [ 300.728134][T10974] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 300.728150][T10974] kmem_cache_alloc+0x64e/0x710 [ 300.728163][T10974] ? __kasan_check_write+0x14/0x20 [ 300.728201][T10974] getname_flags+0xd6/0x5b0 [ 300.749027][T10974] getname+0x1a/0x20 [ 300.749045][T10974] do_sys_open+0x2c9/0x5d0 [ 300.749063][T10974] ? filp_open+0x80/0x80 [ 300.749082][T10974] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 300.749096][T10974] ? do_syscall_64+0x26/0x760 18:48:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 300.749109][T10974] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.749126][T10974] ? do_syscall_64+0x26/0x760 [ 300.776367][T10974] __x64_sys_open+0x7e/0xc0 [ 300.776387][T10974] do_syscall_64+0xfa/0x760 [ 300.776406][T10974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.776420][T10974] RIP: 0033:0x413fb1 [ 300.782565][T10978] input: syz0 as /devices/virtual/input/input86 18:48:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2000, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 300.787133][T10974] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 300.787141][T10974] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 300.787173][T10974] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 300.787182][T10974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 300.787190][T10974] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 300.787198][T10974] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 300.787207][T10974] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:33 executing program 1: r0 = socket(0x18, 0x0, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r3, r4}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000080)=""/231) 18:48:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2f00, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:33 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 18:48:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000465f8e)=""/114, 0x72) socket$rds(0x15, 0x5, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r12, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r17, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r17}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'\x02\x00', r17}) r18 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) r19 = socket$netlink(0x10, 0x3, 0x0) pwritev(r19, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r20 = socket(0x0, 0x2, 0x0) close(r20) r21 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r21, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r20, 0x84, 0x76, &(0x7f0000001b40)={r22}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r19, 0x84, 0xf, &(0x7f0000000340)={r22, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r22, 0xa3bc, 0x8, 0x80, 0x80000000, 0x4}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r18, 0x84, 0x6, &(0x7f0000000140)={r23, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 18:48:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3000, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 301.202042][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:48:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3100, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:34 executing program 1: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xbe199e0d447a8e42, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fe99f56245000000000000c61f7281c46fff5e00", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c4}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000ea99d3bac128baed9ea1aafdfb", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000"], 0x14}}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) fallocate(r0, 0x100000003, 0xf0ff, 0x80028120001) [ 301.564384][T11030] FAULT_INJECTION: forcing a failure. [ 301.564384][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 301.640556][T11030] CPU: 1 PID: 11030 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 301.648486][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.658547][T11030] Call Trace: [ 301.661846][T11030] dump_stack+0x197/0x210 [ 301.666213][T11030] should_fail.cold+0xa/0x15 [ 301.666235][T11030] ? fault_create_debugfs_attr+0x180/0x180 [ 301.666256][T11030] ? ___might_sleep+0x163/0x2c0 [ 301.666273][T11030] __should_failslab+0x121/0x190 [ 301.666289][T11030] should_failslab+0x9/0x14 [ 301.666304][T11030] kmem_cache_alloc+0x2aa/0x710 [ 301.695719][T11030] ? stack_trace_save+0xac/0xe0 [ 301.695736][T11030] ? stack_trace_consume_entry+0x190/0x190 [ 301.695754][T11030] __alloc_file+0x27/0x340 [ 301.695771][T11030] alloc_empty_file+0x72/0x170 [ 301.695789][T11030] path_openat+0xef/0x46d0 [ 301.695809][T11030] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 301.706420][T11030] ? kasan_slab_alloc+0xf/0x20 [ 301.706432][T11030] ? kmem_cache_alloc+0x121/0x710 [ 301.706446][T11030] ? getname_flags+0xd6/0x5b0 18:48:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf4240, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 301.706457][T11030] ? getname+0x1a/0x20 [ 301.706471][T11030] ? do_sys_open+0x2c9/0x5d0 [ 301.706484][T11030] ? __x64_sys_open+0x7e/0xc0 [ 301.706499][T11030] ? __kasan_check_read+0x11/0x20 [ 301.706522][T11030] ? mark_lock+0xc2/0x1220 [ 301.715656][T11030] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 301.715678][T11030] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 301.715700][T11030] ? __alloc_fd+0x487/0x620 [ 301.715721][T11030] do_filp_open+0x1a1/0x280 [ 301.715738][T11030] ? may_open_dev+0x100/0x100 [ 301.715753][T11030] ? lock_downgrade+0x920/0x920 [ 301.715770][T11030] ? rwlock_bug.part.0+0x90/0x90 [ 301.725961][T11030] ? __kasan_check_read+0x11/0x20 [ 301.725975][T11030] ? do_raw_spin_unlock+0x57/0x270 [ 301.725993][T11030] ? _raw_spin_unlock+0x2d/0x50 [ 301.726006][T11030] ? __alloc_fd+0x487/0x620 [ 301.726044][T11030] do_sys_open+0x3fe/0x5d0 [ 301.735792][T11030] ? filp_open+0x80/0x80 [ 301.735813][T11030] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 301.735828][T11030] ? do_syscall_64+0x26/0x760 18:48:34 executing program 0 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 301.735857][T11030] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.735870][T11030] ? do_syscall_64+0x26/0x760 [ 301.735890][T11030] __x64_sys_open+0x7e/0xc0 [ 301.744595][T11030] do_syscall_64+0xfa/0x760 [ 301.744616][T11030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.744628][T11030] RIP: 0033:0x413fb1 [ 301.744642][T11030] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 301.744649][T11030] RSP: 002b:00007f6e63c547a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 301.744664][T11030] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 301.744679][T11030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c54850 [ 301.753903][T11030] RBP: 000000000075c070 R08: 000000000000000f R09: 0000000000000000 [ 301.753912][T11030] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c556d4 [ 301.753920][T11030] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000003 [ 301.950495][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.001848][T11047] FAULT_INJECTION: forcing a failure. [ 302.001848][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 302.083449][T11047] CPU: 0 PID: 11047 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 302.091370][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.101420][T11047] Call Trace: [ 302.104719][T11047] dump_stack+0x197/0x210 [ 302.109060][T11047] should_fail.cold+0xa/0x15 [ 302.113663][T11047] ? fault_create_debugfs_attr+0x180/0x180 [ 302.119493][T11047] ? ___might_sleep+0x163/0x2c0 [ 302.124348][T11047] __should_failslab+0x121/0x190 [ 302.124364][T11047] should_failslab+0x9/0x14 18:48:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 302.124380][T11047] kmem_cache_alloc+0x2aa/0x710 [ 302.133803][T11047] ? kmem_cache_alloc+0x364/0x710 [ 302.133829][T11047] security_file_alloc+0x39/0x170 [ 302.143654][T11047] __alloc_file+0xde/0x340 [ 302.153160][T11047] alloc_empty_file+0x72/0x170 [ 302.157927][T11047] path_openat+0xef/0x46d0 [ 302.162340][T11047] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 302.168138][T11047] ? kasan_slab_alloc+0xf/0x20 [ 302.172911][T11047] ? kmem_cache_alloc+0x121/0x710 [ 302.177936][T11047] ? getname_flags+0xd6/0x5b0 [ 302.182625][T11047] ? getname+0x1a/0x20 [ 302.186679][T11047] ? do_sys_open+0x2c9/0x5d0 [ 302.191254][T11047] ? __x64_sys_open+0x7e/0xc0 [ 302.195937][T11047] ? __kasan_check_read+0x11/0x20 [ 302.200947][T11047] ? mark_lock+0xc2/0x1220 [ 302.205345][T11047] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 302.210881][T11047] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 302.216243][T11047] ? __alloc_fd+0x487/0x620 [ 302.220732][T11047] do_filp_open+0x1a1/0x280 [ 302.225227][T11047] ? may_open_dev+0x100/0x100 [ 302.229886][T11047] ? lock_downgrade+0x920/0x920 [ 302.234708][T11047] ? rwlock_bug.part.0+0x90/0x90 [ 302.239633][T11047] ? __kasan_check_read+0x11/0x20 [ 302.244672][T11047] ? do_raw_spin_unlock+0x57/0x270 [ 302.249760][T11047] ? _raw_spin_unlock+0x2d/0x50 [ 302.254585][T11047] ? __alloc_fd+0x487/0x620 [ 302.259071][T11047] do_sys_open+0x3fe/0x5d0 [ 302.263472][T11047] ? filp_open+0x80/0x80 [ 302.267714][T11047] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 302.273260][T11047] ? do_syscall_64+0x26/0x760 [ 302.277926][T11047] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.283977][T11047] ? do_syscall_64+0x26/0x760 [ 302.288636][T11047] __x64_sys_open+0x7e/0xc0 [ 302.293117][T11047] do_syscall_64+0xfa/0x760 [ 302.297609][T11047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.303487][T11047] RIP: 0033:0x413fb1 [ 302.307365][T11047] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:48:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18cae3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:35 executing program 0 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x1c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x142000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70}], 0xfd, 0x0) ptrace$getregs(0xc, r7, 0xe, &(0x7f0000000040)=""/84) [ 302.326974][T11047] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 302.335524][T11047] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 302.343497][T11047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 302.351445][T11047] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 302.359395][T11047] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 302.367340][T11047] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 302.572404][T11068] FAULT_INJECTION: forcing a failure. [ 302.572404][T11068] name failslab, interval 1, probability 0, space 0, times 0 [ 302.615494][T11068] CPU: 1 PID: 11068 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 302.623408][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.623426][T11068] Call Trace: [ 302.623459][T11068] dump_stack+0x197/0x210 [ 302.641125][T11068] should_fail.cold+0xa/0x15 [ 302.645724][T11068] ? fault_create_debugfs_attr+0x180/0x180 [ 302.651543][T11068] ? ___might_sleep+0x163/0x2c0 [ 302.656417][T11068] __should_failslab+0x121/0x190 [ 302.656439][T11068] should_failslab+0x9/0x14 [ 302.665845][T11068] __kmalloc+0x2e0/0x770 [ 302.665866][T11068] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 302.665881][T11068] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 302.665898][T11068] tomoyo_realpath_from_path+0xcd/0x7b0 [ 302.676252][T11068] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 302.676279][T11068] tomoyo_check_open_permission+0x2a8/0x3f0 [ 302.699613][T11068] ? __kasan_check_read+0x14/0x20 [ 302.699628][T11068] ? tomoyo_path_number_perm+0x520/0x520 [ 302.699652][T11068] ? __kasan_check_read+0x11/0x20 [ 302.710284][T11068] ? mark_lock+0xc2/0x1220 [ 302.710318][T11068] ? lock_downgrade+0x920/0x920 [ 302.710331][T11068] ? rwlock_bug.part.0+0x90/0x90 [ 302.710354][T11068] tomoyo_file_open+0xa9/0xd0 [ 302.734176][T11068] security_file_open+0x71/0x300 [ 302.739117][T11068] do_dentry_open+0x37a/0x1380 [ 302.743881][T11068] ? __kasan_check_read+0x11/0x20 [ 302.748914][T11068] ? chown_common+0x5c0/0x5c0 [ 302.753596][T11068] ? inode_permission+0xb4/0x560 [ 302.758531][T11068] vfs_open+0xa0/0xd0 [ 302.762513][T11068] path_openat+0x10e9/0x46d0 [ 302.767101][T11068] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 302.772916][T11068] ? kasan_slab_alloc+0xf/0x20 [ 302.777680][T11068] ? kmem_cache_alloc+0x121/0x710 [ 302.782703][T11068] ? getname_flags+0xd6/0x5b0 [ 302.787374][T11068] ? getname+0x1a/0x20 [ 302.791440][T11068] ? do_sys_open+0x2c9/0x5d0 [ 302.796049][T11068] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 302.801423][T11068] ? __alloc_fd+0x487/0x620 [ 302.805932][T11068] do_filp_open+0x1a1/0x280 [ 302.810433][T11068] ? may_open_dev+0x100/0x100 [ 302.815206][T11068] ? __kasan_check_read+0x11/0x20 [ 302.820233][T11068] ? do_raw_spin_unlock+0x57/0x270 [ 302.825343][T11068] ? _raw_spin_unlock+0x2d/0x50 [ 302.830182][T11068] ? __alloc_fd+0x487/0x620 [ 302.834680][T11068] do_sys_open+0x3fe/0x5d0 [ 302.839080][T11068] ? filp_open+0x80/0x80 [ 302.843322][T11068] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 302.848759][T11068] ? do_syscall_64+0x26/0x760 [ 302.853415][T11068] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.859473][T11068] ? do_syscall_64+0x26/0x760 [ 302.864135][T11068] __x64_sys_open+0x7e/0xc0 [ 302.868633][T11068] do_syscall_64+0xfa/0x760 [ 302.873150][T11068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.879112][T11068] RIP: 0033:0x413fb1 [ 302.882992][T11068] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 302.902585][T11068] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 302.910980][T11068] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 302.918931][T11068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 302.926882][T11068] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 302.934836][T11068] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 302.942788][T11068] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 302.952736][T11068] ERROR: Out of memory at tomoyo_realpath_from_path. 18:48:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000465f8e)=""/114, 0x72) socket$rds(0x15, 0x5, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r12, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r17, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r17}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'\x02\x00', r17}) r18 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) r19 = socket$netlink(0x10, 0x3, 0x0) pwritev(r19, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r20 = socket(0x0, 0x2, 0x0) close(r20) r21 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r21, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r20, 0x84, 0x76, &(0x7f0000001b40)={r22}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r19, 0x84, 0xf, &(0x7f0000000340)={r22, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r22, 0xa3bc, 0x8, 0x80, 0x80000000, 0x4}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r18, 0x84, 0x6, &(0x7f0000000140)={r23, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 18:48:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x70) 18:48:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x1}, 0x116) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x363, &(0x7f0000000200)=[{&(0x7f0000000140), 0x304}], 0x8}, 0x2}], 0x13, 0x24000004) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000340)={0x5, 0x9, 0x0, [{0x80, 0x0, 0x800, 0xe4, 0x4b, 0x0, 0x1f}, {0x1, 0xb3, 0x6, 0xe4, 0x80, 0x9, 0x2}, {0x1, 0x0, 0x7fffffff, 0x6, 0x3, 0x23, 0x81}, {0x7, 0x80, 0x0, 0x9, 0x7b, 0x4}, {0x1, 0x1000, 0x4, 0x0, 0x9, 0x1, 0x6}, {0xffffffffffffffff, 0x100000001, 0x401, 0x20, 0x7, 0x7, 0x3d}, {0xffffffffffffffff, 0x7fffffff, 0xce, 0x8, 0x7f, 0x27, 0xf9}, {0x4, 0x2, 0x80000001, 0x6, 0x4, 0x6, 0x3}, {0x9, 0x1000, 0x80000001, 0x8, 0xe7, 0x1}]}) r2 = getpgid(0x0) ioprio_set$pid(0x1, r2, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xedc0) 18:48:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xffffff1f, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:35 executing program 0 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 303.220596][T11086] FAULT_INJECTION: forcing a failure. [ 303.220596][T11086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.233838][T11086] CPU: 0 PID: 11086 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 303.241725][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.251886][T11086] Call Trace: [ 303.255190][T11086] dump_stack+0x197/0x210 [ 303.259536][T11086] should_fail.cold+0xa/0x15 [ 303.264143][T11086] ? __kasan_check_read+0x11/0x20 [ 303.269175][T11086] ? fault_create_debugfs_attr+0x180/0x180 [ 303.274982][T11086] ? is_bpf_text_address+0xac/0x170 [ 303.280180][T11086] ? find_held_lock+0x35/0x130 [ 303.284950][T11086] should_fail_alloc_page+0x50/0x60 [ 303.290150][T11086] __alloc_pages_nodemask+0x1a1/0x900 [ 303.295525][T11086] ? lock_downgrade+0x920/0x920 [ 303.300383][T11086] ? __alloc_pages_slowpath+0x2920/0x2920 [ 303.306101][T11086] ? __kasan_check_read+0x11/0x20 [ 303.311126][T11086] ? fault_create_debugfs_attr+0x180/0x180 [ 303.316920][T11086] cache_grow_begin+0x90/0xd20 [ 303.316936][T11086] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 303.316954][T11086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.316970][T11086] __kmalloc+0x6b2/0x770 [ 303.316990][T11086] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 303.317003][T11086] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 303.317020][T11086] tomoyo_realpath_from_path+0xcd/0x7b0 [ 303.355259][T11086] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 303.361520][T11086] tomoyo_check_open_permission+0x2a8/0x3f0 [ 303.367414][T11086] ? __kasan_check_read+0x14/0x20 [ 303.372442][T11086] ? tomoyo_path_number_perm+0x520/0x520 [ 303.378088][T11086] ? __kasan_check_read+0x11/0x20 [ 303.383120][T11086] ? mark_lock+0xc2/0x1220 [ 303.387543][T11086] ? lock_downgrade+0x920/0x920 [ 303.387556][T11086] ? rwlock_bug.part.0+0x90/0x90 [ 303.387578][T11086] tomoyo_file_open+0xa9/0xd0 [ 303.387597][T11086] security_file_open+0x71/0x300 [ 303.387615][T11086] do_dentry_open+0x37a/0x1380 [ 303.387631][T11086] ? __kasan_check_read+0x11/0x20 [ 303.416720][T11086] ? chown_common+0x5c0/0x5c0 [ 303.421417][T11086] ? inode_permission+0xb4/0x560 [ 303.426367][T11086] vfs_open+0xa0/0xd0 [ 303.430351][T11086] path_openat+0x10e9/0x46d0 [ 303.434955][T11086] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 303.441464][T11086] ? kasan_slab_alloc+0xf/0x20 [ 303.446226][T11086] ? kmem_cache_alloc+0x121/0x710 [ 303.451253][T11086] ? getname_flags+0xd6/0x5b0 [ 303.455928][T11086] ? getname+0x1a/0x20 [ 303.460003][T11086] ? do_sys_open+0x2c9/0x5d0 [ 303.464613][T11086] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 303.469994][T11086] ? __alloc_fd+0x487/0x620 [ 303.474502][T11086] do_filp_open+0x1a1/0x280 [ 303.479024][T11086] ? may_open_dev+0x100/0x100 [ 303.483732][T11086] ? __kasan_check_read+0x11/0x20 [ 303.488752][T11086] ? do_raw_spin_unlock+0x57/0x270 [ 303.493971][T11086] ? _raw_spin_unlock+0x2d/0x50 [ 303.498814][T11086] ? __alloc_fd+0x487/0x620 [ 303.503441][T11086] do_sys_open+0x3fe/0x5d0 [ 303.507853][T11086] ? filp_open+0x80/0x80 [ 303.512091][T11086] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 303.517545][T11086] ? do_syscall_64+0x26/0x760 [ 303.522213][T11086] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.528287][T11086] ? do_syscall_64+0x26/0x760 [ 303.532960][T11086] __x64_sys_open+0x7e/0xc0 [ 303.537457][T11086] do_syscall_64+0xfa/0x760 [ 303.541963][T11086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.547855][T11086] RIP: 0033:0x413fb1 [ 303.551749][T11086] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:48:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4048ae9b, &(0x7f0000000140)) dup2(r6, r5) request_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) 18:48:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 303.571342][T11086] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 303.579747][T11086] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 303.587718][T11086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 303.595682][T11086] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 303.603646][T11086] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 303.611612][T11086] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:36 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:48:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 303.764682][T11100] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 18:48:36 executing program 0 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 304.191586][T11132] FAULT_INJECTION: forcing a failure. [ 304.191586][T11132] name failslab, interval 1, probability 0, space 0, times 0 [ 304.228892][T11132] CPU: 0 PID: 11132 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 304.236819][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.247126][T11132] Call Trace: [ 304.250424][T11132] dump_stack+0x197/0x210 [ 304.254798][T11132] should_fail.cold+0xa/0x15 [ 304.259420][T11132] ? fault_create_debugfs_attr+0x180/0x180 [ 304.265231][T11132] ? ___might_sleep+0x163/0x2c0 [ 304.270088][T11132] __should_failslab+0x121/0x190 [ 304.275029][T11132] should_failslab+0x9/0x14 [ 304.275046][T11132] __kmalloc+0x2e0/0x770 [ 304.275067][T11132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.275080][T11132] ? d_absolute_path+0x11b/0x170 [ 304.275095][T11132] ? __d_path+0x140/0x140 [ 304.283803][T11132] ? tomoyo_encode2.part.0+0xf5/0x400 [ 304.283825][T11132] tomoyo_encode2.part.0+0xf5/0x400 [ 304.283843][T11132] tomoyo_encode+0x2b/0x50 [ 304.283858][T11132] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 304.319847][T11132] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 304.326092][T11132] tomoyo_check_open_permission+0x2a8/0x3f0 [ 304.331979][T11132] ? __kasan_check_read+0x14/0x20 [ 304.336982][T11132] ? tomoyo_path_number_perm+0x520/0x520 [ 304.344786][T11132] ? __kasan_check_read+0x11/0x20 [ 304.349795][T11132] ? mark_lock+0xc2/0x1220 [ 304.354206][T11132] ? lock_downgrade+0x920/0x920 [ 304.359035][T11132] ? rwlock_bug.part.0+0x90/0x90 [ 304.363970][T11132] tomoyo_file_open+0xa9/0xd0 [ 304.368646][T11132] security_file_open+0x71/0x300 [ 304.373566][T11132] do_dentry_open+0x37a/0x1380 [ 304.378309][T11132] ? __kasan_check_read+0x11/0x20 [ 304.383334][T11132] ? chown_common+0x5c0/0x5c0 [ 304.387992][T11132] ? inode_permission+0xb4/0x560 [ 304.392913][T11132] vfs_open+0xa0/0xd0 [ 304.396890][T11132] path_openat+0x10e9/0x46d0 [ 304.401457][T11132] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 304.407239][T11132] ? kasan_slab_alloc+0xf/0x20 [ 304.411984][T11132] ? kmem_cache_alloc+0x121/0x710 [ 304.420634][T11132] ? getname_flags+0xd6/0x5b0 [ 304.425291][T11132] ? getname+0x1a/0x20 [ 304.429347][T11132] ? do_sys_open+0x2c9/0x5d0 [ 304.433939][T11132] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 304.439292][T11132] ? __alloc_fd+0x487/0x620 [ 304.443780][T11132] do_filp_open+0x1a1/0x280 [ 304.448279][T11132] ? may_open_dev+0x100/0x100 [ 304.452942][T11132] ? __kasan_check_read+0x11/0x20 [ 304.457948][T11132] ? do_raw_spin_unlock+0x57/0x270 [ 304.463040][T11132] ? _raw_spin_unlock+0x2d/0x50 [ 304.467871][T11132] ? __alloc_fd+0x487/0x620 [ 304.472384][T11132] do_sys_open+0x3fe/0x5d0 [ 304.476786][T11132] ? filp_open+0x80/0x80 [ 304.481021][T11132] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 304.486466][T11132] ? do_syscall_64+0x26/0x760 [ 304.491125][T11132] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.497169][T11132] ? do_syscall_64+0x26/0x760 [ 304.501832][T11132] __x64_sys_open+0x7e/0xc0 [ 304.506316][T11132] do_syscall_64+0xfa/0x760 [ 304.510804][T11132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.516680][T11132] RIP: 0033:0x413fb1 [ 304.520563][T11132] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 304.540148][T11132] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 304.548539][T11132] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 304.556687][T11132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 304.564636][T11132] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 304.572583][T11132] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 304.580536][T11132] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 304.604805][T11132] ERROR: Out of memory at tomoyo_realpath_from_path. 18:48:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000465f8e)=""/114, 0x72) socket$rds(0x15, 0x5, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYBLOB="760b000049d6693ad88c0a09a9460452caeffb33fa651d3691d609e5e6175668abbdd01ed934055219bf46b4675e5ddce7cf7882f3d5e899da6389407c2f0d19e1fc0e8fe29fff5f5ec6175b8fa1eb28979704339f022c01f9f6c732ec06cde7b7f5b009134b30152356cdc31403b0b87b59e1ef0df8ac3bfcfc95d7af6c6cd048edfc991f8e97ebc670cf33ade535c25dc3bb99342276c4c956b3d4cbd3b8a13978a576a69fac1aae38ab551331c987dbd754426da1aa6f6685b9c8270347b5dc05f59c717231c576880a7982bf872cf13a1f5a134d40f8b74ab0a4a5883b2cc81909d97750be89ec233eff77ac8f53956f0b760118bc1720edf838f2359ca8bc77d97871bab815ac392a3cbe94a58dd73afcf3d952816e69dcd5541f72133e21b114ebad28f77e57b190ac8fe8932462aa1b54ec3ed01f82c8bd6976ad600c7317135c234a285b05216c9686a48624b78a255d0f790af38d344721d7cf2eecf7ef6f0f5f1e90b74c359a565bcbfe4b9c43947370772059a3a735e244991a4c3329d12d4ec33fad7a297a9ca36a36001d0b796dd41b825331736e20247d8ccdb30a4731b7a534c0fe6c38ceec5d83c3f6bff833217902d1ef05689972db0ae6dd896c4e980f1e3403f3b2db01c6b452b161b6830572cfad7847fef06206566492ebd83e1da1f570ac23dada11ee1f0dff8be47d4b7731e63d0b4630e0dd8403d145de49263158219881f3dc7bee1b78872a55ebb5bd04533fc9f826963d3339ace450efc36375b6e49bfc8cd79988ad9cfc0703378cf12e82ddfd9ef460cc1a3cd28663023ac925095d770869add3d1dac0d88b1e866a2fd4f660359cf2c933c0bf0d6f3378b4e380973ef067dc22f8dbf3226a757c55228e551b816db134aa086d616ea776ca3a19ea5b9d40a275021cacabc503375d19100469f7ccb08417fd2c9a5c0cd47ae01a48cffec10fa62364b73ee634e4a62eb7c69e25d5ba453ab8a7c80b7f528f2528bcc87c9c2393853fbe787a47454b1b3098cb62486d97fd40aefbd6119d5d951d487aabd698c9b4274e840c619366bec760f7a6adc9905986a5028b1df792df1ee9605961a96560db26874bebd0a1bea652491be0c2a3f77e7dc7c65ee7837bdb49427be51d6a2473cb3e643c045c2d009440a11412c550c6a6d67e54f615de51c1dd754b83b3618a4749887bbf51e9130195693d05569048b3384946d79b1668fe321fca427fa06dbdb3e6c1b4e71dc055eb5d637b1a44aaefdecf936cfbacd31e02aa6901d5965523c14dac78954c02d653d24aa0afe9192f09ce102b92623b7d9af09b52d53ca22389a9d617c807156169a7cef0fc9e13d4c79d05c59cf264521cfaf1d405e17e4c1a38839fab33cc5d9e0d15b76fc7ae11ecc63d86f2c544ab356ecd7e6eb408ba1bcff193f08e098c689e2962657cbe6f7f3cb19654652bff2fe303308c87187ed9240520c981e48782d3346b8f42e94875205b0a04a4b2592d4ae2941555593500cc392d95fbc2d93aa5823c82fc104b0a5c0632750850db6e51903420c5dcab2421f685dc52e997f1bd52d08785a768916fb9d4e0e96a07de1058587eddba9e9fee074a2adadf6124c95dfd7b2c84beac774a376bcbb9bde2c3f6eb28b740b1f3165b859b7d8ad1bcf60a361c1169db87c488769e9faa79debc801e7289aaf1bb27557a5b66599bb337e2648595fbaf92bd228afb489f5352d183f0e9d891353f3c195ae72a487fd38aab257e0e4edfbac2af4ed9c41d28fbdfb08bb98b745ad6effd9ba003caaea2021f51966ce0a21628a46c740ad7d88a29aecf86ca34fc56b32058c40b2bca25049d486b452fe08a58769446f13dad031ff6c8f1cf0062c2bc65a625353d7ebc75b879915504540b126997c2b3433c85103d4bf0aa4b94586bef6df03c6847811c1a218da66bde3642198865fb3c4af05367b73063ab2fb47c3f5b93873bb423bed3fc50fd5a8265fed68ac6062422dd0ae6c722eff8c323e97ba6646c5ff95ff6d5bb3bee5e1730480c7063ec3f6846087abe97a659b2640283da5fb2a13fe31cc2d6aebb3de23b01fef190c4658cbb7d7a6205f352ae96547109a8bb9e8bb0b54c9e3593c87005d2a91507bb484a293d8c80bcd332102d673a449adb9a70fb46805f74d2bb7d28e61b90fddb81649e3e54f58d388f6a4cec3f6c748a6c417f581aaa6d999ffb995b78bd4b295e48c416d9a32ae99249190ef721c7124fdcbb19d66590a0e1ec290043586c69e073ed89f4272d990f1f24fda65a26cc3facdbae73a3c8ae19cad10a0144d21b3c982b854da7a8a62544033c62e20a4a82be1d25bff7fa1aab204f0f86440046e169ff0553e951aa325b4e9e2b6c8688df5fc85f4769c4323b021f291bf0afb447ce4bef2bf681189a833827cee9c34d84302698d802433e0feb211ed764c4c9b980503c7441b4695addd1434c29cc70268a55197af68e8ab2ff25e18bddd56178804ea7a074567545bc8661574493918d05413473a89225afb9d5b6ddd9e44455792d7b65f3e81ec476a57e6076f75777349c80a3da8b89e822276e763ab513ddbe1202490383ffcfde38b3b660e793a832d3703b57b279c94d0cc85cd0e6e53b4abc6ba48ff104fab7dc279be35b361782750cdb8b940e3b2647c8691b64fda4cad68a7efa6dfdab6f7ef263c650fde6619cc9ceb8edd786af9c79d0a8d447f786dd13edb0c6fa7c6dddb5b5ab7a3dc49edfb87ee43e55fe3e6eb835ee1fcac5647006ab37130fc7946d0f960c2d18fcc9ea6511b99decf7d1c552b033e4ff9775838d500965ef6dc46761796aec007ddc3e2438c53e0fecbfdba8ce122ff09303943ce19de5864dd5e9a187f049345bd7772463dc63b48c750493d2bb31d2f9d30ebcf20b4eecd813bc59903c8b86843895f05214ae26010078a370f13a5ce333b116e2a8cddd387f7799781ef6539f8e745fa17e964b6fd5b1e1c8be1c30ded26f5ff1f82be48af6b5470df6ac815537913cca1962ad81239ef7b799bedc9bb5c1c90268c4247888128734dda5d13f2423f035ec930df944cbf7afaeefae46aa78756df9a27f21a0bd949b98bb2324b39fb4797d50a8e7a56e200e21145ab0b127d4dfac7e4e75233b14125bbb5f76a113e3a973e62cda999f6f5469286ab0284e370dba5fc230fa0d2734ba7d67beb49a42844a23110fbdd3eda679b0cd6a7de2920d896f716a3a5e0714549b0f505c62dba5a5d020886dff049137a59103a6c7a21be4f5fe37c59dd27c9508b502206ce6bf354a5ed7f93293bd55064406d4740a31077d0803d344c5cd3c6261e7384c2c0c703380dd5e6003764d806fd4ee3515d3f7f4db07f63609265b4fa9361f06e307831ddb9d60ad9220f23b01fb83b3f62fb338272426a1ff6eaef03510373564a48df1ac479ff688c2e9f1839051276df3b8eb63eb31f78258974298e0191ab4cd1f726bcc2e681965817df76ee01f44436b824b5fc4cc0a0369582bdd26be036073baba74bdeba530775960294c2b91dd1771919c588b0236a4660ecc4df21df0fa92e572cd74ded0080275ed9cc888f34b45a07fed73899920b7746b4a3560764cdf6eafd8f293f6331f6173c0620d13b9b597b5f67d9610bf4fa15bee0cd95bb9d0eccffd174d0661959f2b86adbdf02524b8223e5babfda956842145f9add06f166ac7df7b12d8fc2df5647b752dc9f2f78055c6ffe8f3c082db474b1299f237ab81510b8909c4572d497d44dbf9ee5670f6ef5ab93dcfab78c03a9173050aded93a289cca11f0a90bd469c24e180d716b2a2cbe396fa7b93d901104b0c8eb89035b389c13c04074c7206a50780bacf904fd62817576101103d32eff1de95ea618046efebb84a3c245f3e19eefc06b2498334287442083d54898844c3c607e71246ad667503ab12552adb844c35f169279b3852f610f768b2c26298d50420644f32d46ed0e81abad7a6826931e140df49a5491ebed04efb192950287a30b81f9e58f305466d1ff382900caaa261993ba7b01e6dc244c0784c95354c6c8320714363475f62c2125ae77c00104d706363fe081a426e79067740c7d51c6571bd39a137fee54cb911f985285820fee2e7de735e347eede059ecc0c2f69e9"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r12, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r17, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r17}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'\x02\x00', r17}) r18 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) r19 = socket$netlink(0x10, 0x3, 0x0) pwritev(r19, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r20 = socket(0x0, 0x2, 0x0) close(r20) r21 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r21, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r20, 0x84, 0x76, &(0x7f0000001b40)={r22}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r19, 0x84, 0xf, &(0x7f0000000340)={r22, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r22, 0xa3bc, 0x8, 0x80, 0x80000000, 0x4}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r18, 0x84, 0x6, &(0x7f0000000140)={r23, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 18:48:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:37 executing program 1: syz_mount_image$iso9660(&(0x7f0000000880)='~so)660\x18', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={[{@sbsector={'sbsector'}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x4e20, @host}, 0x10, 0x40800) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff72) setreuid(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r11, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r13, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r14, r14, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x4, r3}, {0x2, 0x3, r4}, {0x2, 0x0, r6}, {0x2, 0x2, 0xee00}, {0x2, 0x1, r9}, {0x2, 0x7}, {0x2, 0x3, r11}, {0x2, 0x0, r13}, {0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0xa, r14}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x4}}, 0x7c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r16, 0xb701, 0x0) 18:48:37 executing program 0 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 304.987110][T11151] FAULT_INJECTION: forcing a failure. [ 304.987110][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 305.063759][T11151] CPU: 1 PID: 11151 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 305.071875][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.081927][T11151] Call Trace: [ 305.085208][T11151] dump_stack+0x197/0x210 [ 305.089535][T11151] should_fail.cold+0xa/0x15 [ 305.094110][T11151] ? fault_create_debugfs_attr+0x180/0x180 [ 305.099901][T11151] ? ___might_sleep+0x163/0x2c0 [ 305.104745][T11151] __should_failslab+0x121/0x190 [ 305.109666][T11151] should_failslab+0x9/0x14 [ 305.114147][T11151] kmem_cache_alloc_trace+0x2d3/0x790 [ 305.119499][T11151] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 305.125027][T11151] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 305.130987][T11151] ? integrity_kernel_module_request+0x39/0x45 [ 305.137125][T11151] __request_module+0x33d/0xbab [ 305.141962][T11151] ? find_held_lock+0x35/0x130 [ 305.146712][T11151] ? base_probe+0x31/0x70 [ 305.151036][T11151] ? free_modprobe_argv+0xa0/0xa0 [ 305.156043][T11151] ? lock_downgrade+0x920/0x920 [ 305.160943][T11151] ? kobj_lookup+0x29b/0x460 [ 305.165520][T11151] ? mutex_trylock+0x2d0/0x2d0 [ 305.170270][T11151] ? __kasan_check_write+0x14/0x20 [ 305.175359][T11151] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 305.180896][T11151] ? chrdev_open+0x2d4/0x6b0 [ 305.185470][T11151] base_probe+0x31/0x70 [ 305.189701][T11151] kobj_lookup+0x260/0x460 [ 305.194122][T11151] ? exact_match+0x20/0x20 [ 305.198525][T11151] chrdev_open+0x318/0x6b0 [ 305.202927][T11151] ? cdev_put.part.0+0x50/0x50 [ 305.207674][T11151] ? security_file_open+0x87/0x300 [ 305.212775][T11151] do_dentry_open+0x4e6/0x1380 [ 305.217533][T11151] ? __kasan_check_read+0x11/0x20 [ 305.222537][T11151] ? cdev_put.part.0+0x50/0x50 [ 305.227285][T11151] ? chown_common+0x5c0/0x5c0 [ 305.231954][T11151] ? inode_permission+0xb4/0x560 [ 305.236872][T11151] vfs_open+0xa0/0xd0 [ 305.240833][T11151] path_openat+0x10e9/0x46d0 [ 305.245401][T11151] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 305.251185][T11151] ? kasan_slab_alloc+0xf/0x20 [ 305.255929][T11151] ? kmem_cache_alloc+0x121/0x710 [ 305.260936][T11151] ? getname_flags+0xd6/0x5b0 [ 305.265593][T11151] ? getname+0x1a/0x20 [ 305.269638][T11151] ? do_sys_open+0x2c9/0x5d0 [ 305.274215][T11151] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 305.279592][T11151] ? __alloc_fd+0x487/0x620 [ 305.284076][T11151] do_filp_open+0x1a1/0x280 [ 305.288559][T11151] ? may_open_dev+0x100/0x100 [ 305.293218][T11151] ? __kasan_check_read+0x11/0x20 [ 305.298307][T11151] ? do_raw_spin_unlock+0x57/0x270 [ 305.303396][T11151] ? _raw_spin_unlock+0x2d/0x50 [ 305.308223][T11151] ? __alloc_fd+0x487/0x620 [ 305.312711][T11151] do_sys_open+0x3fe/0x5d0 [ 305.317130][T11151] ? filp_open+0x80/0x80 [ 305.321356][T11151] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 305.326807][T11151] ? do_syscall_64+0x26/0x760 [ 305.331461][T11151] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.337502][T11151] ? do_syscall_64+0x26/0x760 [ 305.342161][T11151] __x64_sys_open+0x7e/0xc0 [ 305.346736][T11151] do_syscall_64+0xfa/0x760 [ 305.351220][T11151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.357087][T11151] RIP: 0033:0x413fb1 [ 305.360962][T11151] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 305.380553][T11151] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 305.388947][T11151] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 305.396897][T11151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 305.404848][T11151] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 18:48:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 305.412799][T11151] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 305.420749][T11151] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MAP={0x24, 0xe, {0x1, 0x253, 0x7, 0x4, 0xfe, 0x4}}]}, 0x44}}, 0x0) 18:48:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x7, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 305.605359][T11176] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 18:48:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0xb, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xfc000000]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800012}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x174, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5a9f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72b}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x841}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x264}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeda}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff27b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x1004c043}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000500), 0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000380)={0xffffffff, 0x7, "58fa5c537a55dc126a4aa3b6722cb54ce8e1b414c3933ae2119e28353811ebf6", 0x0, 0x9, 0x3, 0x400, 0x40}) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0042002800010000000000000000000000000000000000affe00000000000000000000ff01000000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffbf, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[]}}, 0x20000086) r10 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x30a, 0x0) 18:48:38 executing program 0 (fault-call:4 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 305.850803][T11190] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.932051][T11190] Invalid UDP bearer configuration [ 305.932101][T11190] Enabling of bearer rejected, failed to enable media [ 305.992747][T11193] FAULT_INJECTION: forcing a failure. [ 305.992747][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 306.025845][T11193] CPU: 0 PID: 11193 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 306.033799][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.033806][T11193] Call Trace: [ 306.033830][T11193] dump_stack+0x197/0x210 [ 306.033854][T11193] should_fail.cold+0xa/0x15 [ 306.056069][T11193] ? fault_create_debugfs_attr+0x180/0x180 [ 306.061873][T11193] ? ___might_sleep+0x163/0x2c0 [ 306.066728][T11193] __should_failslab+0x121/0x190 [ 306.071668][T11193] should_failslab+0x9/0x14 [ 306.076170][T11193] kmem_cache_alloc_trace+0x2d3/0x790 [ 306.081553][T11193] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 306.087100][T11193] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 306.093085][T11193] ? integrity_kernel_module_request+0x39/0x45 [ 306.099247][T11193] __request_module+0x33d/0xbab [ 306.104100][T11193] ? find_held_lock+0x35/0x130 [ 306.108889][T11193] ? base_probe+0x59/0x70 [ 306.113220][T11193] ? free_modprobe_argv+0xa0/0xa0 [ 306.118270][T11193] ? lock_downgrade+0x920/0x920 [ 306.123126][T11193] ? kobj_lookup+0x29b/0x460 [ 306.123179][T11193] ? mutex_trylock+0x2d0/0x2d0 [ 306.123199][T11193] ? __kasan_check_write+0x14/0x20 [ 306.137614][T11193] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 306.137631][T11193] ? chrdev_open+0x2d4/0x6b0 [ 306.137657][T11193] base_probe+0x59/0x70 [ 306.137673][T11193] kobj_lookup+0x260/0x460 [ 306.137693][T11193] ? exact_match+0x20/0x20 [ 306.137711][T11193] chrdev_open+0x318/0x6b0 [ 306.137732][T11193] ? cdev_put.part.0+0x50/0x50 [ 306.151963][T11193] ? security_file_open+0x87/0x300 [ 306.151984][T11193] do_dentry_open+0x4e6/0x1380 [ 306.152002][T11193] ? __kasan_check_read+0x11/0x20 [ 306.160784][T11193] ? cdev_put.part.0+0x50/0x50 [ 306.160801][T11193] ? chown_common+0x5c0/0x5c0 [ 306.160818][T11193] ? inode_permission+0xb4/0x560 [ 306.175042][T11193] vfs_open+0xa0/0xd0 [ 306.184788][T11193] path_openat+0x10e9/0x46d0 [ 306.184804][T11193] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 306.184815][T11193] ? kasan_slab_alloc+0xf/0x20 [ 306.184830][T11193] ? kmem_cache_alloc+0x121/0x710 [ 306.194237][T11193] ? getname_flags+0xd6/0x5b0 [ 306.203123][T11193] ? getname+0x1a/0x20 [ 306.203142][T11193] ? do_sys_open+0x2c9/0x5d0 [ 306.203169][T11193] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 306.236634][T11193] ? __alloc_fd+0x487/0x620 [ 306.236656][T11193] do_filp_open+0x1a1/0x280 [ 306.236689][T11193] ? may_open_dev+0x100/0x100 [ 306.236712][T11193] ? __kasan_check_read+0x11/0x20 [ 306.236725][T11193] ? do_raw_spin_unlock+0x57/0x270 [ 306.236743][T11193] ? _raw_spin_unlock+0x2d/0x50 [ 306.236756][T11193] ? __alloc_fd+0x487/0x620 [ 306.236798][T11193] do_sys_open+0x3fe/0x5d0 [ 306.251143][T11193] ? filp_open+0x80/0x80 [ 306.265993][T11193] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 306.266008][T11193] ? do_syscall_64+0x26/0x760 [ 306.266025][T11193] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.266038][T11193] ? do_syscall_64+0x26/0x760 [ 306.266059][T11193] __x64_sys_open+0x7e/0xc0 [ 306.266075][T11193] do_syscall_64+0xfa/0x760 [ 306.266092][T11193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.266133][T11193] RIP: 0033:0x413fb1 [ 306.275432][T11193] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 306.275440][T11193] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 306.275453][T11193] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 306.275461][T11193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 306.275468][T11193] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 306.275476][T11193] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 306.275483][T11193] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 306.446283][T11195] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.467379][T11195] Invalid UDP bearer configuration [ 306.467407][T11195] Enabling of bearer rejected, failed to enable media 18:48:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x8, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x62) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xa4, 0x15a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) pwritev(r3, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r4 = socket(0x0, 0x2, 0x0) close(r4) r5 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x976, 0x1}, 0x8) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) timer_create(0x4, &(0x7f0000000100)={0x0, 0x38, 0x4, @thr={&(0x7f0000000400)="14d40473eb86adf6cf334476a93e80280024bd73d577ddbdd00d254f43122cb30bee6d5a067999cdfea0faeeabbe765744ddf5127ceb7e66c83b05537641692d0d8a76ae5c7b3c054adadbc81846a048640d219b9b93b94dba120dcc39fd5bad26bf837715f83888fbd42fe92de8c73e39e98ec895dc8139ddc4372a2c9f70d834947f50d5de04e735737c2c7e854cbbd0576aeda168571b1b8bb3dce54857ffb6203d7f12e6747da2c552121b9755a4960eb9d3f1a347e52a12a92e1cfc92effd65cd73afa444b168c24ef15af3c95bae8a0be2de697ab324d1701abcf837580f9bd31b534ce3cd9139d35aa5b1c0f2e27dc416176ad902c03c05b22b", &(0x7f0000000280)="ed82d42a43ff2a1a76db98beddc4618b82c339e2fcd301c2fa254f596ad03a1b675d9c5cee1e26b9dea1a3c541c8070808ac7984edab04c3592918ae3f3fc64d28"}}, &(0x7f0000000200)=0x0) timer_gettime(r7, &(0x7f0000000300)) 18:48:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:39 executing program 0 (fault-call:4 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDADDIO(r3, 0x4b34, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="aa1ecbf47d92c3ed427b24c5fcdd979e", 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8935, &(0x7f0000000000)={'\x00\x05\x06\x00\x05\x00', @ifru_data=&(0x7f0000000080)="e78f73a4eb1a5c3cb6675b6fe7876388250d9d29dc41b154263f367e54596df1"}) [ 306.691136][T11225] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 18:48:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x20, r3, 0xa03, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36d}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r6 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='#@\n'], 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) pwritev(r7, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r8 = socket(0x0, 0x2, 0x0) close(r8) r9 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001b40)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r10, 0x2}, &(0x7f0000000100)=0x8) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 306.733434][T11217] FAULT_INJECTION: forcing a failure. [ 306.733434][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 306.779817][T11217] CPU: 1 PID: 11217 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 306.787739][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.797807][T11217] Call Trace: [ 306.801453][T11217] dump_stack+0x197/0x210 [ 306.805798][T11217] should_fail.cold+0xa/0x15 [ 306.810403][T11217] ? fault_create_debugfs_attr+0x180/0x180 [ 306.816221][T11217] ? ___might_sleep+0x163/0x2c0 [ 306.821083][T11217] __should_failslab+0x121/0x190 18:48:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 306.826026][T11217] should_failslab+0x9/0x14 [ 306.830533][T11217] kmem_cache_alloc_trace+0x2d3/0x790 [ 306.835906][T11217] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 306.841454][T11217] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 306.847439][T11217] ? integrity_kernel_module_request+0x39/0x45 [ 306.853623][T11217] __request_module+0x33d/0xbab [ 306.858482][T11217] ? find_held_lock+0x35/0x130 [ 306.863253][T11217] ? base_probe+0x59/0x70 [ 306.867587][T11217] ? free_modprobe_argv+0xa0/0xa0 [ 306.872625][T11217] ? lock_downgrade+0x920/0x920 [ 306.877474][T11217] ? kobj_lookup+0x29b/0x460 [ 306.882074][T11217] ? mutex_trylock+0x2d0/0x2d0 [ 306.886845][T11217] ? __kasan_check_write+0x14/0x20 [ 306.891959][T11217] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 306.897509][T11217] ? chrdev_open+0x2d4/0x6b0 [ 306.902114][T11217] base_probe+0x59/0x70 [ 306.906285][T11217] kobj_lookup+0x260/0x460 [ 306.910715][T11217] ? exact_match+0x20/0x20 [ 306.915144][T11217] chrdev_open+0x318/0x6b0 [ 306.919582][T11217] ? cdev_put.part.0+0x50/0x50 [ 306.924355][T11217] ? security_file_open+0x87/0x300 [ 306.929476][T11217] do_dentry_open+0x4e6/0x1380 [ 306.933487][T11242] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/11' not defined. [ 306.934237][T11217] ? __kasan_check_read+0x11/0x20 [ 306.934256][T11217] ? cdev_put.part.0+0x50/0x50 [ 306.934273][T11217] ? chown_common+0x5c0/0x5c0 [ 306.960190][T11217] ? inode_permission+0xb4/0x560 [ 306.960213][T11217] vfs_open+0xa0/0xd0 [ 306.960230][T11217] path_openat+0x10e9/0x46d0 [ 306.960245][T11217] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 306.960263][T11217] ? kasan_slab_alloc+0xf/0x20 [ 306.974585][T11217] ? kmem_cache_alloc+0x121/0x710 [ 306.974598][T11217] ? getname_flags+0xd6/0x5b0 [ 306.974609][T11217] ? getname+0x1a/0x20 [ 306.974622][T11217] ? do_sys_open+0x2c9/0x5d0 [ 306.974649][T11217] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 306.974671][T11217] ? __alloc_fd+0x487/0x620 [ 306.993740][T11217] do_filp_open+0x1a1/0x280 [ 306.993758][T11217] ? may_open_dev+0x100/0x100 [ 306.993784][T11217] ? __kasan_check_read+0x11/0x20 [ 306.993799][T11217] ? do_raw_spin_unlock+0x57/0x270 [ 306.993815][T11217] ? _raw_spin_unlock+0x2d/0x50 [ 306.993830][T11217] ? __alloc_fd+0x487/0x620 [ 307.017756][T11217] do_sys_open+0x3fe/0x5d0 [ 307.017778][T11217] ? filp_open+0x80/0x80 [ 307.017798][T11217] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 307.017814][T11217] ? do_syscall_64+0x26/0x760 [ 307.017829][T11217] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.017846][T11217] ? do_syscall_64+0x26/0x760 [ 307.027137][T11241] input: syz0 as /devices/virtual/input/input103 [ 307.031471][T11217] __x64_sys_open+0x7e/0xc0 [ 307.031491][T11217] do_syscall_64+0xfa/0x760 [ 307.031512][T11217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.031524][T11217] RIP: 0033:0x413fb1 [ 307.031539][T11217] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:48:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 18:48:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xa, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 307.031552][T11217] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 307.079247][T11217] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 307.079256][T11217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 [ 307.079265][T11217] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 307.079274][T11217] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 307.079283][T11217] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x20, r3, 0xa03, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36d}]}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r6 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='#@\n'], 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) pwritev(r7, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r8 = socket(0x0, 0x2, 0x0) close(r8) r9 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001b40)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r10, 0x2}, &(0x7f0000000100)=0x8) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18:48:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00'/33, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdd4) 18:48:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) 18:48:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = socket$inet6(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4, @in=@remote}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000007c0)=0x3ff, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000040)={0x1, 0x7fffffff}) 18:48:40 executing program 0 (fault-call:4 fault-nth:10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 307.517692][T11273] input: syz0 as /devices/virtual/input/input104 [ 307.542179][T11274] IPVS: ftp: loaded support on port[0] = 21 18:48:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x12, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 307.749344][T11287] FAULT_INJECTION: forcing a failure. [ 307.749344][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 307.802397][T11287] CPU: 0 PID: 11287 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 307.810314][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.820370][T11287] Call Trace: [ 307.823669][T11287] dump_stack+0x197/0x210 [ 307.828015][T11287] should_fail.cold+0xa/0x15 [ 307.832629][T11287] ? fault_create_debugfs_attr+0x180/0x180 [ 307.838441][T11287] ? ___might_sleep+0x163/0x2c0 [ 307.843309][T11287] __should_failslab+0x121/0x190 [ 307.848338][T11287] should_failslab+0x9/0x14 [ 307.852839][T11287] kmem_cache_alloc_trace+0x2d3/0x790 [ 307.858233][T11287] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 307.863784][T11287] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 307.869764][T11287] ? integrity_kernel_module_request+0x39/0x45 [ 307.869787][T11287] __request_module+0x33d/0xbab [ 307.869802][T11287] ? find_held_lock+0x35/0x130 [ 307.869819][T11287] ? base_probe+0x59/0x70 [ 307.869832][T11287] ? free_modprobe_argv+0xa0/0xa0 [ 307.869851][T11287] ? lock_downgrade+0x920/0x920 [ 307.869864][T11287] ? kobj_lookup+0x29b/0x460 [ 307.869886][T11287] ? mutex_trylock+0x2d0/0x2d0 [ 307.909054][T11287] ? __kasan_check_write+0x14/0x20 [ 307.914153][T11287] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 307.919685][T11287] ? chrdev_open+0x2d4/0x6b0 [ 307.919711][T11287] base_probe+0x59/0x70 [ 307.919726][T11287] kobj_lookup+0x260/0x460 [ 307.919748][T11287] ? exact_match+0x20/0x20 [ 307.919769][T11287] chrdev_open+0x318/0x6b0 [ 307.919785][T11287] ? cdev_put.part.0+0x50/0x50 [ 307.941873][T11287] ? security_file_open+0x87/0x300 [ 307.941892][T11287] do_dentry_open+0x4e6/0x1380 [ 307.956465][T11287] ? __kasan_check_read+0x11/0x20 [ 307.961485][T11287] ? cdev_put.part.0+0x50/0x50 [ 307.966251][T11287] ? chown_common+0x5c0/0x5c0 [ 307.970930][T11287] ? inode_permission+0xb4/0x560 [ 307.975877][T11287] vfs_open+0xa0/0xd0 [ 307.979869][T11287] path_openat+0x10e9/0x46d0 [ 307.984450][T11287] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 307.984463][T11287] ? kasan_slab_alloc+0xf/0x20 [ 307.984475][T11287] ? kmem_cache_alloc+0x121/0x710 [ 307.984488][T11287] ? getname_flags+0xd6/0x5b0 [ 307.984497][T11287] ? getname+0x1a/0x20 [ 307.984516][T11287] ? do_sys_open+0x2c9/0x5d0 [ 308.004722][T11287] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 308.004744][T11287] ? __alloc_fd+0x487/0x620 [ 308.004763][T11287] do_filp_open+0x1a1/0x280 [ 308.020307][T11295] input: syz0 as /devices/virtual/input/input106 [ 308.023227][T11287] ? may_open_dev+0x100/0x100 [ 308.023271][T11287] ? __kasan_check_read+0x11/0x20 [ 308.023282][T11287] ? do_raw_spin_unlock+0x57/0x270 [ 308.023301][T11287] ? _raw_spin_unlock+0x2d/0x50 [ 308.053732][T11287] ? __alloc_fd+0x487/0x620 [ 308.058248][T11287] do_sys_open+0x3fe/0x5d0 [ 308.062659][T11287] ? filp_open+0x80/0x80 [ 308.062681][T11287] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 308.062699][T11287] ? do_syscall_64+0x26/0x760 [ 308.072442][T11287] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.083136][T11287] ? do_syscall_64+0x26/0x760 [ 308.087820][T11287] __x64_sys_open+0x7e/0xc0 [ 308.092326][T11287] do_syscall_64+0xfa/0x760 [ 308.096836][T11287] entry_SYSCALL_64_after_hwframe+0x49/0xbe 18:48:40 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x108800, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)={0x27, 0x0, 0x1, 0x7, 0x87, 0x1, "c6d2b608cb1bf4d53443c5e18348edfbfffc7510694b22aa974a28aee9a39b97d5989085a001120b321691caf18d768460d6f33d3441c23843a26c8ae87b5a", 0xd}, 0x60, &(0x7f00000002c0)=[{&(0x7f00000001c0)="2d3fef6e34c53c971228f76ee9067eb2ac6acd48658f6fede3c1f86d8b2e0835252fd53b9e50f232927de2c512d65d0b8f69885231968af42ccf88b6ffaf338d69d847a38dab2d2077c1f7da5199b017d043bfcf9020d32e96e9dd696e0cf5d8d868520b2aa3e4cefd4b898b", 0x6c}, {&(0x7f00000000c0)="9cf09adeff", 0x5}, {&(0x7f0000000240)="bd68e9096e75306b7956c7b5183a625f1f127bfc6ba93aa5a196847b9f2353f71eead2ed8f4588088609d21c717ca07b18b1ca4f4956b3a8fc119c10b0bcc456d4f6b2c7062b", 0x46}], 0x3, &(0x7f0000000300)={0x30, 0x0, 0x4, "90e493333a767ca8d2031ee380b54db6871e36841f054570e83260b893"}, 0x30, 0x40814}, {&(0x7f0000000340)={0x27, 0x0, 0x2, 0x563ffa1d844b56f5, 0x5, 0x5, "4c5a4b03ec8fa8140a882283accc34e9a92c4297d75ca42710e10e694d09f536fb02d6db3c5cef1d7910f2788e3bf4e42a82f725e1444832129749d008276b", 0x23}, 0x60, &(0x7f0000000500)=[{&(0x7f00000003c0)="e8bb562c6823957de78f39513bb696b14789736e0842dd9360344482c84c3992f6fc190098140e63211937ca55d57974c108f421d88e4279b0fc8c76b3d00d8f108fb64ba15f27a43e71dae3fd899579f5248a61ad22575678bea5a17adaa8ec3cfc689e55f11e0681841391e0b8abd0d63ad520df38449a7a15f6889412581de8f4875e59420446fab4ee0faabcd4c7918beeba329290807e5c676ddf3e8b176d1d679a5236170beda9d2a565d982532680c0cd97d80e9992681de9fe7deb7c862d516f43e42fe3947230aa26", 0xcd}, {&(0x7f00000004c0)="1477bdc15f2e8d188b1590e6e94824b0d6d7f170912fbba7f13133bfa88ff45fa5ce2b6218f0be8f38093bb61c1816fb7d73f4b37b6b92cae7", 0x39}], 0x2, &(0x7f0000000540)={0xe0, 0x10b, 0x4, "b815c70f6571ff631214a241b011c6a09fccd1bf2fbdfa81777fc7fbce44bd8e43422fdbe311121bef86914505c8c4b1f861711099daf5e5bfc6e56878e1c2754544f6a28afb65064d8e316a9003893f166815bf62c81417ab45214303b281d9b7513d18fd817e3a1b5d4d675bb57443322f62854c0285cd1d1ade26ba11f9dbf9be1df7c50438655d65d1d82d9c9e77f7e8647630236e998988d6dbbd96a690166fe3297e8e65d8a04ffffcf984deb1188e5c501a86536d1e8330ec6f60b128d6b48e77f926bbda21e8"}, 0xe0, 0x4000014}, {&(0x7f0000000640)={0x27, 0x1, 0x1, 0x2, 0x1, 0x23, "410dc76f7f5a9076c2c66be9c32227013abe0c50ec23b48c81e1717c62ab36e70dc8767a092dae4d370b73ef0e03f0b36e3f86692374231523a965c08eb8b0", 0x37}, 0x60, &(0x7f0000000980)=[{&(0x7f00000006c0)="058daea1", 0x4}, {&(0x7f0000000700)="e50ac22b85dcdb371c9cfed6bbdeff0ccc1ca9c94a03e49060513d3c1e5c044a96e81b735650c7d654b4901f555c7c8d0385ace05e12c3b556dbac2b6ddc06b259039efd8ed2a902c1fb", 0x4a}, {&(0x7f0000000780)="628e49c0cf4e61231cd29e494176c5d3435beb98ae1cf1673c0f6f1d84702639d1196317f5b2087147a31b65c53b6c2574ceb9f42c1caf436508d177afe87ab7774903087432b28334b1692edf635e5eee723560d8d4550781200910900c18145cf810e0804fa07e5fbfe58df5cafcc2b5b95e253daa04f18b3a9dd881a4fe3be0e960684b25dc01b49a76c9062253399da7783d841e6b3a606ef5c600d395dc2e52cb5efe15a22dafda323cc0603d02ac64970f7a5ae464ea1e9f781b5b80c732506f02fad2d190f6dc3e49313e4087cda49fab99ed69f908fe6507e019390b621a928ed817f7566762e3c6da45d5241e202e8664f7", 0xf6}, {&(0x7f0000000880)="08a8751dc115a44f9e7bf89df941878a38af4f502c42ebf9ebcd6029e50dc4eb30ea4a8e63b9c885c535a3eaec35eee8ba4a8a7bd1d882ef46", 0x39}, {&(0x7f00000008c0)="58385474cd713880a46126366ea9b3b2491475479e6e2fdd80c1a85415c1faf1d8a9e3a7a24bf3b7b63e1cf495034bd0bbfed395e6f8a95f900811993baa286edca0bb05b32d03", 0x47}, {&(0x7f0000000940)}], 0x6, &(0x7f0000000a00)={0x40, 0x102, 0x5, "8d0c57cc129c73f2208ca4efc2bb47aa2a1cc76842a4e1cee7de977cadb7936fc05536c3816c14587814bfe580"}, 0x40, 0x4000000}, {&(0x7f0000000a40)={0x27, 0x0, 0x0, 0x1, 0x40, 0xff, "6c1626a21a18463f0ad9f6ee1c29bed15918f7fb8c1b6c8b0c498669fe8640c207be8466289ed14b0cad02cc62d44a998486bac87f1d62c1544c4e26e820ea", 0x1d}, 0x60, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)="87cb8216cccf5b1dbf5d4285b6bf0fff1b9b2734ff7d49e24327b74a1729234ce5ac123d2ce9c7ac52b0d8e61e4a5f6906387723379ed6914853fc", 0x3b}, {&(0x7f0000000b00)="eb8d6a7c898278e02db268c2233ae304047c1a86cada2afc529fdb774ee75e2018f33e7c4b2c39dc5b0e5189108707e9bec4a83c65a5d70f6040444ff726d2f6d2cf2519a598", 0x46}, {&(0x7f0000000b80)="4017f9e84f07e7a70db9cfa8ccb9651744d10c92b838f94cda4bae1779407c13b00983ea3fb07986", 0x28}, {&(0x7f0000000bc0)="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", 0x1000}], 0x4, &(0x7f0000001c00)={0x68, 0x102, 0x5, "0d296937cd0b03609ce897b49b6f06fbd1d37291c43e2a856a07911d817922ef761a0c1e6c43b1122a0ae5b01e1b36e9d73f800adfff0e8d3df5a485b4a26eef1d07d86dc2727fef1ea762f70cc9314107674e4e73f7c1d3"}, 0x68, 0x40001}, {&(0x7f0000001c80)={0x27, 0x0, 0x0, 0x6, 0x1, 0x6, "1aec943dec49babe05f725d02f4eee2026e1cb732c89f839ab27fed15facd65da0ffe980390c7cfb6585104da22b7694c94043550bac623211c06c83733d1b", 0x10000000}, 0x60, &(0x7f0000003140)=[{&(0x7f0000001d00)="40e1f5804e3eb714b93e4572a111fcc016b4cf8dc68a7ce54ac00995b99f7e7dca45e9b58d01aa473dee87985481b93b69104e16ab2c2c87a43cbfd92d5bb5eb1d1f57dd8cc77ddd3e444c97ffe2356e02ac6dc560251343ef8f2c371b3bd52bed5cb2b57a62031c72bc9d46a23e77372cfc3f6025a42dd8b32054a4d9b668d782603a1945c8190bcc7e63d2bf05f6d6955f6dc73ff744ef7786f8b07635df13b1440ee792d9576e4c10cc78f9d307ff2e77014843d4faac", 0xb8}, {&(0x7f0000001dc0)="ce63aa5c579a1ec919643f818d58d7c5f92721ef146428d8a0134ed69aa6f8c2fba1011acd5f34559acba70ced93a3474c388e8c97807e3a636c86fa3cbc4f09ee1f7bc6b4fcf1570e0c415f495b74343e3a18f2a3ef4f3ed0515a97f36a9aeae4c942fad8badbff56b4906ea51db4009c1fc3cb16e97bab14faf224036853b8c58e922d483c8b29", 0x88}, {&(0x7f0000001e80)="051450a09819831bb134545ae4c54cc3c5e60aef6a676287", 0x18}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="9e8a3bdbc8dc3d74ab8b3f75af64d9227f968ce16df55defcbce1ad3ad8e88b238590c670e13d5fe971d85fda4adcfffa9b8a69f159d73d35be0d31293e7589c108b17be9da556624098aa2fb4be953981b6a5c439aa0334f8e490cc9caf4bcaff6b07dec150b2d9a7be12b8fae1b9853fc23831738763d730e2692ef8310b69817a3141240f950a800279d1573ae76fc562a69db19fc41ddaaa61a6eacb99c3", 0xa0}, {&(0x7f0000002f80)="e8d18597e283a812dccd328bf6153e78f063017ad316233c492ca2827080eed94ed47973a067dd587891766f12774270757f8103d8422ab01bc4cff6b93232c7b7e43f4c711671896e99a1415ff5703979d22be6b09f1f9adbb9f9d076be773b2845d9cce93a72a1fc444f7343be82eb3e32d3b0d9d107c55582aedbd76f4109ac0861ca51c61c518f3b84093592062a23742cb50dcdd2d44d30fd3000b65f49c096625896", 0xa5}, {&(0x7f0000003040)="8e527c937d406cc311e77927dbec948b16ae0d0aeca2d04d51b7a39310dabafccf6793a54c6a300cc6107d28eec6ee41a7c91a8b642a4ffff21738cd857c706a3d236b181977d04320a76f9144addd96a593f07884b310d16a09720e0e2dd93648a95109bcac4562e644f8cdcc9ae602c6f315a994dc31c2e3b88b2cf53c7a9e7fa16487eb4b60fe7a517718e6bf294a24c54084467e160eaf9d21d7c422e5d6ad1e5f08efb78a69861c1a437a664f3b8bc7e03b3675ab981aaa05653af00055e446a23ced7598949d308ac725dba344688e8374c5f95468369328b77fb7c7673da8d62ed3ce662c2d7f28fc255ef7", 0xef}], 0x7, 0x0, 0x0, 0xff2e75dd40eaa831}, {&(0x7f00000031c0)={0x27, 0x1, 0x1, 0x2, 0x4, 0x9, "3d1c32077b478cee25eed3662b093a7a87308a832eb1bb4615935fdef48eaa5eef46dda576981bdae67bbf0c4bebe554991a341cd1ef158f8a0c29664f82fd", 0x2}, 0x60, &(0x7f0000004340)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="0c4b63292af93b58d40a140da607f2bda6d3f8f51b0827b3242436f6d2748bad9ffca8ad9be9571562356b1b625dd7a5a896b1accd09667da1228ae78198e938fba15eadb049a825b3bf4f623fb16f838bc178b723fa15", 0x57}, {&(0x7f0000003300)="0bb4fdc623792b08be52d75074ed9bfb1b24d97c5d2d498286c913bddb4fe76817a32a2e02331cd6dffe96ec086ac9e8b89600f9aa68e22b0c9f8f", 0x3b}, {&(0x7f0000003340)="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", 0x1000}], 0x4, &(0x7f0000004380)={0x20, 0x103, 0x7ff, "1e6ccdf6b957803480"}, 0x20, 0x1}], 0x6, 0xeafaa4def4385cd) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000021000500d25a80648c63940d0600fc00100003400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) [ 308.102724][T11287] RIP: 0033:0x413fb1 [ 308.106624][T11287] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 308.126218][T11287] RSP: 002b:00007f6e63c967a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 308.126233][T11287] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 308.126241][T11287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f6e63c96850 18:48:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x14, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x3) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x1003c}], 0x1) [ 308.126250][T11287] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 308.126258][T11287] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f6e63c976d4 [ 308.126267][T11287] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc0, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 308.199237][T11302] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.217884][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:48:41 executing program 2: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa1493c1701022a07) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x3, 0x1) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r3 = socket(0x0, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x3, 0xd34}, 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x3, 0x1dcc11275f852e7e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000140), 0x8}, 0x20000a01c, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xf24e96747c77a447) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) r6 = socket(0x1, 0x5, 0x0) fsetxattr(r6, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000600)='wlan1#wlan0!(nodevppp0vboxnet1wlan1[posix_acl_accessmd5sum\x00', 0x3b, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000740)={0x6, 0x20, 0x380000000000000, 'queue1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:48:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"8a3c8951a656cd4abf9d8393cc68d3026cb845e42eb53be7aeea0b60f3225cd37a7747c971ae9298238b1ee7ccfce77fb747a31ec066ae763d63e8b22df0832d933ef94551ba377829eccc6d205e84d01f12893adfc65df1d741cd656a25222402c3cb9db14e60dfc7fd04b2771628fb54471077b319117f62470bebee08f1c173d0d74a680ead58798b4911e38bcab9579a0b73b06339212567662e25b97310582eb08590c3076beb57d1bea71024dd72d9508917c0ee328b48a567373f53ea99a49b7a270e39357d3c60699458814ff62536c4b7af1445f79fd0d685853f50001457408e4b44169849a971f12bc09617186a9f48e6ac52567fc5b8e1377857a5bb9cac3c676a44b238387ade41f8cdab821065a738628011f40743750b7e8c6d4e6a23ecab37df97fcf751496546c009db51b0211721f6e36c244986452a370f8d2bc551afcf966819f3ffe99025509014a63491ad904b8d47c16501708a94a94eeea8522990a99efa37e837fdfe8800ed62b60d0175f09420f8af06461bf0b98acedaa6b0fad82c7ef34e748945eafd213a4b5f18b2cf5e10e36be3c015188fba3527e63ac0d22535c65a946dfacd354b4a3aa465b5022408d645184d9d0282a43e68dd1c89e8e8049835151960b5fd6e6fcc70ad3cdec909bbc444adfbc534c22cadfe0862552afffa98900c4e30e1d918280e484bb3120620ed484705eccc23692f96f71aa1e4a9ecd78a5af86ba12b2de28b74816eb3105206d195e5c09d0a62fcc214e82f1958c863e6ad51a087904f913666749ce6623501a6239afb37bd7e8a087aa03d5a3d73f273b34b61c9c02ef111898c199a9f1511595682af8d19664d8a5ef850e811db8eced573f64cee321d5d8d103e93a95b2b0b94d1790047b7d465a099997bb207c4abedc6d3385ca88f405526373b1530203ff7b7d829f6668c059791dcbc2b7e03c96891352b18f415ee442b9813f29a307fb792fc9100e8fc8904447cff28ba4e5c4148f24a931bf181ef9beb2ff4ef873d07dbd486d4b8d8db1e05b56a131a9f4f0e6752603f36dc10372988bc912d1f52031ca65e915ea9ec15b4370ae4c4c7fd6c2578c51dac80f08429a6ea89112417dd4592103ca654f1c5a9ffaa137ae65e53e4dbe6d4cf1aabd65ae0cee92e4de826fd52b4ded1dedd7a7c0de68fd3272d66bab113a25dc670b5ccf6bd1ff65529eb0bf01c666c6a587bcd3e51d31af45251242d319d7f0e86eddf0a45ef54509a4c61e045b7121fc8946ca83b8afba4905154da5451f8d9eb86977d05a0fb8d0ad525d5606322f93e0fec8f512f1519b0644847edd02bf73996e21f247d90807454fc3a841ac0463f7eedca934bdad22e7d3f92e9f3b7f6fdfef5d89df7d7c0947731027c196dc2a17bc8c76a2243631182f2d8f5c02018f08eed64c64d7efe5f6527f6"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:48:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 18:48:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x300, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 308.658021][T11326] input: syz0 as /devices/virtual/input/input107 [ 309.002443][T11280] IPVS: ftp: loaded support on port[0] = 21 18:48:41 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="3ed3fce06113a344ae9bf73a2f8553dcb619945b0d8985592889a3241b6aaaf6de647a85007f495b02abb8e2d311f6accaf779683ae89036c9e7e351456a990c99ebcce835a001de7a30e1e93270ab1e20467ed014e819b90567c8293a259c86ba44c4b022f4fbf3602ab8d8d0d8", 0x6e}, {&(0x7f0000000240)="efbbbb5d60f89fbb72c1c0b4d2e37c6aa49fa5d9116038350a0baf83086b8ab9d33c816fc31298a4cb2313c58497966e5aec68fc491ae2c77593e170ea5df49b1324c0e513d3e327a33acfafdb136e2974bbccb35f", 0x55}], 0x2, 0x0, 0x34c}, 0x88) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="240000001a0007041dfffd946f610500020000001f0000000000080008001b003a", 0x21}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}}) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492504, 0xc004000) r3 = socket(0x10, 0x80005, 0x3) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000140)=0x3, 0x4) 18:48:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3f9, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:48:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 18:48:41 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_inet_udp_SIOCOUTQ(r13, 0x5411, &(0x7f0000000080)) [ 309.367039][T11357] input: syz0 as /devices/virtual/input/input108 18:48:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3fe, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='\\dev/input/event#\x00', 0x4, 0x0) 18:48:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x500, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) 18:48:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x600, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/#ev/input/event#\x00', 0x4, 0x0) [ 309.804531][T11390] input: syz0 as /devices/virtual/input/input112 18:48:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/%ev/input/event#\x00', 0x4, 0x0) 18:48:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x900, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:42 executing program 5 (fault-call:5 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:48:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0xd, &(0x7f0000000300)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{@in6=@mcast2}}}, 0xe8) [ 310.184304][T11411] input: syz0 as /devices/virtual/input/input117 [ 310.271598][T11416] FAULT_INJECTION: forcing a failure. [ 310.271598][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 310.355561][T11416] CPU: 1 PID: 11416 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 310.363485][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.373533][T11416] Call Trace: [ 310.376841][T11416] dump_stack+0x197/0x210 [ 310.381181][T11416] should_fail.cold+0xa/0x15 [ 310.385781][T11416] ? fault_create_debugfs_attr+0x180/0x180 [ 310.391597][T11416] ? ___might_sleep+0x163/0x2c0 [ 310.396452][T11416] __should_failslab+0x121/0x190 [ 310.401390][T11416] should_failslab+0x9/0x14 [ 310.405890][T11416] kmem_cache_alloc+0x2aa/0x710 [ 310.410753][T11416] ? __kasan_check_write+0x14/0x20 [ 310.416034][T11416] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 310.421580][T11416] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 310.426862][T11416] getname_flags+0xd6/0x5b0 [ 310.431365][T11416] getname+0x1a/0x20 [ 310.435278][T11416] do_sys_open+0x2c9/0x5d0 [ 310.439710][T11416] ? filp_open+0x80/0x80 [ 310.443954][T11416] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 310.449418][T11416] ? do_syscall_64+0x26/0x760 [ 310.454111][T11416] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.460206][T11416] ? do_syscall_64+0x26/0x760 [ 310.464906][T11416] __x64_sys_open+0x7e/0xc0 [ 310.469406][T11416] do_syscall_64+0xfa/0x760 [ 310.473914][T11416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.479797][T11416] RIP: 0033:0x413fb1 [ 310.483687][T11416] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 310.503288][T11416] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 310.511703][T11416] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 310.519677][T11416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 310.527641][T11416] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 310.535693][T11416] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 310.543654][T11416] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0xa, 0x0, &(0x7f0000000140)) 18:48:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xa00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/*ev/input/event#\x00', 0x4, 0x0) 18:48:43 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:48:43 executing program 5 (fault-call:5 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:43 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 18:48:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/+ev/input/event#\x00', 0x4, 0x0) [ 310.866595][T11437] input: syz0 as /devices/virtual/input/input120 18:48:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 310.961157][T11444] FAULT_INJECTION: forcing a failure. [ 310.961157][T11444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.974384][T11444] CPU: 0 PID: 11444 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 310.982273][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.995278][T11444] Call Trace: [ 310.998574][T11444] dump_stack+0x197/0x210 [ 311.002919][T11444] should_fail.cold+0xa/0x15 [ 311.007782][T11444] ? fault_create_debugfs_attr+0x180/0x180 [ 311.013591][T11444] ? __kasan_check_read+0x11/0x20 [ 311.018615][T11444] ? __lock_acquire+0x16f2/0x4a00 [ 311.018638][T11444] should_fail_alloc_page+0x50/0x60 [ 311.018652][T11444] __alloc_pages_nodemask+0x1a1/0x900 [ 311.018665][T11444] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 311.018682][T11444] ? __alloc_pages_slowpath+0x2920/0x2920 [ 311.045544][T11444] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 311.051192][T11444] ? fault_create_debugfs_attr+0x180/0x180 [ 311.056991][T11444] cache_grow_begin+0x90/0xd20 [ 311.061747][T11444] ? getname_flags+0xd6/0x5b0 [ 311.066414][T11444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.072638][T11444] kmem_cache_alloc+0x64e/0x710 [ 311.077470][T11444] ? __kasan_check_write+0x14/0x20 [ 311.082567][T11444] getname_flags+0xd6/0x5b0 [ 311.087055][T11444] getname+0x1a/0x20 [ 311.090944][T11444] do_sys_open+0x2c9/0x5d0 [ 311.095350][T11444] ? filp_open+0x80/0x80 [ 311.099594][T11444] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 311.105047][T11444] ? do_syscall_64+0x26/0x760 [ 311.109705][T11444] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.115753][T11444] ? do_syscall_64+0x26/0x760 [ 311.120413][T11444] __x64_sys_open+0x7e/0xc0 [ 311.127335][T11444] do_syscall_64+0xfa/0x760 [ 311.131819][T11444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.137704][T11444] RIP: 0033:0x413fb1 [ 311.141581][T11444] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 311.161175][T11444] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 311.169566][T11444] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 311.177780][T11444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 311.185744][T11444] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 311.193693][T11444] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 311.201655][T11444] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/-ev/input/event#\x00', 0x4, 0x0) 18:48:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 18:48:43 executing program 2: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setresuid(0x0, 0x0, 0x0) tkill(r0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:48:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xd00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/.ev/input/event#\x00', 0x4, 0x0) 18:48:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000140)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{\xf8\xff\xff\xff\xff\xff\xff\xffk\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2]\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:48:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000eeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cea", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:48:44 executing program 5 (fault-call:5 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='//ev/input/event#\x00', 0x4, 0x0) 18:48:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xf00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') sendfile(r1, r2, 0x0, 0x2) [ 311.762564][T11482] input: syz0 as /devices/virtual/input/input127 18:48:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/0ev/input/event#\x00', 0x4, 0x0) 18:48:44 executing program 2: [ 312.110095][T11489] FAULT_INJECTION: forcing a failure. [ 312.110095][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 312.123582][T11489] CPU: 1 PID: 11489 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 312.131482][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.141533][T11489] Call Trace: [ 312.144824][T11489] dump_stack+0x197/0x210 [ 312.149152][T11489] should_fail.cold+0xa/0x15 [ 312.153726][T11489] ? fault_create_debugfs_attr+0x180/0x180 [ 312.159516][T11489] ? ___might_sleep+0x163/0x2c0 [ 312.164354][T11489] __should_failslab+0x121/0x190 [ 312.169395][T11489] should_failslab+0x9/0x14 [ 312.173875][T11489] kmem_cache_alloc+0x2aa/0x710 [ 312.178705][T11489] ? kmem_cache_alloc+0x364/0x710 [ 312.183713][T11489] security_file_alloc+0x39/0x170 [ 312.188716][T11489] __alloc_file+0xde/0x340 [ 312.193119][T11489] alloc_empty_file+0x72/0x170 [ 312.197866][T11489] path_openat+0xef/0x46d0 [ 312.202261][T11489] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 312.208059][T11489] ? kasan_slab_alloc+0xf/0x20 [ 312.212801][T11489] ? kmem_cache_alloc+0x121/0x710 [ 312.217803][T11489] ? getname_flags+0xd6/0x5b0 [ 312.222466][T11489] ? getname+0x1a/0x20 [ 312.226528][T11489] ? do_sys_open+0x2c9/0x5d0 [ 312.231195][T11489] ? __x64_sys_open+0x7e/0xc0 [ 312.235859][T11489] ? __kasan_check_read+0x11/0x20 [ 312.240868][T11489] ? mark_lock+0xc2/0x1220 [ 312.245265][T11489] ? __kasan_check_read+0x11/0x20 [ 312.250275][T11489] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 312.255632][T11489] ? __alloc_fd+0x487/0x620 [ 312.260118][T11489] do_filp_open+0x1a1/0x280 [ 312.264604][T11489] ? may_open_dev+0x100/0x100 [ 312.269276][T11489] ? lock_downgrade+0x920/0x920 [ 312.274106][T11489] ? rwlock_bug.part.0+0x90/0x90 [ 312.279036][T11489] ? __kasan_check_read+0x11/0x20 [ 312.284051][T11489] ? do_raw_spin_unlock+0x57/0x270 [ 312.289169][T11489] ? _raw_spin_unlock+0x2d/0x50 [ 312.293999][T11489] ? __alloc_fd+0x487/0x620 [ 312.298491][T11489] do_sys_open+0x3fe/0x5d0 [ 312.302893][T11489] ? filp_open+0x80/0x80 [ 312.307119][T11489] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 312.312554][T11489] ? do_syscall_64+0x26/0x760 [ 312.317228][T11489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.323272][T11489] ? do_syscall_64+0x26/0x760 [ 312.327930][T11489] __x64_sys_open+0x7e/0xc0 [ 312.332567][T11489] do_syscall_64+0xfa/0x760 [ 312.337075][T11489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.342947][T11489] RIP: 0033:0x413fb1 [ 312.346824][T11489] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 312.366408][T11489] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 312.374797][T11489] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 312.382752][T11489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 312.390721][T11489] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 312.398674][T11489] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 18:48:45 executing program 4: [ 312.406628][T11489] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1200, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:45 executing program 1: 18:48:45 executing program 2: 18:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/Xev/input/event#\x00', 0x4, 0x0) 18:48:45 executing program 2: r0 = socket(0x2, 0x1000000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4f20, @remote}, 0x10) close(r0) 18:48:45 executing program 5 (fault-call:5 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:45 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 18:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/\\ev/input/event#\x00', 0x4, 0x0) 18:48:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1400, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:45 executing program 4: 18:48:45 executing program 2: [ 312.796772][T11536] input: syz0 as /devices/virtual/input/input136 18:48:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1a00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:45 executing program 4: 18:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/cev/input/event#\x00', 0x4, 0x0) [ 312.843864][T11539] FAULT_INJECTION: forcing a failure. [ 312.843864][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 312.943741][T11539] CPU: 1 PID: 11539 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 312.951653][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.961703][T11539] Call Trace: [ 312.964999][T11539] dump_stack+0x197/0x210 [ 312.969356][T11539] should_fail.cold+0xa/0x15 [ 312.973965][T11539] ? fault_create_debugfs_attr+0x180/0x180 [ 312.979783][T11539] ? ___might_sleep+0x163/0x2c0 [ 312.984645][T11539] __should_failslab+0x121/0x190 [ 312.989616][T11539] should_failslab+0x9/0x14 [ 312.994127][T11539] kmem_cache_alloc+0x2aa/0x710 [ 312.999000][T11539] ? kmem_cache_alloc+0x364/0x710 [ 313.004034][T11539] security_file_alloc+0x39/0x170 [ 313.009060][T11539] __alloc_file+0xde/0x340 [ 313.013477][T11539] alloc_empty_file+0x72/0x170 [ 313.013497][T11539] path_openat+0xef/0x46d0 [ 313.013516][T11539] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 313.028458][T11539] ? kasan_slab_alloc+0xf/0x20 [ 313.033222][T11539] ? kmem_cache_alloc+0x121/0x710 [ 313.038240][T11539] ? getname_flags+0xd6/0x5b0 [ 313.038253][T11539] ? getname+0x1a/0x20 [ 313.038267][T11539] ? do_sys_open+0x2c9/0x5d0 [ 313.038281][T11539] ? __x64_sys_open+0x7e/0xc0 [ 313.038297][T11539] ? __kasan_check_read+0x11/0x20 [ 313.038315][T11539] ? mark_lock+0xc2/0x1220 [ 313.056270][T11539] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 313.056294][T11539] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 313.056314][T11539] ? __alloc_fd+0x487/0x620 [ 313.056337][T11539] do_filp_open+0x1a1/0x280 [ 313.065737][T11539] ? may_open_dev+0x100/0x100 [ 313.065754][T11539] ? lock_downgrade+0x920/0x920 [ 313.065768][T11539] ? rwlock_bug.part.0+0x90/0x90 [ 313.065787][T11539] ? __kasan_check_read+0x11/0x20 [ 313.065796][T11539] ? do_raw_spin_unlock+0x57/0x270 [ 313.065817][T11539] ? _raw_spin_unlock+0x2d/0x50 [ 313.076680][T11539] ? __alloc_fd+0x487/0x620 [ 313.076709][T11539] do_sys_open+0x3fe/0x5d0 [ 313.076733][T11539] ? filp_open+0x80/0x80 [ 313.085720][T11539] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 313.085735][T11539] ? do_syscall_64+0x26/0x760 [ 313.085751][T11539] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 18:48:45 executing program 4: 18:48:45 executing program 1: 18:48:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/iev/input/event#\x00', 0x4, 0x0) [ 313.085768][T11539] ? do_syscall_64+0x26/0x760 [ 313.095249][T11539] __x64_sys_open+0x7e/0xc0 [ 313.095265][T11539] do_syscall_64+0xfa/0x760 [ 313.095285][T11539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.095299][T11539] RIP: 0033:0x413fb1 [ 313.167971][T11539] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 313.187572][T11539] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 313.187587][T11539] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 313.187596][T11539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 313.187604][T11539] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 313.187612][T11539] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 313.187619][T11539] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:46 executing program 5 (fault-call:5 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/lev/input/event#\x00', 0x4, 0x0) 18:48:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1b00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:46 executing program 2: 18:48:46 executing program 1: 18:48:46 executing program 4: 18:48:46 executing program 2: [ 313.464031][T11568] input: syz0 as /devices/virtual/input/input141 18:48:46 executing program 1: [ 313.506985][T11568] FAULT_INJECTION: forcing a failure. [ 313.506985][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 313.551385][T11568] CPU: 1 PID: 11568 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 313.559293][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.569345][T11568] Call Trace: [ 313.572645][T11568] dump_stack+0x197/0x210 [ 313.576989][T11568] should_fail.cold+0xa/0x15 [ 313.581584][T11568] ? fault_create_debugfs_attr+0x180/0x180 [ 313.587394][T11568] ? ___might_sleep+0x163/0x2c0 [ 313.587414][T11568] __should_failslab+0x121/0x190 [ 313.597152][T11568] should_failslab+0x9/0x14 [ 313.597165][T11568] __kmalloc+0x2e0/0x770 [ 313.597188][T11568] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 313.615145][T11568] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 313.620866][T11568] tomoyo_realpath_from_path+0xcd/0x7b0 [ 313.620882][T11568] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 313.620903][T11568] tomoyo_check_open_permission+0x2a8/0x3f0 [ 313.638515][T11568] ? __kasan_check_read+0x14/0x20 [ 313.638530][T11568] ? tomoyo_path_number_perm+0x520/0x520 [ 313.638552][T11568] ? __kasan_check_read+0x11/0x20 [ 313.649146][T11568] ? mark_lock+0xc2/0x1220 [ 313.649177][T11568] ? lock_downgrade+0x920/0x920 [ 313.658563][T11568] ? rwlock_bug.part.0+0x90/0x90 [ 313.658589][T11568] tomoyo_file_open+0xa9/0xd0 [ 313.673010][T11568] security_file_open+0x71/0x300 [ 313.677951][T11568] do_dentry_open+0x37a/0x1380 [ 313.682711][T11568] ? __kasan_check_read+0x11/0x20 [ 313.687742][T11568] ? chown_common+0x5c0/0x5c0 [ 313.692424][T11568] ? inode_permission+0xb4/0x560 [ 313.697376][T11568] vfs_open+0xa0/0xd0 [ 313.701360][T11568] path_openat+0x10e9/0x46d0 [ 313.705956][T11568] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 313.711758][T11568] ? kasan_slab_alloc+0xf/0x20 [ 313.716525][T11568] ? kmem_cache_alloc+0x121/0x710 [ 313.721553][T11568] ? getname_flags+0xd6/0x5b0 [ 313.726236][T11568] ? getname+0x1a/0x20 [ 313.730307][T11568] ? do_sys_open+0x2c9/0x5d0 [ 313.735256][T11568] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 313.740644][T11568] ? __alloc_fd+0x487/0x620 [ 313.745174][T11568] do_filp_open+0x1a1/0x280 18:48:46 executing program 2: [ 313.749686][T11568] ? may_open_dev+0x100/0x100 [ 313.754382][T11568] ? __kasan_check_read+0x11/0x20 [ 313.759407][T11568] ? do_raw_spin_unlock+0x57/0x270 [ 313.764524][T11568] ? _raw_spin_unlock+0x2d/0x50 [ 313.769379][T11568] ? __alloc_fd+0x487/0x620 [ 313.773893][T11568] do_sys_open+0x3fe/0x5d0 [ 313.778316][T11568] ? filp_open+0x80/0x80 [ 313.782565][T11568] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 313.788035][T11568] ? do_syscall_64+0x26/0x760 [ 313.792720][T11568] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.798775][T11568] ? do_syscall_64+0x26/0x760 [ 313.803446][T11568] __x64_sys_open+0x7e/0xc0 [ 313.807926][T11568] do_syscall_64+0xfa/0x760 [ 313.812410][T11568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.818281][T11568] RIP: 0033:0x413fb1 [ 313.822153][T11568] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 313.841743][T11568] RSP: 002b:00007fec7f24a7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 313.850137][T11568] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 313.858092][T11568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f24a850 [ 313.866037][T11568] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 313.873984][T11568] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f24b6d4 [ 313.881945][T11568] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/oev/input/event#\x00', 0x4, 0x0) 18:48:46 executing program 1: 18:48:46 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 313.897438][T11568] ERROR: Out of memory at tomoyo_realpath_from_path. 18:48:46 executing program 5 (fault-call:5 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3601, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:46 executing program 2: 18:48:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/pev/input/event#\x00', 0x4, 0x0) 18:48:46 executing program 1: 18:48:46 executing program 4: 18:48:46 executing program 2: 18:48:46 executing program 1: 18:48:46 executing program 4: 18:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/sev/input/event#\x00', 0x4, 0x0) [ 314.363726][T11606] input: syz0 as /devices/virtual/input/input148 [ 314.396868][T11610] FAULT_INJECTION: forcing a failure. [ 314.396868][T11610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.410094][T11610] CPU: 0 PID: 11610 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 314.410104][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.410110][T11610] Call Trace: [ 314.410131][T11610] dump_stack+0x197/0x210 [ 314.410154][T11610] should_fail.cold+0xa/0x15 [ 314.440227][T11610] ? __kasan_check_read+0x11/0x20 [ 314.445264][T11610] ? fault_create_debugfs_attr+0x180/0x180 [ 314.451079][T11610] ? is_bpf_text_address+0xac/0x170 [ 314.456284][T11610] ? find_held_lock+0x35/0x130 [ 314.461056][T11610] should_fail_alloc_page+0x50/0x60 [ 314.466253][T11610] __alloc_pages_nodemask+0x1a1/0x900 [ 314.471726][T11610] ? lock_downgrade+0x920/0x920 [ 314.476572][T11610] ? __alloc_pages_slowpath+0x2920/0x2920 [ 314.476586][T11610] ? __kasan_check_read+0x11/0x20 [ 314.476608][T11610] ? fault_create_debugfs_attr+0x180/0x180 [ 314.493223][T11610] cache_grow_begin+0x90/0xd20 [ 314.497985][T11610] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 314.498004][T11610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.498022][T11610] __kmalloc+0x6b2/0x770 [ 314.498042][T11610] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 314.498058][T11610] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 314.498074][T11610] tomoyo_realpath_from_path+0xcd/0x7b0 [ 314.498094][T11610] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.526190][T11610] tomoyo_check_open_permission+0x2a8/0x3f0 [ 314.526207][T11610] ? __kasan_check_read+0x14/0x20 [ 314.526221][T11610] ? tomoyo_path_number_perm+0x520/0x520 [ 314.526244][T11610] ? __kasan_check_read+0x11/0x20 [ 314.537978][T11610] ? mark_lock+0xc2/0x1220 [ 314.538008][T11610] ? lock_downgrade+0x920/0x920 [ 314.538021][T11610] ? rwlock_bug.part.0+0x90/0x90 [ 314.538043][T11610] tomoyo_file_open+0xa9/0xd0 [ 314.538062][T11610] security_file_open+0x71/0x300 [ 314.538080][T11610] do_dentry_open+0x37a/0x1380 [ 314.538090][T11610] ? __kasan_check_read+0x11/0x20 [ 314.538109][T11610] ? chown_common+0x5c0/0x5c0 [ 314.538126][T11610] ? inode_permission+0xb4/0x560 [ 314.538149][T11610] vfs_open+0xa0/0xd0 [ 314.568870][T11610] path_openat+0x10e9/0x46d0 [ 314.606772][T11610] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 314.606785][T11610] ? kasan_slab_alloc+0xf/0x20 [ 314.606797][T11610] ? kmem_cache_alloc+0x121/0x710 [ 314.606811][T11610] ? getname_flags+0xd6/0x5b0 [ 314.606823][T11610] ? getname+0x1a/0x20 [ 314.606836][T11610] ? do_sys_open+0x2c9/0x5d0 [ 314.606879][T11610] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 314.606898][T11610] ? __alloc_fd+0x487/0x620 [ 314.606919][T11610] do_filp_open+0x1a1/0x280 [ 314.606936][T11610] ? may_open_dev+0x100/0x100 [ 314.645680][T11610] ? __kasan_check_read+0x11/0x20 18:48:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6100, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:47 executing program 2: [ 314.645696][T11610] ? do_raw_spin_unlock+0x57/0x270 [ 314.645714][T11610] ? _raw_spin_unlock+0x2d/0x50 [ 314.645728][T11610] ? __alloc_fd+0x487/0x620 [ 314.645758][T11610] do_sys_open+0x3fe/0x5d0 [ 314.645775][T11610] ? filp_open+0x80/0x80 [ 314.645794][T11610] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 314.654763][T11610] ? do_syscall_64+0x26/0x760 [ 314.669519][T11610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.669540][T11610] ? do_syscall_64+0x26/0x760 [ 314.669560][T11610] __x64_sys_open+0x7e/0xc0 [ 314.669578][T11610] do_syscall_64+0xfa/0x760 [ 314.693088][T11610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.693099][T11610] RIP: 0033:0x413fb1 [ 314.693117][T11610] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 314.708485][T11610] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 314.717452][T11610] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 314.717461][T11610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 314.717469][T11610] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 314.717477][T11610] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 314.717485][T11610] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 18:48:47 executing program 5 (fault-call:5 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:47 executing program 4: 18:48:47 executing program 1: 18:48:47 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xf4240, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:47 executing program 2: 18:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/uev/input/event#\x00', 0x4, 0x0) 18:48:47 executing program 2: 18:48:47 executing program 1: 18:48:47 executing program 4: 18:48:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/xev/input/event#\x00', 0x4, 0x0) [ 315.168090][T11638] input: syz0 as /devices/virtual/input/input153 [ 315.175704][T11643] FAULT_INJECTION: forcing a failure. [ 315.175704][T11643] name failslab, interval 1, probability 0, space 0, times 0 18:48:47 executing program 2: 18:48:47 executing program 1: [ 315.255698][T11643] CPU: 0 PID: 11643 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 315.263655][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.273706][T11643] Call Trace: [ 315.277016][T11643] dump_stack+0x197/0x210 [ 315.277042][T11643] should_fail.cold+0xa/0x15 [ 315.277063][T11643] ? fault_create_debugfs_attr+0x180/0x180 [ 315.277088][T11643] ? ___might_sleep+0x163/0x2c0 [ 315.296609][T11643] __should_failslab+0x121/0x190 [ 315.301557][T11643] should_failslab+0x9/0x14 [ 315.306076][T11643] __kmalloc+0x2e0/0x770 [ 315.310343][T11643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.316584][T11643] ? d_absolute_path+0x11b/0x170 [ 315.321522][T11643] ? __d_path+0x140/0x140 [ 315.325853][T11643] ? tomoyo_encode2.part.0+0xf5/0x400 [ 315.331227][T11643] tomoyo_encode2.part.0+0xf5/0x400 [ 315.331246][T11643] tomoyo_encode+0x2b/0x50 [ 315.331264][T11643] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 315.346461][T11643] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 315.352706][T11643] tomoyo_check_open_permission+0x2a8/0x3f0 [ 315.352722][T11643] ? __kasan_check_read+0x14/0x20 [ 315.352739][T11643] ? tomoyo_path_number_perm+0x520/0x520 [ 315.369237][T11643] ? __kasan_check_read+0x11/0x20 [ 315.374263][T11643] ? mark_lock+0xc2/0x1220 [ 315.378699][T11643] ? lock_downgrade+0x920/0x920 [ 315.383550][T11643] ? rwlock_bug.part.0+0x90/0x90 [ 315.388508][T11643] tomoyo_file_open+0xa9/0xd0 [ 315.393189][T11643] security_file_open+0x71/0x300 [ 315.398131][T11643] do_dentry_open+0x37a/0x1380 [ 315.402895][T11643] ? __kasan_check_read+0x11/0x20 [ 315.407924][T11643] ? chown_common+0x5c0/0x5c0 [ 315.412608][T11643] ? inode_permission+0xb4/0x560 [ 315.417556][T11643] vfs_open+0xa0/0xd0 [ 315.421541][T11643] path_openat+0x10e9/0x46d0 [ 315.426220][T11643] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 315.432015][T11643] ? kasan_slab_alloc+0xf/0x20 [ 315.436765][T11643] ? kmem_cache_alloc+0x121/0x710 [ 315.436778][T11643] ? getname_flags+0xd6/0x5b0 [ 315.436790][T11643] ? getname+0x1a/0x20 [ 315.436803][T11643] ? do_sys_open+0x2c9/0x5d0 [ 315.436832][T11643] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 315.436852][T11643] ? __alloc_fd+0x487/0x620 [ 315.436871][T11643] do_filp_open+0x1a1/0x280 [ 315.469475][T11643] ? may_open_dev+0x100/0x100 [ 315.474162][T11643] ? __kasan_check_read+0x11/0x20 [ 315.479188][T11643] ? do_raw_spin_unlock+0x57/0x270 [ 315.484311][T11643] ? _raw_spin_unlock+0x2d/0x50 [ 315.489163][T11643] ? __alloc_fd+0x487/0x620 [ 315.493678][T11643] do_sys_open+0x3fe/0x5d0 [ 315.498101][T11643] ? filp_open+0x80/0x80 [ 315.502351][T11643] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 315.507809][T11643] ? do_syscall_64+0x26/0x760 [ 315.512491][T11643] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.518557][T11643] ? do_syscall_64+0x26/0x760 [ 315.523240][T11643] __x64_sys_open+0x7e/0xc0 [ 315.527749][T11643] do_syscall_64+0xfa/0x760 [ 315.532258][T11643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.538149][T11643] RIP: 0033:0x413fb1 [ 315.542041][T11643] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 315.561650][T11643] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 315.570062][T11643] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 315.578032][T11643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 315.586000][T11643] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 315.593962][T11643] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 315.601932][T11643] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 315.669856][T11643] ERROR: Out of memory at tomoyo_realpath_from_path. 18:48:48 executing program 5 (fault-call:5 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:48 executing program 4: 18:48:48 executing program 2: 18:48:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cf41, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d%v/input/event#\x00', 0x4, 0x0) 18:48:48 executing program 1: 18:48:48 executing program 2: 18:48:48 executing program 4: 18:48:48 executing program 1: 18:48:48 executing program 2: 18:48:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d.v/input/event#\x00', 0x4, 0x0) 18:48:48 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cf50, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 316.195351][T11674] input: syz0 as /devices/virtual/input/input158 [ 316.246207][T11681] FAULT_INJECTION: forcing a failure. [ 316.246207][T11681] name failslab, interval 1, probability 0, space 0, times 0 [ 316.335953][T11681] CPU: 0 PID: 11681 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 316.343896][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.353946][T11681] Call Trace: [ 316.357241][T11681] dump_stack+0x197/0x210 [ 316.361579][T11681] should_fail.cold+0xa/0x15 [ 316.366174][T11681] ? fault_create_debugfs_attr+0x180/0x180 [ 316.372006][T11681] ? ___might_sleep+0x163/0x2c0 [ 316.376879][T11681] __should_failslab+0x121/0x190 [ 316.381822][T11681] should_failslab+0x9/0x14 [ 316.386330][T11681] kmem_cache_alloc_node_trace+0x274/0x750 [ 316.392129][T11681] ? lock_downgrade+0x920/0x920 [ 316.396968][T11681] ? kobj_lookup+0x29b/0x460 [ 316.396993][T11681] __get_vm_area_node+0x12b/0x370 [ 316.397012][T11681] __vmalloc_node_range+0xd2/0x7a0 [ 316.397087][T11681] ? evdev_open+0x3e1/0x530 [ 316.397105][T11681] ? chrdev_open+0x51f/0x6b0 [ 316.421956][T11681] ? evdev_open+0x3e1/0x530 [ 316.426454][T11681] vzalloc+0x6b/0x90 [ 316.426468][T11681] ? evdev_open+0x3e1/0x530 [ 316.426481][T11681] evdev_open+0x3e1/0x530 [ 316.426494][T11681] ? __kasan_check_read+0x11/0x20 [ 316.426506][T11681] ? do_raw_spin_unlock+0x57/0x270 [ 316.426520][T11681] ? evdev_free+0x70/0x70 [ 316.426532][T11681] chrdev_open+0x245/0x6b0 [ 316.426549][T11681] ? cdev_put.part.0+0x50/0x50 [ 316.455703][T11681] ? security_file_open+0x87/0x300 [ 316.455722][T11681] do_dentry_open+0x4e6/0x1380 [ 316.455734][T11681] ? __kasan_check_read+0x11/0x20 [ 316.455750][T11681] ? cdev_put.part.0+0x50/0x50 [ 316.484598][T11681] ? chown_common+0x5c0/0x5c0 [ 316.489288][T11681] ? inode_permission+0xb4/0x560 [ 316.494235][T11681] vfs_open+0xa0/0xd0 [ 316.498224][T11681] path_openat+0x10e9/0x46d0 [ 316.502811][T11681] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 316.508615][T11681] ? kasan_slab_alloc+0xf/0x20 [ 316.513378][T11681] ? kmem_cache_alloc+0x121/0x710 [ 316.518400][T11681] ? getname_flags+0xd6/0x5b0 [ 316.523073][T11681] ? getname+0x1a/0x20 [ 316.527132][T11681] ? do_sys_open+0x2c9/0x5d0 [ 316.531744][T11681] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 316.537119][T11681] ? __alloc_fd+0x487/0x620 [ 316.541632][T11681] do_filp_open+0x1a1/0x280 [ 316.546135][T11681] ? may_open_dev+0x100/0x100 [ 316.550813][T11681] ? __kasan_check_read+0x11/0x20 [ 316.555837][T11681] ? do_raw_spin_unlock+0x57/0x270 [ 316.560947][T11681] ? _raw_spin_unlock+0x2d/0x50 [ 316.565789][T11681] ? __alloc_fd+0x487/0x620 [ 316.570305][T11681] do_sys_open+0x3fe/0x5d0 [ 316.574732][T11681] ? filp_open+0x80/0x80 [ 316.578997][T11681] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 316.584466][T11681] ? do_syscall_64+0x26/0x760 [ 316.589134][T11681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.595212][T11681] ? do_syscall_64+0x26/0x760 [ 316.599898][T11681] __x64_sys_open+0x7e/0xc0 [ 316.604423][T11681] do_syscall_64+0xfa/0x760 [ 316.608936][T11681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.614821][T11681] RIP: 0033:0x413fb1 [ 316.618693][T11681] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 316.638276][T11681] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 316.646670][T11681] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 316.654630][T11681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 316.662599][T11681] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 316.670558][T11681] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 316.678519][T11681] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 316.703172][T11681] syz-executor.5: vmalloc: allocation failure: 25166200 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 316.718413][T11681] CPU: 0 PID: 11681 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 316.726306][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.736348][T11681] Call Trace: [ 316.736382][T11681] dump_stack+0x197/0x210 [ 316.736403][T11681] warn_alloc.cold+0x87/0x164 [ 316.736418][T11681] ? zone_watermark_ok_safe+0x260/0x260 [ 316.736436][T11681] ? kobj_lookup+0x29b/0x460 [ 316.736462][T11681] ? __get_vm_area_node+0x2bb/0x370 [ 316.736482][T11681] __vmalloc_node_range+0x458/0x7a0 [ 316.736500][T11681] ? chrdev_open+0x51f/0x6b0 [ 316.773774][T11681] ? evdev_open+0x3e1/0x530 [ 316.778279][T11681] vzalloc+0x6b/0x90 [ 316.782181][T11681] ? evdev_open+0x3e1/0x530 [ 316.786687][T11681] evdev_open+0x3e1/0x530 [ 316.791017][T11681] ? __kasan_check_read+0x11/0x20 [ 316.796043][T11681] ? do_raw_spin_unlock+0x57/0x270 [ 316.801156][T11681] ? evdev_free+0x70/0x70 [ 316.805479][T11681] chrdev_open+0x245/0x6b0 [ 316.809876][T11681] ? cdev_put.part.0+0x50/0x50 [ 316.814619][T11681] ? security_file_open+0x87/0x300 [ 316.819731][T11681] do_dentry_open+0x4e6/0x1380 [ 316.824480][T11681] ? __kasan_check_read+0x11/0x20 [ 316.829537][T11681] ? cdev_put.part.0+0x50/0x50 [ 316.834308][T11681] ? chown_common+0x5c0/0x5c0 [ 316.838977][T11681] ? inode_permission+0xb4/0x560 [ 316.843901][T11681] vfs_open+0xa0/0xd0 [ 316.847863][T11681] path_openat+0x10e9/0x46d0 [ 316.852426][T11681] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 316.858213][T11681] ? kasan_slab_alloc+0xf/0x20 [ 316.862963][T11681] ? kmem_cache_alloc+0x121/0x710 [ 316.867963][T11681] ? getname_flags+0xd6/0x5b0 [ 316.872657][T11681] ? getname+0x1a/0x20 [ 316.876709][T11681] ? do_sys_open+0x2c9/0x5d0 [ 316.881312][T11681] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 316.887236][T11681] ? __alloc_fd+0x487/0x620 [ 316.891757][T11681] do_filp_open+0x1a1/0x280 [ 316.897208][T11681] ? may_open_dev+0x100/0x100 [ 316.901878][T11681] ? __kasan_check_read+0x11/0x20 [ 316.906880][T11681] ? do_raw_spin_unlock+0x57/0x270 [ 316.911970][T11681] ? _raw_spin_unlock+0x2d/0x50 [ 316.916803][T11681] ? __alloc_fd+0x487/0x620 [ 316.921302][T11681] do_sys_open+0x3fe/0x5d0 [ 316.925695][T11681] ? filp_open+0x80/0x80 [ 316.929913][T11681] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 316.935356][T11681] ? do_syscall_64+0x26/0x760 [ 316.940028][T11681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.946083][T11681] ? do_syscall_64+0x26/0x760 [ 316.950739][T11681] __x64_sys_open+0x7e/0xc0 [ 316.955220][T11681] do_syscall_64+0xfa/0x760 [ 316.959726][T11681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.965602][T11681] RIP: 0033:0x413fb1 [ 316.969473][T11681] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 316.989058][T11681] RSP: 002b:00007fec7f2297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 316.997470][T11681] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 317.005430][T11681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fec7f229850 [ 317.013374][T11681] RBP: 000000000075bfc8 R08: 000000000000000f R09: 0000000000000000 [ 317.021323][T11681] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fec7f22a6d4 [ 317.029282][T11681] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 0000000000000004 [ 317.042057][T11681] Mem-Info: [ 317.045338][T11681] active_anon:128778 inactive_anon:227 isolated_anon:0 [ 317.045338][T11681] active_file:7846 inactive_file:38328 isolated_file:0 [ 317.045338][T11681] unevictable:0 dirty:527 writeback:0 unstable:0 [ 317.045338][T11681] slab_reclaimable:11925 slab_unreclaimable:98576 [ 317.045338][T11681] mapped:57003 shmem:271 pagetables:972 bounce:0 [ 317.045338][T11681] free:1246879 free_pcp:640 free_cma:0 [ 317.083276][T11681] Node 0 active_anon:515112kB inactive_anon:908kB active_file:31248kB inactive_file:153312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228012kB dirty:2108kB writeback:0kB shmem:1084kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 122880kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 317.112432][T11681] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 317.138948][T11681] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.165965][T11681] lowmem_reserve[]: 0 2547 2548 2548 [ 317.171256][T11681] Node 0 DMA32 free:1191488kB min:36184kB low:45228kB high:54272kB active_anon:515088kB inactive_anon:908kB active_file:30196kB inactive_file:153228kB unevictable:0kB writepending:2096kB present:3129332kB managed:2611888kB mlocked:0kB kernel_stack:7392kB pagetables:3884kB bounce:0kB free_pcp:2552kB local_pcp:1268kB free_cma:0kB [ 317.202049][T11681] lowmem_reserve[]: 0 0 1 1 [ 317.210373][T11681] Node 0 Normal free:12kB min:16kB low:20kB high:24kB active_anon:24kB inactive_anon:0kB active_file:1052kB inactive_file:84kB unevictable:0kB writepending:12kB present:786432kB managed:1172kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.237699][T11681] lowmem_reserve[]: 0 0 0 0 [ 317.242209][T11681] Node 1 Normal free:3780108kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.270641][T11681] lowmem_reserve[]: 0 0 0 0 [ 317.275162][T11681] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 317.289582][T11681] Node 0 DMA32: 4498*4kB (UME) 1709*8kB (UME) 1250*16kB (UME) 835*32kB (UME) 375*64kB (UME) 55*128kB (UM) 11*256kB (UM) 6*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 260*4096kB (UM) = 1191536kB [ 317.308380][T11681] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 317.320320][T11681] Node 1 Normal: 1*4kB (E) [ 317.320338][T11681] 71*8kB (UE) 181*16kB (UE) 72*32kB (UME) 40*64kB (U) 15*128kB (UM) 6*256kB (UM) 4*512kB (U) 2*1024kB (ME) 2*2048kB (UM) 918*4096kB (M) = 3780108kB [ 317.339804][T11681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.349383][T11681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.358700][T11681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.368362][T11681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 317.377710][T11681] 46446 total pagecache pages [ 317.382378][T11681] 0 pages in swap cache [ 317.386549][T11681] Swap cache stats: add 0, delete 0, find 0/0 [ 317.392600][T11681] Free swap = 0kB [ 317.396461][T11681] Total swap = 0kB [ 317.400170][T11681] 1965979 pages RAM 18:48:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:48:50 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x28001, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x8000000000006000, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) open$dir(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x8000000000006000, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7, 0x182) sendfile(r0, r0, 0x0, 0x24000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}}) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x3, 0x4, &(0x7f0000000740)=[{0x0, 0x0, 0x1}, {&(0x7f0000000500)="5fc050c1dda003e704ff0f2d802436199d6e61a6d0510b86ea33c2c956c9cda8a3797d710a1f38f2d48a7b7875d2ee7340e1908bf7ce14dedc73", 0x3a}, {&(0x7f0000000540)="8fd992cc0657a877f8ac406c1c7de6e294eee05999988a73a0e1a0fff1093969f2a89bbe5a54f735dafb4aa4cd5b3ccdeaf71c35700744ebcdae179d17af005662ebb4c105b0460a15e3298ae63e7d7f214c3d01c86492b26dd3538a0c31c53a9a5004b4d8f193837cdeac63cc475182c411f1b12c6ca67a40e9d21bea015a8d428099b069800b6f178ab869e517950c0970f73c1172e5b0f23dcd42ddfb3a2d", 0xa0, 0xeb0}, {&(0x7f0000000640), 0x0, 0x1000}], 0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="0000ebc30791520f15baa0886bf3423b5c38fcc23f7f65f3beac1334dd82c1641b8d552e46506f4ec04e900c58764fe4cfbeeae86d1447a842e91b3fb261fbbe4854ed91bfc91e67d955cb7e86c5089fc9fa5b0eb7f3ec247b58eeb1d500000000000000000000000000000000fa7c325effa374cea52089d4eb"]) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, 0x0) 18:48:50 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x6) 18:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d/v/input/event#\x00', 0x4, 0x0) 18:48:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f0000000000)="df", 0x1) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x72, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cf6d, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 317.403948][T11681] 0 pages HighMem/MovableOnly [ 317.408651][T11681] 341176 pages reserved [ 317.412793][T11681] 0 pages cma reserved 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cf8a, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cfbc, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d\\v/input/event#\x00', 0x4, 0x0) [ 317.613446][T11714] input: syz0 as /devices/virtual/input/input163 18:48:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cfd5, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:50 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_inet_udp_SIOCOUTQ(r13, 0x5411, &(0x7f0000000080)) 18:48:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6_vti0\x00', 0x2}, 0x18) sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000380)="ad", 0x1}], 0x1}}], 0x1, 0x1) 18:48:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/de\\/input/event#\x00', 0x4, 0x0) 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cfe3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:50 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_inet_udp_SIOCOUTQ(r13, 0x5411, &(0x7f0000000080)) 18:48:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='\x1e\a\x00\x00\x00\\\xb7\xa6GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$alg(r1, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000180)={{0x9, 0x9}, 'port0\x00', 0xc6, 0x2, 0x2, 0x5, 0xfca7, 0x47, 0xffffffe0, 0x0, 0x7, 0x3}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x5) 18:48:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='\\dev/input/event#\x00', 0x4, 0x0) [ 318.273104][T11751] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 2, id = 0 18:48:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000cfe8, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev\\input/event#\x00', 0x4, 0x0) 18:48:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2200cf7d, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6_vti0\x00', 0x2}, 0x18) sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000380)="ad", 0x1}], 0x1}}], 0x1, 0x1) [ 318.350966][T11756] input: syz0 as /devices/virtual/input/input168 18:48:51 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_inet_udp_SIOCOUTQ(r13, 0x5411, &(0x7f0000000080)) 18:48:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000d002, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/.ev/input/event#\x00', 0x4, 0x0) 18:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/%nput/event#\x00', 0x4, 0x0) 18:48:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02010109080000000000000000000000030006001000000002000000e00000090000000000000000030005007217440502000000e00000010000001b4a486300000000000d2c300778a6d0c82a2f8437e891c5e8f43479784498ddc9434cd32acb9814007559b72a3ac49eba42cb3938cc21297656f6761499ee73bd385dd8fc6242c019d86bf187dcaedfd016c96410890ce0f1b578e10dfa622b09fbc79e86edb3763adb945fd89a1b530c8b1b24110cc6b3fef30d956a52efbaa454deed2a01672213c496071ed4c59479024323011806fb8a3998b6265efec09cb3c268b386b13dd323dfed21a8473f59fcb236a39d53950ae4ecd1015dd5987f842a3083b9f87d9620e13c8c70eba465b4de0100e4e84716b590032c410e0c71447aeff13e5efd2b472db6776020906dcaa809c75d92ce543dfc85532f63bf654192f447abcaaf6b2b9f9e11e4dfbdf8c0b7e12bd0120cbfcc699d604f93aa2ccd5ef594d61e64befccc1167d89ebe6e3a5c02fdb815e3829205964495c7ad284e892b01d90d7f254c6da428d3f037db5e7165adb2ce871cac402c7f859a789c273944c1d4a3f656d9473a26926a0100000000000000046320967a6bb2c1d23d853d"], 0x40}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x9, 0x0, 0xf, 0xc, 0x0, 0x0, 0x0, [@sadb_ident={0x0, 0x14, 0x0, 0x0, 0x7fff}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}, @sadb_address={0x149, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xb7, @local, 0x3}}]}, 0x75}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000001c0)={0x5dd0, 0x7, 0xfffffff8, 'queue0\x00', 0xb4}) [ 318.705071][T11782] input: syz0 as /devices/virtual/input/input172 18:48:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000d034, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:51 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:48:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='//ev/input/event#\x00', 0x4, 0x0) 18:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/.nput/event#\x00', 0x4, 0x0) 18:48:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000d04d, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 319.048129][T11802] input: syz0 as /devices/virtual/input/input176 18:48:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000140)) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400203) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x64}, 0x1c) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x3, 0x0, 0x41c1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f0000000100), 0xa80a) syz_open_dev$media(0x0, 0x0, 0x101000) 18:48:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev//nput/event#\x00', 0x4, 0x0) 18:48:51 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) mkdirat$cgroup(r12, &(0x7f0000000040)='syz1\x00', 0x1ff) [ 319.199223][T11806] input: syz0 as /devices/virtual/input/input179 18:48:51 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000d05b, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/\\ev/input/event#\x00', 0x4, 0x0) 18:48:52 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) mkdirat$cgroup(r13, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000042713000f0ffffff95000000000000cc"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/\\nput/event#\x00', 0x4, 0x0) 18:48:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 18:48:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000d060, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 319.531201][T11828] input: syz0 as /devices/virtual/input/input182 [ 319.662180][T11837] input: syz0 as /devices/virtual/input/input183 18:48:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d%v/input/event#\x00', 0x4, 0x0) 18:48:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x10, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/i\\put/event#\x00', 0x4, 0x0) 18:48:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r11) 18:48:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$cec(0x0, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000600)="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", 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r5, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004000}, 0x20000010) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000240)={0x0}, 0x18) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0) ptrace(0xffffffffffffffff, 0x0) [ 320.026267][T11855] input: syz0 as /devices/virtual/input/input186 18:48:52 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/in\\ut/event#\x00', 0x4, 0x0) [ 320.115682][T11863] input: syz0 as /devices/virtual/input/input189 18:48:52 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 18:48:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d.v/input/event#\x00', 0x4, 0x0) 18:48:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x3, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/inp\\t/event#\x00', 0x4, 0x0) [ 320.507940][T11879] input: syz0 as /devices/virtual/input/input192 18:48:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x4, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:53 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 18:48:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d/v/input/event#\x00', 0x4, 0x0) 18:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/inpu\\/event#\x00', 0x4, 0x0) [ 320.935713][T11898] input: syz0 as /devices/virtual/input/input196 18:48:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input\\event#\x00', 0x4, 0x0) 18:48:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 321.119676][T11908] input: syz0 as /devices/virtual/input/input199 18:48:53 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000465f8e)=""/114, 0x72) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r8 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r8, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001600)=ANY=[@ANYBLOB="30b047feceaf4ee47d7374052a2748c17f533a885ffa415c31e5b74bac91ffb74faf1fef2f3c20b2c1528cda777e9d0e13f01b2e172515865b20b049a8a57a6486b10eb52e89fc48e8d974af7afcafc455b590113bdd38c5c62b76e6fe54cc463118251e1f72789f6aab28823a3d9caaf0c48997131a5092020af32a95c9e83b54ef745538f783f7f7c61d93c32e894f2fd4a252bc295a91563b1ab6f73dd9dc9dc23dbbdd16586ce1875ced1c9be8be958103d00e32eced602344cb0c0d5cdb9c724458f432ad7e17a8262c7dc44d5a48ea9a1a4b1572a8943e6d48200f4c", @ANYPTR64=&(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRES16=r2, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64=r10, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r5, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRESHEX=r6], @ANYRES32=0x0, @ANYRESOCT], @ANYRES64=r3], &(0x7f0000000280)=""/237, 0xef, 0xed, 0x1}, 0x20) 18:48:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d.v/input/event#\x00', 0x4, 0x0) [ 321.298053][T11917] input: syz0 as /devices/virtual/input/input201 18:48:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/d\\v/input/event#\x00', 0x4, 0x0) 18:48:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x7, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/%vent#\x00', 0x4, 0x0) 18:48:54 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 321.473984][T11928] input: syz0 as /devices/virtual/input/input203 18:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 321.592257][T11935] input: syz0 as /devices/virtual/input/input206 18:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/.vent#\x00', 0x4, 0x0) 18:48:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xfcf9) sendto$inet(r0, &(0x7f0000000100)="bd384ce1f54f7c522811c090bbf4ef7b4926a15e53a1bbb46854e2666d3327c6ae8e714ad8116298b6e23a4b036512e680d8864f6e29ae93b95733e5d0164691a37189b857a07bae4ee2995204e470c4c5ae2742f1a98076174e9420fa41857fbd21c794423e7851022eb84c0059c29ec119542880d2e770e56b498dfc425e4fdc7abdf6be20499b8bb6eb267a31a66c683c0feb6ecc488f3a2dc72e6db795aad7b717787df3b8e32eba76dddafc94c432d52ad8d07cc2cd9e3831e868ed4781c75508b8b07196c7b2", 0xc9, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3801000000000000000000000000000000000000b800000008000000626272000400000008000000000000001f9b08b4cd01f4b02fcacad4d84d2ffa8b0b12d015fc82e677f2a813815596c87d88a45f39b7536449c7456de6399e19d91face03af251bf9e28d17b08ee8db664b0799e380d57f4dbbd18bae61026412c1b02f86e4c1b2b1370c65c6d489cdd12a664811722aff6d2ecaa595deeef7b00741d4c4bed3b4d5cfa4e00c4da5710000000ba1c895c7285c7df0300000000000051c2591b9ae2c21eaf945fe3d2481b68ad6ed6"], 0xd1}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000002c0)) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x11, 0x0, 0x27) 18:48:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/de\\/input/event#\x00', 0x4, 0x0) 18:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:54 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) 18:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input//vent#\x00', 0x4, 0x0) [ 321.964234][T11955] input: syz0 as /devices/virtual/input/input209 18:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xa, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 322.066401][T11960] input: syz0 as /devices/virtual/input/input210 18:48:54 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000465f8e)=""/114, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 18:48:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev\\input/event#\x00', 0x4, 0x0) 18:48:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/\\vent#\x00', 0x4, 0x0) 18:48:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xb, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 322.435036][T11977] input: syz0 as /devices/virtual/input/input213 18:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xc, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:55 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r7 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000465f8e)=""/114, 0x72) 18:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/e\\ent#\x00', 0x4, 0x0) 18:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xd, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/%nput/event#\x00', 0x4, 0x0) 18:48:55 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) open_by_handle_at(r0, &(0x7f00000001c0)={0x34, 0x6, "824ea3f0fcb8f2eabda4629dfec58ab2240d5dc171c45fda5b47a45dc5db33a6d66d36281415861be3d947d8"}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@nombcache='nombcache'}]}) 18:48:55 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 322.896141][T12001] input: syz0 as /devices/virtual/input/input219 18:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev%nt#\x00', 0x4, 0x0) 18:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xe, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 323.009531][T12005] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 323.024329][T12010] input: syz0 as /devices/virtual/input/input220 18:48:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xf, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev.nt#\x00', 0x4, 0x0) 18:48:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x80880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x7fff, 0x1, 0xebe6, 0x26, 0xe, 0xc8, 0x5, 0x8, 0x6, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201100, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x1, 0x800000, 0x5, 'queue1\x00', 0x3}) [ 323.352200][T12026] mmap: syz-executor.4 (12026) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:48:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/.nput/event#\x00', 0x4, 0x0) [ 323.525463][T12034] input: syz0 as /devices/virtual/input/input225 18:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev/nt#\x00', 0x4, 0x0) 18:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x2, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 323.650593][T12043] input: syz0 as /devices/virtual/input/input226 18:48:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) 18:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev\\nt#\x00', 0x4, 0x0) 18:48:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev//nput/event#\x00', 0x4, 0x0) 18:48:56 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @ldst={0x0, 0x3, 0x0, 0xb, 0x6, 0xfffffffffffffff8, 0x10}, @call={0x85, 0x0, 0x0, 0xf}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @exit], &(0x7f0000000080)='GPL\x00', 0x1, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffc5d) 18:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x3, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/eve\\t#\x00', 0x4, 0x0) [ 324.032824][T12065] input: syz0 as /devices/virtual/input/input231 18:48:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000100)=0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_ROUTER={0x8, 0x16, 0x1000}]}}}]}, 0x3c}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x14200, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000002c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'vcan0\x00', @ifru_data=&(0x7f0000000040)="4b2bbb32ac5243af7858f300d8d52756f8e7e5d1ca5d3f8decbc096deeadd500"}) 18:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x4, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 324.156351][T12073] input: syz0 as /devices/virtual/input/input234 18:48:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000fcdfe8)) 18:48:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/even\\#\x00', 0x4, 0x0) [ 324.310959][T12079] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 18:48:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/\\nput/event#\x00', 0x4, 0x0) 18:48:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x5, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 324.419970][T12079] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 18:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x02', 0x4, 0x0) 18:48:57 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) userfaultfd(0x0) [ 324.541813][T12094] input: syz0 as /devices/virtual/input/input237 18:48:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x1, @sliced={0x9, [0x3f, 0x7, 0x4, 0x8001, 0x1, 0x2, 0xff98, 0xa0e9, 0x0, 0x876a, 0x6, 0x5, 0xa26, 0x5, 0x1f, 0x0, 0x881, 0x5360, 0x82, 0xffff, 0x1, 0x0, 0x1662, 0x75d, 0x8, 0x6, 0x2, 0x40, 0x7, 0x3, 0x0, 0xf816, 0x7fff, 0x6, 0x1, 0x7, 0x4, 0x7, 0x7, 0x5, 0x3, 0x200, 0x0, 0x0, 0x2bd, 0x0, 0x9, 0x81], 0xffffffff}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280007000301ff00000000000000000000001400080000000000000000000000000100000000241425a382b2e611ea9a75f01e3d8569e9b684392166b440b9a4226ebc29d8a449d76e7c147de48c9ca472b988fc2f1d70450a79546e41290676040000005d31"], 0x28}}, 0x0) 18:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x03', 0x4, 0x0) 18:48:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x6, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 324.710037][T12105] input: syz0 as /devices/virtual/input/input240 18:48:57 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000465f8e)=""/114, 0x72) 18:48:57 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) truncate(0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0xe6) r1 = open(0x0, 0x80240, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0xfffffffffffffffc) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) pipe2(&(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) fstat(r2, &(0x7f00000002c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000100)) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x1f, 0x5}, 0x18) getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x8, 0x1}, {0xffc0, 0x6, 0x2, 0x8}, {0x18, 0x2, 0x40, 0x2}, {0x8000, 0x3f, 0x7f, 0x5dea4222}, {0x814, 0x6a, 0xac, 0x6}, {0x3f, 0x6, 0x0, 0x7}, {0x5, 0x1, 0x81, 0xfe}, {0x9, 0x8, 0x3, 0xfffff53b}]}, 0xd31cde1d19790b95) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r7 = dup2(r3, r3) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) fadvise64(r8, 0x80, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0xe0) dup2(r4, r7) 18:48:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x7, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/i\\put/event#\x00', 0x4, 0x0) 18:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x04', 0x4, 0x0) [ 325.071855][T12127] input: syz0 as /devices/virtual/input/input243 18:48:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0xa, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 325.182412][T12136] input: syz0 as /devices/virtual/input/input246 18:48:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x05', 0x4, 0x0) 18:48:57 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 325.225368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.231506][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:48:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/in\\ut/event#\x00', 0x4, 0x0) [ 325.385339][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 325.391360][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:48:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0xe, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:58 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000465f8e)=""/114, 0x72) [ 325.500231][T12151] input: syz0 as /devices/virtual/input/input249 18:48:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3f, 0x8001) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x2, 0x8, 0x4, 0x475, 0xfff7, 0xff81}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xfa, 0x4) sync_file_range(r0, 0x100, 0x6, 0x1) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/4096) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000010c0)=0x20) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000001100)=""/240, &(0x7f0000001200)=0xf0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001280)={0x0, 0x1000}, &(0x7f00000012c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001300)={r2, 0x6}, &(0x7f0000001340)=0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) syz_open_dev$vbi(&(0x7f00000013c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001400)={0x1, 0x8, 0xfffff288, 0x3e00000, 0x7, 0x1, 0x9, 0x1, 0xfff, 0x3ff, 0x6, 0x1}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001440)='/dev/null\x00', 0x20000, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001a80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001b00)=""/185, 0xb9}, {&(0x7f0000001bc0)=""/106, 0x6a}, {&(0x7f0000001c40)=""/99, 0x63}, {&(0x7f0000001cc0)=""/173, 0xad}, {&(0x7f0000001d80)=""/224, 0xe0}, {&(0x7f0000001e80)=""/11, 0xb}, {&(0x7f0000001ec0)=""/6, 0x6}, {&(0x7f0000001f00)=""/137, 0x89}], 0x8}, 0x10000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002080)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000002180)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000021c0)={{{@in6=@dev={0xfe, 0x80, [], 0x16}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x8000, 0x4e22, 0x1, 0x2, 0x80, 0x80, 0x36, r5, r6}, {0xde, 0x200, 0x2, 0x4, 0x3f, 0x10000, 0x5, 0x2}, {0x0, 0x2, 0x1, 0x7}, 0x100, 0x6e6bb4, 0x0, 0x3, 0x3, 0x3}, {{@in=@remote, 0x4d6, 0x33}, 0xa, @in=@multicast2, 0x34ff, 0x0, 0x0, 0x7f, 0x6, 0x8000, 0x7}}, 0xe8) r7 = syz_open_dev$amidi(&(0x7f00000022c0)='/dev/amidi#\x00', 0x2000000000000000, 0x200000) setsockopt$packet_buf(r7, 0x107, 0x6, &(0x7f0000002300)="0083d53ddcacc50b6fbad37c94b35fbf6b947e75bf78fa681eeee7f9e88a417f7e1cc4a7670a8f4de73f6d2ade42c9af183029d1dafc8c09dc5fe965734cfbd69a37c74e0fcf19effeb171fd66078954f71a1da9d0173aa560a07d8d3a8c7a341158134f908ef01059a4d5bb39c6de48702b1b4fd583d2f8fe10d219d052e6cc200c55f7583a464e599e7344e7d5af345397caf7eb72bb6fb797bafecdecd3f640a9899df0dc", 0xa6) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f00000023c0)) ioctl$NBD_DO_IT(r0, 0xab03) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000002400)={0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 'wlc\x00', 0x0, 0x5, 0x1}, 0x2c) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000002440)) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x80082102, &(0x7f0000002500)=r9) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000002600)='/dev/full\x00', 0x80, 0x0) sendto$rose(r10, &(0x7f0000002640)="7b61a6b672e68a2bf682bf3b0c7e10e6606158fc8903bb4cfe1397c35142ddfc55a6f02675a7123a997f4ed1a43bd494ea5630ceb0ee596f17a4b61297f09ec1544b6e076f65c6dec2de00675bdab00b8d1780ba7feabc56a12fd8dc0cfd042f6a4f22a013622babee560586ab0bf78e05feebb8cc0aec7de16f638a22dd9ee2a6d091eb4291c7c51708238c775f8c1e5a8d328cb05afe06ccaee0596d149d38d396db5e9d60e4af94d698485970635062c2103083a5d6b89b258e2afdc748648012d9c4de782f07503aff25348757f4398f9bdea04633fd3e3debfd", 0xdc, 0xa0, &(0x7f0000002740)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null]}, 0x40) 18:48:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x06', 0x4, 0x0) 18:48:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/inp\\t/event#\x00', 0x4, 0x0) 18:48:58 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:48:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca16200001400e8c89c9dd81c796f27f537"], 0x67) r2 = dup(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setgroups(0x54b, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000080)={0x0, 0x3, 0x800, 0x10000, 'syz0\x00', 0x8001}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x81, 0x6, 0x9, 0xf3, 0x1, 0x5, 0xff, 0x3, 0xfd, 0x6}, 0xb) 18:48:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\a', 0x4, 0x0) [ 325.919240][T12175] input: syz0 as /devices/virtual/input/input253 18:48:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x2, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:58 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 18:48:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/inpu\\/event#\x00', 0x4, 0x0) 18:48:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#H', 0x4, 0x0) 18:48:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x3, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 326.314353][T12196] input: syz0 as /devices/virtual/input/input257 18:48:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) [ 326.405925][T12201] input: syz0 as /devices/virtual/input/input260 18:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#L', 0x4, 0x0) 18:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x4, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 18:48:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input\\event#\x00', 0x4, 0x0) 18:48:59 executing program 4: unshare(0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x349, &(0x7f00000000c0)={0x77359400}, 0x0, 0x30c0c641d0e8898e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x3c) setresuid(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0)='fuseblk\x00', 0x100808, &(0x7f0000000300)=ANY=[@ANYBLOB="891b3ed621388d43c11cbca2f7c2342e1c6cfcbe8b8887cdabcd68208a149371", @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000000a9c4,blksize=0x0000000000000e00,blksize=0x0000000000000200,euid<', @ANYRESDEC=0x0, @ANYBLOB="f0fbffffffd2000000e406d8d77467a7421e39e8e0477a096f45efdb0b2ec75e97fd256d5241d869733c2395f3df2a99cbd5f3378b9d26b39c5c5103426ba2b1c671632334be031371f5d1bc6e4ad21f3c55dcc22c64f16b19f217e8446b35188d02230a5b5cc5d1b8096b3448adf6e46908de026da23c"]) userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000280)='queue1\x00', 0x7, 0x1) bind$bt_rfcomm(r3, &(0x7f0000000140)={0x1f, {0x0, 0x0, 0x4}}, 0xa) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0x8, 0x4, 0x0, 'queue1\x00', 0x7}) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000000)=0x1) 18:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#h', 0x4, 0x0) 18:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x5, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 326.749545][T12224] input: syz0 as /devices/virtual/input/input263 18:48:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) [ 326.901149][T12229] input: syz0 as /devices/virtual/input/input266 18:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x6, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#l', 0x4, 0x0) 18:48:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/%vent#\x00', 0x4, 0x0) 18:48:59 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 18:48:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x7, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:48:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#t', 0x4, 0x0) [ 327.317754][T12257] input: syz0 as /devices/virtual/input/input269 18:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#z', 0x4, 0x0) 18:49:00 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/.vent#\x00', 0x4, 0x0) 18:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xa, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 327.692877][T12276] input: syz0 as /devices/virtual/input/input275 18:49:00 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 327.832873][T12276] input: syz0 as /devices/virtual/input/input277 18:49:00 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xe, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2080, 0x4418}, [@IFLA_BROADCAST={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 18:49:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input//vent#\x00', 0x4, 0x0) 18:49:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:00 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x10, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 328.144891][T12303] input: syz0 as /devices/virtual/input/input279 18:49:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x17, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/\\vent#\x00', 0x4, 0x0) 18:49:01 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x19, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 328.505801][T12327] input: syz0 as /devices/virtual/input/input283 18:49:01 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 328.600342][T12331] input: syz0 as /devices/virtual/input/input285 18:49:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2080, 0x4418}, [@IFLA_BROADCAST={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 18:49:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/e\\ent#\x00', 0x4, 0x0) 18:49:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x32, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:01 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:01 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xe0aa, 0x115801) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=r3) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=r6) r7 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r8 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000040)=r9) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r6) [ 328.939403][T12358] input: syz0 as /devices/virtual/input/input287 18:49:01 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x48, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 329.090308][T12365] input: syz0 as /devices/virtual/input/input289 18:49:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:01 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev%nt#\x00', 0x4, 0x0) 18:49:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x4c, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 329.338403][T12385] input: syz0 as /devices/virtual/input/input291 18:49:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000001000000080008000c000000", 0x24) recvmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xd04d07b44f90ab09, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r3 = socket(0x0, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x0, 0x10}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="891d38fde60c513279fc6e02815b71edb8c1719ac8705ad571c2838c2f5b75c3466e8100000000000000785876bfd4dcfe1c7db4a40df6d6fc50916d297fa2d844ec9481e408c446082f2738cf131e6acd0ae46fc6dbe6cafcd75d8a6e8a3a2b165816a153d37fa673ba798a185190a3f27337a720f44344e9ee51a7fbd9b0cb036da742e6cc48644ec7afce44bf89b06e7738c3ac0a011b3f9ed934eaa100a724e94020bca47112b6ea783bba9c54ad5b956d368d3127bf2d4f62910bd7e37225447c2bf69c896e77f20000"], &(0x7f0000000240)='./file0\x00', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x3) 18:49:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2080, 0x4418}, [@IFLA_BROADCAST={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 18:49:02 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 329.430911][T12393] input: syz0 as /devices/virtual/input/input293 18:49:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x60, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev.nt#\x00', 0x4, 0x0) 18:49:02 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x68, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 329.719131][T12413] input: syz0 as /devices/virtual/input/input294 18:49:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev/nt#\x00', 0x4, 0x0) 18:49:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:02 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x6c, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 330.011047][T12435] input: syz0 as /devices/virtual/input/input297 18:49:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x74, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/ev\\nt#\x00', 0x4, 0x0) 18:49:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2080, 0x4418}, [@IFLA_BROADCAST={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 18:49:02 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x7a, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:03 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 330.357196][T12459] input: syz0 as /devices/virtual/input/input301 18:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 330.471408][T12461] input: syz0 as /devices/virtual/input/input302 18:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x2b6, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/eve\\t#\x00', 0x4, 0x0) 18:49:03 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x300, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:03 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 330.826390][T12488] input: syz0 as /devices/virtual/input/input305 [ 330.966049][T12493] input: syz0 as /devices/virtual/input/input307 18:49:03 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:03 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x3a0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/even\\#\x00', 0x4, 0x0) 18:49:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x500, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:03 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 331.334822][T12514] input: syz0 as /devices/virtual/input/input309 18:49:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x600, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:04 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event\x01\x18', 0x4, 0x0) 18:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x700, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:04 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 331.696880][T12540] input: syz0 as /devices/virtual/input/input313 18:49:04 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xa00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 331.802808][T12550] input: syz0 as /devices/virtual/input/input315 18:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x02', 0x4, 0x0) 18:49:04 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xe00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 332.152820][T12574] input: syz0 as /devices/virtual/input/input318 18:49:04 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x1700, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 332.277365][T12581] input: syz0 as /devices/virtual/input/input320 18:49:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:05 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x03', 0x4, 0x0) 18:49:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x1900, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 332.655720][T12608] input: syz0 as /devices/virtual/input/input323 18:49:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x2000, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 332.827283][T12612] input: syz0 as /devices/virtual/input/input325 18:49:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x3200, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x04', 0x4, 0x0) 18:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x3f00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 333.136437][T12637] input: syz0 as /devices/virtual/input/input327 18:49:05 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 333.242493][T12646] input: syz0 as /devices/virtual/input/input329 18:49:05 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x4000, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x05', 0x4, 0x0) 18:49:06 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x4800, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 333.594593][T12668] input: syz0 as /devices/virtual/input/input332 [ 333.729087][T12675] input: syz0 as /devices/virtual/input/input334 18:49:06 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 18:49:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x4c00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x06', 0x4, 0x0) 18:49:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:06 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 334.019915][T12689] input: syz0 as /devices/virtual/input/input335 18:49:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x6000, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:06 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) [ 334.121636][T12698] input: syz0 as /devices/virtual/input/input337 18:49:06 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\a', 0x4, 0x0) 18:49:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x6800, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:06 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) [ 334.394779][T12715] input: syz0 as /devices/virtual/input/input339 18:49:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:07 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x6c00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xe0', 0x4, 0x0) 18:49:07 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:07 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 334.771890][T12741] input: syz0 as /devices/virtual/input/input343 18:49:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x7400, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 334.910620][T12741] input: syz0 as /devices/virtual/input/input345 18:49:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x7a00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:07 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x8ffd, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 335.232043][T12770] input: syz0 as /devices/virtual/input/input347 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x9fff, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xa003, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:08 executing program 2 (fault-call:3 fault-nth:0): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 335.665951][T12770] input: syz0 as /devices/virtual/input/input350 18:49:08 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xb602, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 335.789156][T12792] FAULT_INJECTION: forcing a failure. [ 335.789156][T12792] name failslab, interval 1, probability 0, space 0, times 0 [ 335.882515][T12792] CPU: 1 PID: 12792 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 335.890438][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.900495][T12792] Call Trace: [ 335.903811][T12792] dump_stack+0x197/0x210 [ 335.908168][T12792] should_fail.cold+0xa/0x15 [ 335.912764][T12792] ? fault_create_debugfs_attr+0x180/0x180 [ 335.918583][T12792] ? ___might_sleep+0x163/0x2c0 [ 335.923457][T12792] __should_failslab+0x121/0x190 [ 335.928399][T12792] should_failslab+0x9/0x14 [ 335.932887][T12792] __kmalloc+0x2e0/0x770 [ 335.932902][T12792] ? mark_held_locks+0xf0/0xf0 [ 335.932916][T12792] ? mark_lock+0xc2/0x1220 [ 335.932928][T12792] ? _parse_integer+0x190/0x190 [ 335.932946][T12792] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 335.941910][T12792] tomoyo_realpath_from_path+0xcd/0x7b0 [ 335.941926][T12792] ? tomoyo_path_number_perm+0x193/0x520 [ 335.941945][T12792] tomoyo_path_number_perm+0x1dd/0x520 [ 335.962393][T12792] ? tomoyo_path_number_perm+0x193/0x520 [ 335.962413][T12792] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 335.962424][T12792] ? __f_unlock_pos+0x19/0x20 [ 335.962465][T12792] ? __fget+0x384/0x560 [ 335.989646][T12792] ? ksys_dup3+0x3e0/0x3e0 [ 335.989666][T12792] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 335.989679][T12792] ? fput_many+0x12c/0x1a0 [ 335.989698][T12792] tomoyo_file_ioctl+0x23/0x30 [ 335.998219][T12792] security_file_ioctl+0x77/0xc0 [ 335.998236][T12792] ksys_ioctl+0x57/0xd0 [ 335.998253][T12792] __x64_sys_ioctl+0x73/0xb0 [ 335.998294][T12792] do_syscall_64+0xfa/0x760 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xfd8f, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 336.008899][T12792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.008911][T12792] RIP: 0033:0x45a219 [ 336.008923][T12792] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.008934][T12792] RSP: 002b:00007f149ea17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.018591][T12792] RAX: ffffffffffffffda RBX: 00007f149ea17c90 RCX: 000000000045a219 18:49:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 336.018600][T12792] RDX: 0000000020c22ff0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 336.018608][T12792] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.018617][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f149ea186d4 [ 336.018625][T12792] R13: 00000000004c5234 R14: 00000000004da1e0 R15: 0000000000000004 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xff9f, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 336.260757][T12792] ERROR: Out of memory at tomoyo_realpath_from_path. 18:49:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:08 executing program 2 (fault-call:3 fault-nth:1): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 336.422118][T12816] input: syz0 as /devices/virtual/input/input352 [ 336.476583][T12820] FAULT_INJECTION: forcing a failure. [ 336.476583][T12820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.489811][T12820] CPU: 0 PID: 12820 Comm: syz-executor.2 Not tainted 5.4.0-rc6+ #0 [ 336.497709][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.507761][T12820] Call Trace: [ 336.511063][T12820] dump_stack+0x197/0x210 [ 336.515403][T12820] should_fail.cold+0xa/0x15 [ 336.520006][T12820] ? fault_create_debugfs_attr+0x180/0x180 18:49:09 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 336.525822][T12820] ? lock_downgrade+0x920/0x920 [ 336.530681][T12820] should_fail_alloc_page+0x50/0x60 [ 336.535888][T12820] __alloc_pages_nodemask+0x1a1/0x900 [ 336.541256][T12820] ? __kasan_check_read+0x11/0x20 [ 336.546285][T12820] ? mark_lock+0xc2/0x1220 [ 336.550721][T12820] ? __alloc_pages_slowpath+0x2920/0x2920 [ 336.556435][T12820] ? __kasan_check_read+0x11/0x20 [ 336.556459][T12820] ? fault_create_debugfs_attr+0x180/0x180 [ 336.556479][T12820] cache_grow_begin+0x90/0xd20 [ 336.556496][T12820] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 336.556515][T12820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 336.556531][T12820] __kmalloc+0x6b2/0x770 [ 336.556544][T12820] ? mark_held_locks+0xf0/0xf0 [ 336.556561][T12820] ? mark_lock+0xc2/0x1220 [ 336.567352][T12820] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 336.567371][T12820] tomoyo_realpath_from_path+0xcd/0x7b0 [ 336.567385][T12820] ? tomoyo_path_number_perm+0x193/0x520 [ 336.567408][T12820] tomoyo_path_number_perm+0x1dd/0x520 [ 336.567421][T12820] ? tomoyo_path_number_perm+0x193/0x520 [ 336.567437][T12820] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 336.567450][T12820] ? __f_unlock_pos+0x19/0x20 [ 336.567494][T12820] ? __fget+0x384/0x560 [ 336.639987][T12820] ? ksys_dup3+0x3e0/0x3e0 [ 336.644403][T12820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 336.644419][T12820] ? fput_many+0x12c/0x1a0 [ 336.644438][T12820] tomoyo_file_ioctl+0x23/0x30 [ 336.644457][T12820] security_file_ioctl+0x77/0xc0 [ 336.664729][T12820] ksys_ioctl+0x57/0xd0 [ 336.664747][T12820] __x64_sys_ioctl+0x73/0xb0 [ 336.664767][T12820] do_syscall_64+0xfa/0x760 [ 336.664785][T12820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 336.664801][T12820] RIP: 0033:0x45a219 [ 336.678008][T12820] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 336.687741][T12820] RSP: 002b:00007f149ea17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.687755][T12820] RAX: ffffffffffffffda RBX: 00007f149ea17c90 RCX: 000000000045a219 [ 336.687764][T12820] RDX: 0000000020c22ff0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 336.687773][T12820] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.687782][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f149ea186d4 [ 336.687790][T12820] R13: 00000000004c5234 R14: 00000000004da1e0 R15: 0000000000000004 18:49:09 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:09 executing program 2 (fault-call:3 fault-nth:2): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 336.995057][T12816] input: syz0 as /devices/virtual/input/input354 18:49:09 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:09 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:10 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 337.469771][T12865] input: syz0 as /devices/virtual/input/input357 18:49:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:10 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x2, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:10 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x10, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 337.824201][T12865] input: syz0 as /devices/virtual/input/input359 18:49:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:10 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:10 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x227a, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 338.129482][T12899] input: syz0 as /devices/virtual/input/input361 18:49:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:10 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x4b68, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x10, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:11 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x4c01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:11 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x17, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 338.653529][T12899] input: syz0 as /devices/virtual/input/input364 18:49:11 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x5421, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x19, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:11 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x5450, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x32, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:11 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x5451, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 339.143544][T12956] input: syz0 as /devices/virtual/input/input366 18:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x48, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:11 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:12 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x5452, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:12 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 339.563649][T12956] input: syz0 as /devices/virtual/input/input368 18:49:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x60, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:12 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x5460, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:12 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x68, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:12 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x6364, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 340.150809][T13004] input: syz0 as /devices/virtual/input/input370 18:49:12 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:12 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8912, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8933, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x74, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xae01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 340.587931][T13004] input: syz0 as /devices/virtual/input/input372 18:49:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x01', 0x4, 0x0) 18:49:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xae41, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2b6, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:13 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xae80, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x300, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 341.117365][T13047] input: syz0 as /devices/virtual/input/input374 [ 341.209175][T13054] input: syz0 as /devices/virtual/input/input375 18:49:13 executing program 1: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x3000a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r7, 0x0, r9}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 18:49:13 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xae9a, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:13 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3a0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:14 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 341.529678][T13071] input: syz0 as /devices/virtual/input/input377 18:49:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x2) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0x100, 0xff, 0xffff, 0xffff}, 0x38, [0x2, 0x9, 0xffffff6e, 0xbbe, 0x6, 0x7ff, 0x20, 0x40, 0x7fffffff, 0x7fffffff, 0x7, 0xfffffff8, 0x1ff, 0x0, 0x3, 0x8, 0x8001, 0x7, 0x87f, 0x100, 0x3f, 0x5, 0x101, 0xff, 0x8001, 0xfffff800, 0x5, 0x100, 0xfffff97c, 0x9, 0x0, 0x8, 0x6, 0x9, 0x8, 0x8, 0x2, 0x5, 0x3, 0x7f, 0x1, 0x0, 0x80000001, 0x2, 0x3f, 0xfffffffe, 0x74625c9d, 0x1ff, 0x8000, 0x0, 0xffff, 0x9, 0x7, 0x10001, 0x8, 0x80000000, 0x5, 0x2, 0x7f, 0x0, 0x84, 0x5, 0x6, 0x5], [0x2, 0x1, 0x5, 0x7fff, 0x1ff, 0x5, 0x7fff, 0xf5, 0x2930, 0x6, 0xffffffff, 0x80000001, 0xffff1ffc, 0x7ff, 0x180000, 0x1, 0x4bd62465, 0x6, 0x9, 0x0, 0xffff, 0x800, 0x4, 0x7c, 0x5, 0x0, 0x5, 0x9a8, 0x101, 0x0, 0xfffffffd, 0x8, 0x3ff, 0x400, 0x5, 0x4, 0x3f, 0x7ff, 0x4, 0x3, 0x4, 0x1, 0x2, 0x7, 0x3, 0xbe93, 0x4, 0x8000, 0x8000, 0x0, 0x979, 0x7b, 0x1000, 0x1, 0x1, 0x5, 0xff, 0x5, 0x5, 0xfff, 0x9, 0x5bef, 0x6bc, 0xffff], [0xffffffff, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffc00, 0xd14f, 0x5, 0x401, 0x6, 0x0, 0x3, 0x40, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x2, 0x4ce5, 0xc23, 0x960a, 0x8, 0x9, 0x2, 0x5, 0xfffffffc, 0x7fff, 0x8e, 0x7, 0x4, 0x2, 0xdd9, 0x400, 0x8000, 0x8000, 0x6, 0xb5, 0x20, 0x1f, 0x1f, 0xf0, 0x4, 0x0, 0x80000000, 0x800, 0x1f, 0x6, 0x5, 0x9, 0x1ff, 0x8, 0x6, 0x6, 0xc1, 0xffffa0a3, 0x76, 0x8, 0x7ff, 0x9, 0xffffffff, 0x8], [0x1, 0x9, 0x2, 0x100, 0x5, 0x4, 0x7fffffff, 0x40, 0x5, 0x7, 0x0, 0x3, 0xd7cf, 0x3, 0x6, 0x81, 0x8, 0x2, 0x101, 0xfffffff7, 0x9, 0x6, 0x0, 0x7fffffff, 0x1, 0x4, 0x60, 0x94b5, 0x2000000, 0x8, 0x4, 0x40, 0x4, 0x8001, 0x40, 0x7ff, 0x4, 0x8, 0x0, 0x80000001, 0x40, 0x40, 0xbd200000, 0x1, 0x8, 0x1, 0x6, 0x6, 0x430, 0xffffffff, 0xff, 0x7, 0x5, 0x1, 0xf648, 0x1f, 0xc4f6, 0x101, 0x800, 0xffff, 0x800, 0x0, 0x4, 0x3a77be7c]}, 0x45c) sigaltstack(&(0x7f00006ab000/0x3000)=nil, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306096768fe07072b0300370e000b0014000200450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$eventfd(r3, &(0x7f0000000040), 0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 18:49:14 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x400454ca, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x600, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 341.757602][T13086] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 341.787909][T13086] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 18:49:14 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x40049409, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x700, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 341.967265][T13098] input: syz0 as /devices/virtual/input/input379 18:49:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x2) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {0x100, 0xff, 0xffff, 0xffff}, 0x38, [0x2, 0x9, 0xffffff6e, 0xbbe, 0x6, 0x7ff, 0x20, 0x40, 0x7fffffff, 0x7fffffff, 0x7, 0xfffffff8, 0x1ff, 0x0, 0x3, 0x8, 0x8001, 0x7, 0x87f, 0x100, 0x3f, 0x5, 0x101, 0xff, 0x8001, 0xfffff800, 0x5, 0x100, 0xfffff97c, 0x9, 0x0, 0x8, 0x6, 0x9, 0x8, 0x8, 0x2, 0x5, 0x3, 0x7f, 0x1, 0x0, 0x80000001, 0x2, 0x3f, 0xfffffffe, 0x74625c9d, 0x1ff, 0x8000, 0x0, 0xffff, 0x9, 0x7, 0x10001, 0x8, 0x80000000, 0x5, 0x2, 0x7f, 0x0, 0x84, 0x5, 0x6, 0x5], [0x2, 0x1, 0x5, 0x7fff, 0x1ff, 0x5, 0x7fff, 0xf5, 0x2930, 0x6, 0xffffffff, 0x80000001, 0xffff1ffc, 0x7ff, 0x180000, 0x1, 0x4bd62465, 0x6, 0x9, 0x0, 0xffff, 0x800, 0x4, 0x7c, 0x5, 0x0, 0x5, 0x9a8, 0x101, 0x0, 0xfffffffd, 0x8, 0x3ff, 0x400, 0x5, 0x4, 0x3f, 0x7ff, 0x4, 0x3, 0x4, 0x1, 0x2, 0x7, 0x3, 0xbe93, 0x4, 0x8000, 0x8000, 0x0, 0x979, 0x7b, 0x1000, 0x1, 0x1, 0x5, 0xff, 0x5, 0x5, 0xfff, 0x9, 0x5bef, 0x6bc, 0xffff], [0xffffffff, 0x80000000, 0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffc00, 0xd14f, 0x5, 0x401, 0x6, 0x0, 0x3, 0x40, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x2, 0x4ce5, 0xc23, 0x960a, 0x8, 0x9, 0x2, 0x5, 0xfffffffc, 0x7fff, 0x8e, 0x7, 0x4, 0x2, 0xdd9, 0x400, 0x8000, 0x8000, 0x6, 0xb5, 0x20, 0x1f, 0x1f, 0xf0, 0x4, 0x0, 0x80000000, 0x800, 0x1f, 0x6, 0x5, 0x9, 0x1ff, 0x8, 0x6, 0x6, 0xc1, 0xffffa0a3, 0x76, 0x8, 0x7ff, 0x9, 0xffffffff, 0x8], [0x1, 0x9, 0x2, 0x100, 0x5, 0x4, 0x7fffffff, 0x40, 0x5, 0x7, 0x0, 0x3, 0xd7cf, 0x3, 0x6, 0x81, 0x8, 0x2, 0x101, 0xfffffff7, 0x9, 0x6, 0x0, 0x7fffffff, 0x1, 0x4, 0x60, 0x94b5, 0x2000000, 0x8, 0x4, 0x40, 0x4, 0x8001, 0x40, 0x7ff, 0x4, 0x8, 0x0, 0x80000001, 0x40, 0x40, 0xbd200000, 0x1, 0x8, 0x1, 0x6, 0x6, 0x430, 0xffffffff, 0xff, 0x7, 0x5, 0x1, 0xf648, 0x1f, 0xc4f6, 0x101, 0x800, 0xffff, 0x800, 0x0, 0x4, 0x3a77be7c]}, 0x45c) sigaltstack(&(0x7f00006ab000/0x3000)=nil, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306096768fe07072b0300370e000b0014000200450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$eventfd(r3, &(0x7f0000000040), 0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 18:49:14 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x40106436, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 342.140378][T13108] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 342.162962][T13108] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.308448][T13118] input: syz0 as /devices/virtual/input/input381 18:49:15 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:15 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x4020940d, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:15 executing program 1: syz_init_net_socket$llc(0x1a, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1b0000001a005f0414f9f407000904000a00000000008000010000", 0x1b) 18:49:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1700, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:15 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x4020ae46, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c41060005000101"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000240)={{0x4000, 0x3000, 0xb, 0x4, 0x1, 0x2, 0x30, 0x7f, 0x1, 0x5, 0x0, 0x80}, {0x1000, 0x2000, 0xf, 0x0, 0x0, 0x4, 0x1, 0xe0, 0x78, 0x40, 0xb9, 0x7}, {0x1000, 0x2e72a557e77b9126, 0xc, 0x40, 0xa3, 0xc1, 0x7f, 0x3f, 0x1, 0x3, 0x81, 0x6}, {0x1000, 0x4, 0x0, 0xbd, 0x7f, 0x1, 0x6, 0x1, 0x83, 0x40, 0xb3, 0x40}, {0x6000, 0x2, 0x8, 0x3, 0x3f, 0x80, 0xf7, 0x7f, 0xae, 0xff, 0x2, 0x5}, {0x1000, 0x2, 0x10, 0x1, 0x1, 0x7f, 0xff, 0x1, 0x7f, 0x5b, 0x38, 0x1}, {0x6000, 0x202000, 0x10, 0x5, 0x9, 0xff, 0x81, 0x81, 0x1, 0x3, 0x6, 0x5}, {0x3000, 0x4000, 0x3, 0x0, 0x7, 0x5, 0x7, 0x4, 0x6, 0x2, 0x9, 0xff}, {0x100000, 0x1004}, {0x9796d8d5e3fe66cb, 0x3002}, 0x8, 0x0, 0x1000, 0x20100, 0x4, 0x801, 0xd000, [0x9, 0x20, 0x8, 0xfffffffffffffffd]}) 18:49:15 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 342.736595][T13149] input: syz0 as /devices/virtual/input/input384 18:49:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1900, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:15 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:15 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x4090ae82, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xff', 0x4, 0x0) 18:49:15 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) 18:49:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:15 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x800454d2, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 343.091640][T13169] input: syz0 as /devices/virtual/input/input385 18:49:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xf6', 0x4, 0x0) 18:49:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3200, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x800454d7, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:16 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30}, 0x30) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) 18:49:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 343.634261][T13169] input: syz0 as /devices/virtual/input/input390 18:49:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3f00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x80086301, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:16 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x4000) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x8, 0x9, 0x10, 0xb, 0x2, 0x4, 0x6, 0x9b}}) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x10001, 0x2) fcntl$setpipe(r2, 0x407, 0x1) sendto$netrom(r2, &(0x7f0000000140)="bcf749154d354b1849b1bdf4bb4b8083d7aef54aaa7d8b924b1591fa135cddad58fdff", 0x23, 0x4c042, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$int_out(r3, 0x2, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x14) r4 = getgid() setgid(r4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000340)={0xffff, 0x9, 0x8, 0x1, 0x8}) r6 = accept(r2, &(0x7f0000000380)=@pptp, &(0x7f0000000400)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000480)={@remote, 0x5e, r7}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) preadv(r8, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/8, 0x8}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f0000000700)=""/6, 0x6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x5, 0x8) fadvise64(0xffffffffffffffff, 0xfd, 0x0, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/qat_adf_ctl\x00', 0x280040, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xd, &(0x7f0000001800)=0x4980, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000001880)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @rand_addr=0x8}], 0x30) getpid() r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r11, 0x40045613, &(0x7f0000001900)=0x80000000) r12 = syz_open_dev$amidi(&(0x7f0000001940)='/dev/amidi#\x00', 0x3, 0x10000) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r12, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x10000818) 18:49:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 343.983032][T13222] input: syz0 as /devices/virtual/input/input393 [ 343.985043][T13228] Unknown ioctl 1077980836 18:49:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa03, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 344.061039][T13235] Unknown ioctl 1077980836 18:49:16 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x282240, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(0x0, 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) r3 = epoll_create1(0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x0, 0x3f000002}) r5 = epoll_create1(0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x0, 0x3f000002}) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000a00)={"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"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) r7 = getpgrp(0x0) setpriority(0x0, r7, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r9 = gettid() kcmp(r9, 0x0, 0x0, 0xffffffffffffffff, r8) setpgid(r9, 0xffffffffffffffff) r10 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r11 = gettid() kcmp(r11, 0x0, 0x0, 0xffffffffffffffff, r10) r12 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r13 = gettid() kcmp(r13, 0x0, 0x0, 0xffffffffffffffff, r12) setpgid(r13, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000600)=0xe, 0x80800) r15 = userfaultfd(0x0) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r15, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r16 = userfaultfd(0x0) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r16, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) kcmp(0x0, 0x0, 0x0, r16, r15) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0x6}, {0xffffffff00000000}]}, 0x14, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 18:49:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa05, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4800, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:17 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa18, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 344.473244][T13230] input: syz0 as /devices/virtual/input/input395 18:49:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:17 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc0045878, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 344.892346][T13280] input: syz0 as /devices/virtual/input/input397 18:49:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6800, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:17 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc0045878, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:17 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc0189436, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 345.265745][T13302] input: syz0 as /devices/virtual/input/input399 18:49:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7400, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x282240, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(0x0, 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) r3 = epoll_create1(0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x0, 0x3f000002}) r5 = epoll_create1(0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x0, 0x3f000002}) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000a00)={"c5c48455550c5f15d6a1e54e8434d392b1ee8ce0d8cc789e6f9f5fff37ea66e3ca2631545d2fac4abc17eb7ac022137c40ce9850330e934af106b6d2b7b23ab19ac6157f94543f7759d7d90386c0a66d13d3e29cd3c6af3aacf0403dfd57a8f8135dc35686b0919a00010000000000007e3b8f482c0f739c8d5b6b8550e111346a569c4ef7974920a0d7d047f3aa354d1ecdd6032a60c603c404884d346b4f5f2a11da56be949d0f7631fc8cfaaad5c4a62696e3e255e89ea6a55cd3d7c072f17a1259489e5c8c35e774bdf939b28c750dbbcabb6f8243e7ddc524c53053d507b8d8841c66088bb387c003a38c6b56c6d3943436d3bfaee3a64f70cf0786eeefcb20c20d6ccab79d6b56c389e2c2036dd5c530cf9375fcdfc5c64ed37d249442e633724fc2a1c05ceb01c61a1ec83aa77af2a86431dbd70b1f57d83b558d5b7f991e59e4de3d94ecfd0d1ee35e28b03fc0c4edf919b649dbe0bee545c8a523de067f6d4c93585430d396a84a8128244e7880b3fb27d3e25bbdae3248a60f3835a8e5c1b8ec9054f0b28c3b8f3bb8805756908d313f77fe38934b57b1626bf795f20ded88ac5593dfd331d6ee199ae59864a789c50a0716705a5066680491ae4865f94eb777f1af9cecf98eba79e57ba4f056fc2faafc2b6b876323a192fad3e9e2328191df6def6cc8a74e7bf7032a69810371780f6035b205461f06194bee219f01225d7770067d4b8368b6e76cad966e9c68b3fa9129196dc06422e56a72c96dd97c436c97fc9c0fafbe9a70db131c4ccc0c16e37b3dd16b47c80c8dbf457f5eeb2a0bd1bd121d55092b7a421af41520af3a14d021ac7a5b687be522b7077604441a420679cc1f7dc60c6a7a9c38d5cc925f45180bf6c3d03296df35e80cee74a9d5112ad31d9f73a929e56ab98b78034136f5c780db45f6685ef241766a1b1e6b1022867fee580f6d4edd7209d80a69d5a9c14f5c8f40d0146fd345c293f8f528fd0f769ba1d3e1afb2d7ecc7642d84f5427bc7eb8d3df8587fdf9c8a1ae6fb8da5f4c7f41dcc4357aa174bd748f2b7b936acf1a571b37051f582e64662547b5b5a300dad70abe401d31ab0ee0f954836e504b2600fac22a7563f765a5e28a9c8e5070f87c7108d2bba9dd471e07f853794ecc5b07ed9613474efee45e3cbf4d1e8731f6f2fc4916eeb5477e38618149221fdcb7fa0b96dc6d93300310ac036e2bca6de88be17d01ef15da72524dc3c3414aeb8035892e6cb9a8a8e0ede1f083fe121e6d968e2c5974db5a86f9087e11c0e07ed02df3cf64be47e80c63925975d2514335b6cd952154bbc1bf2b52adf0c6529d9d05acf16f5b2178395e7df8ad6223d19a38d63d6785ef1fc69100b79a92325e358f75f8213f858e725fc0c1246ad2f0c1cdb3fc933e7ba971de2707689bfe56cc62cb0179b090d83435d3b"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) r7 = getpgrp(0x0) setpriority(0x0, r7, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r9 = gettid() kcmp(r9, 0x0, 0x0, 0xffffffffffffffff, r8) setpgid(r9, 0xffffffffffffffff) r10 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r11 = gettid() kcmp(r11, 0x0, 0x0, 0xffffffffffffffff, r10) r12 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r13 = gettid() kcmp(r13, 0x0, 0x0, 0xffffffffffffffff, r12) setpgid(r13, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000600)=0xe, 0x80800) r15 = userfaultfd(0x0) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r15, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r16 = userfaultfd(0x0) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r16, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) kcmp(0x0, 0x0, 0x0, r16, r15) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0x6}, {0xffffffff00000000}]}, 0x14, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 18:49:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc018aa3f, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 345.602665][T13324] input: syz0 as /devices/virtual/input/input401 18:49:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020660b, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa00, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x9fff, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 345.977817][T13329] input: syz0 as /devices/virtual/input/input403 18:49:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc0345641, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:18 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa003, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x282240, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(0x0, 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) r3 = epoll_create1(0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x0, 0x3f000002}) r5 = epoll_create1(0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x0, 0x3f000002}) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000a00)={"c5c48455550c5f15d6a1e54e8434d392b1ee8ce0d8cc789e6f9f5fff37ea66e3ca2631545d2fac4abc17eb7ac022137c40ce9850330e934af106b6d2b7b23ab19ac6157f94543f7759d7d90386c0a66d13d3e29cd3c6af3aacf0403dfd57a8f8135dc35686b0919a00010000000000007e3b8f482c0f739c8d5b6b8550e111346a569c4ef7974920a0d7d047f3aa354d1ecdd6032a60c603c404884d346b4f5f2a11da56be949d0f7631fc8cfaaad5c4a62696e3e255e89ea6a55cd3d7c072f17a1259489e5c8c35e774bdf939b28c750dbbcabb6f8243e7ddc524c53053d507b8d8841c66088bb387c003a38c6b56c6d3943436d3bfaee3a64f70cf0786eeefcb20c20d6ccab79d6b56c389e2c2036dd5c530cf9375fcdfc5c64ed37d249442e633724fc2a1c05ceb01c61a1ec83aa77af2a86431dbd70b1f57d83b558d5b7f991e59e4de3d94ecfd0d1ee35e28b03fc0c4edf919b649dbe0bee545c8a523de067f6d4c93585430d396a84a8128244e7880b3fb27d3e25bbdae3248a60f3835a8e5c1b8ec9054f0b28c3b8f3bb8805756908d313f77fe38934b57b1626bf795f20ded88ac5593dfd331d6ee199ae59864a789c50a0716705a5066680491ae4865f94eb777f1af9cecf98eba79e57ba4f056fc2faafc2b6b876323a192fad3e9e2328191df6def6cc8a74e7bf7032a69810371780f6035b205461f06194bee219f01225d7770067d4b8368b6e76cad966e9c68b3fa9129196dc06422e56a72c96dd97c436c97fc9c0fafbe9a70db131c4ccc0c16e37b3dd16b47c80c8dbf457f5eeb2a0bd1bd121d55092b7a421af41520af3a14d021ac7a5b687be522b7077604441a420679cc1f7dc60c6a7a9c38d5cc925f45180bf6c3d03296df35e80cee74a9d5112ad31d9f73a929e56ab98b78034136f5c780db45f6685ef241766a1b1e6b1022867fee580f6d4edd7209d80a69d5a9c14f5c8f40d0146fd345c293f8f528fd0f769ba1d3e1afb2d7ecc7642d84f5427bc7eb8d3df8587fdf9c8a1ae6fb8da5f4c7f41dcc4357aa174bd748f2b7b936acf1a571b37051f582e64662547b5b5a300dad70abe401d31ab0ee0f954836e504b2600fac22a7563f765a5e28a9c8e5070f87c7108d2bba9dd471e07f853794ecc5b07ed9613474efee45e3cbf4d1e8731f6f2fc4916eeb5477e38618149221fdcb7fa0b96dc6d93300310ac036e2bca6de88be17d01ef15da72524dc3c3414aeb8035892e6cb9a8a8e0ede1f083fe121e6d968e2c5974db5a86f9087e11c0e07ed02df3cf64be47e80c63925975d2514335b6cd952154bbc1bf2b52adf0c6529d9d05acf16f5b2178395e7df8ad6223d19a38d63d6785ef1fc69100b79a92325e358f75f8213f858e725fc0c1246ad2f0c1cdb3fc933e7ba971de2707689bfe56cc62cb0179b090d83435d3b"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) r7 = getpgrp(0x0) setpriority(0x0, r7, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r9 = gettid() kcmp(r9, 0x0, 0x0, 0xffffffffffffffff, r8) setpgid(r9, 0xffffffffffffffff) r10 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r11 = gettid() kcmp(r11, 0x0, 0x0, 0xffffffffffffffff, r10) r12 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r13 = gettid() kcmp(r13, 0x0, 0x0, 0xffffffffffffffff, r12) setpgid(r13, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000600)=0xe, 0x80800) r15 = userfaultfd(0x0) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r15, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r16 = userfaultfd(0x0) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r16, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) kcmp(0x0, 0x0, 0x0, r16, r15) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0x6}, {0xffffffff00000000}]}, 0x14, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 18:49:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xb602, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 346.484648][T13365] input: syz0 as /devices/virtual/input/input405 18:49:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfd8f, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00003}) 18:49:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00004}) [ 346.891122][T13375] input: syz0 as /devices/virtual/input/input407 18:49:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff9f, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:19 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 347.225466][T13408] input: syz0 as /devices/virtual/input/input409 18:49:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5a996, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:19 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00005}) 18:49:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa7f36, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:20 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00006}) 18:49:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x200000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:20 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00007}) [ 347.736653][T13408] input: syz0 as /devices/virtual/input/input412 18:49:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x400000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:20 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00300}) 18:49:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 348.031089][T13461] input: syz0 as /devices/virtual/input/input414 18:49:20 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00500}) 18:49:20 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x600000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 348.463673][T13461] input: syz0 as /devices/virtual/input/input416 18:49:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:21 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00600}) 18:49:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x800000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8000a0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:21 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:21 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00700}) [ 348.891864][T13519] input: syz0 as /devices/virtual/input/input419 18:49:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x80ffff, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 349.306624][T13519] input: syz0 as /devices/virtual/input/input421 18:49:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xff', 0x4, 0x0) 18:49:22 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc04000}) 18:49:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:22 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:22 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 349.566545][T13557] input: syz0 as /devices/virtual/input/input423 18:49:22 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4081, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000047}, 0x4) 18:49:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 349.647294][T13561] input: syz0 as /devices/virtual/input/input424 18:49:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:22 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xf6', 0x4, 0x0) 18:49:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:22 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000b63000/0x1000)=nil, 0x1000}, 0x3}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x201100) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x63, {0x21, 0x27, 0x9, 0x1b, 0x7, 0x8, 0x0, 0x116, 0xffffffffffffffff}}) 18:49:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 349.965855][T13586] input: syz0 as /devices/virtual/input/input426 18:49:22 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 350.090857][T13596] input: syz0 as /devices/virtual/input/input428 18:49:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:22 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0xd11c, 0x72, 0x3018, 0x8, 0x7, 0x4, 0x1, 0x6}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:22 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 350.432701][T13618] input: syz0 as /devices/virtual/input/input430 18:49:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:23 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:23 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 350.765950][T13618] input: syz0 as /devices/virtual/input/input432 18:49:23 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:23 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xfff, r5}) 18:49:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:23 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:23 executing program 2: r0 = userfaultfd(0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) getpid() ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) clone3(&(0x7f0000000300)={0x48202c00, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), 0x2b, 0x0, &(0x7f0000000280)=""/7, 0x7, &(0x7f00000002c0)}, 0x40) perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x20, 0x40, 0x20, 0x20, 0x0, 0x0, 0x6600, 0xbdad7e9290efaae, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000040), 0xa}, 0x805, 0xcb, 0x2, 0x75acbce84ab6d90e, 0x7fffffff, 0x4, 0xfff}, r4, 0xf, r3, 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00005e9000/0x3000)=nil, 0x3000}) 18:49:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 351.086908][T13665] input: syz0 as /devices/virtual/input/input434 18:49:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:23 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:24 executing program 2: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000fcdfe8)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101400, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000b9c000/0x2000)=nil, 0x2000}, 0x800e0bda566f468d}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:24 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 351.532216][T13665] input: syz0 as /devices/virtual/input/input436 18:49:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x10000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:24 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x17000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x19000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 352.064047][T13723] input: syz0 as /devices/virtual/input/input439 18:49:24 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 18:49:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x32000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:24 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 18:49:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x367f0a00, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 352.427029][T13723] input: syz0 as /devices/virtual/input/input442 18:49:25 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 18:49:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:25 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x124000, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000200)) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r7, 0x80404525, &(0x7f00000000c0)=""/85) ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000140)) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=r8) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000080)=r8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r10, 0xae47, 0xd000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:25 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x282240, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(0x0, 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ptrace$setopts(0x7abb990919170921, 0x0, 0x10001, 0x111) r3 = epoll_create1(0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x0, 0x3f000002}) r5 = epoll_create1(0x0) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x0, 0x3f000002}) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000a00)={"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"}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f0000000900)='system_u:obj\x0f\xae\xc4\x1ds:auditctl_dxec_t:s0\x00', 0x25, 0x3) r7 = getpgrp(0x0) setpriority(0x0, r7, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r9 = gettid() kcmp(r9, 0x0, 0x0, 0xffffffffffffffff, r8) setpgid(r9, 0xffffffffffffffff) r10 = syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x10182) r11 = gettid() kcmp(r11, 0x0, 0x0, 0xffffffffffffffff, r10) r12 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r13 = gettid() kcmp(r13, 0x0, 0x0, 0xffffffffffffffff, r12) setpgid(r13, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000600)=0xe, 0x80800) r15 = userfaultfd(0x0) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r15, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r15, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r16 = userfaultfd(0x0) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r16, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) kcmp(0x0, 0x0, 0x0, r16, r15) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x0, 0x6}, {0xffffffff00000000}]}, 0x14, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) 18:49:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3f000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:25 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) rt_tgsigqueueinfo(r1, r5, 0x22, &(0x7f0000000040)={0x26, 0x5, 0xdb39}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x40000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 352.980028][T13773] input: syz0 as /devices/virtual/input/input445 18:49:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x48000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:26 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(r1) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000000)=0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 353.457848][T13773] input: syz0 as /devices/virtual/input/input448 18:49:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:26 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x68000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 18:49:26 executing program 1 (fault-call:2 fault-nth:0): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 353.864125][T13823] FAULT_INJECTION: forcing a failure. [ 353.864125][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 353.917784][T13826] input: syz0 as /devices/virtual/input/input450 [ 353.933787][T13823] CPU: 1 PID: 13823 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0 [ 353.941695][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.951740][T13823] Call Trace: [ 353.951765][T13823] dump_stack+0x197/0x210 [ 353.951790][T13823] should_fail.cold+0xa/0x15 [ 353.951812][T13823] ? fault_create_debugfs_attr+0x180/0x180 [ 353.951833][T13823] ? ___might_sleep+0x163/0x2c0 [ 353.951858][T13823] __should_failslab+0x121/0x190 [ 353.964017][T13823] should_failslab+0x9/0x14 [ 353.974618][T13823] __kmalloc+0x2e0/0x770 [ 353.974634][T13823] ? mark_held_locks+0xf0/0xf0 [ 353.974659][T13823] ? mark_lock+0xc2/0x1220 [ 353.974673][T13823] ? _parse_integer+0x190/0x190 [ 353.974692][T13823] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 353.984085][T13823] tomoyo_realpath_from_path+0xcd/0x7b0 [ 353.984100][T13823] ? tomoyo_path_number_perm+0x193/0x520 [ 353.984123][T13823] tomoyo_path_number_perm+0x1dd/0x520 [ 353.984134][T13823] ? tomoyo_path_number_perm+0x193/0x520 [ 353.984152][T13823] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 354.002340][T13823] ? __f_unlock_pos+0x19/0x20 [ 354.002389][T13823] ? __fget+0x384/0x560 [ 354.002422][T13823] ? ksys_dup3+0x3e0/0x3e0 [ 354.049413][T13823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.055648][T13823] ? fput_many+0x12c/0x1a0 [ 354.055671][T13823] tomoyo_file_ioctl+0x23/0x30 18:49:26 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x7fff) 18:49:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 354.055690][T13823] security_file_ioctl+0x77/0xc0 [ 354.055707][T13823] ksys_ioctl+0x57/0xd0 [ 354.055721][T13823] __x64_sys_ioctl+0x73/0xb0 [ 354.055740][T13823] do_syscall_64+0xfa/0x760 [ 354.064882][T13823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.064895][T13823] RIP: 0033:0x45a219 [ 354.064921][T13823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.064928][T13823] RSP: 002b:00007f03a29d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.083031][T13823] RAX: ffffffffffffffda RBX: 00007f03a29d6c90 RCX: 000000000045a219 [ 354.083040][T13823] RDX: 0000000020c22ff0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 354.083048][T13823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.083061][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03a29d76d4 [ 354.092798][T13823] R13: 00000000004c5234 R14: 00000000004da1e0 R15: 0000000000000004 [ 354.210564][T13823] ERROR: Out of memory at tomoyo_realpath_from_path. 18:49:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x74000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:27 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000140)=""/246, &(0x7f0000000240)=0xf6) 18:49:27 executing program 1 (fault-call:2 fault-nth:1): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 354.475716][T13849] FAULT_INJECTION: forcing a failure. [ 354.475716][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 354.533928][T13849] CPU: 0 PID: 13849 Comm: syz-executor.1 Not tainted 5.4.0-rc6+ #0 [ 354.541849][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.551906][T13849] Call Trace: [ 354.555202][T13849] dump_stack+0x197/0x210 [ 354.559543][T13849] should_fail.cold+0xa/0x15 [ 354.564129][T13849] ? fault_create_debugfs_attr+0x180/0x180 [ 354.569947][T13849] ? ___might_sleep+0x163/0x2c0 [ 354.574809][T13849] __should_failslab+0x121/0x190 [ 354.579748][T13849] should_failslab+0x9/0x14 [ 354.584260][T13849] __kmalloc+0x2e0/0x770 [ 354.588500][T13849] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 354.594316][T13849] ? tomoyo_encode2.part.0+0xf5/0x400 [ 354.599696][T13849] tomoyo_encode2.part.0+0xf5/0x400 [ 354.604899][T13849] tomoyo_encode+0x2b/0x50 [ 354.609304][T13849] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 354.609318][T13849] ? tomoyo_path_number_perm+0x193/0x520 [ 354.609338][T13849] tomoyo_path_number_perm+0x1dd/0x520 [ 354.609351][T13849] ? tomoyo_path_number_perm+0x193/0x520 [ 354.609369][T13849] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 354.609382][T13849] ? __f_unlock_pos+0x19/0x20 [ 354.609437][T13849] ? __fget+0x384/0x560 [ 354.609457][T13849] ? ksys_dup3+0x3e0/0x3e0 [ 354.609475][T13849] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.609489][T13849] ? fput_many+0x12c/0x1a0 [ 354.609507][T13849] tomoyo_file_ioctl+0x23/0x30 [ 354.609525][T13849] security_file_ioctl+0x77/0xc0 [ 354.609545][T13849] ksys_ioctl+0x57/0xd0 [ 354.609563][T13849] __x64_sys_ioctl+0x73/0xb0 [ 354.609579][T13849] do_syscall_64+0xfa/0x760 [ 354.609600][T13849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.690274][T13849] RIP: 0033:0x45a219 [ 354.694244][T13849] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.713851][T13849] RSP: 002b:00007f03a29d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.722261][T13849] RAX: ffffffffffffffda RBX: 00007f03a29d6c90 RCX: 000000000045a219 18:49:27 executing program 2: r0 = userfaultfd(0x400) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:utempter_exec_t:s0\x00', 0x25, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @loopback}, &(0x7f0000000040)=0x8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 354.730226][T13849] RDX: 0000000020c22ff0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 354.738229][T13849] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.746199][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03a29d76d4 [ 354.754189][T13849] R13: 00000000004c5234 R14: 00000000004da1e0 R15: 0000000000000004 18:49:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 354.807196][T13859] input: syz0 as /devices/virtual/input/input454 18:49:27 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x96a90500, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 354.942081][T13849] ERROR: Out of memory at tomoyo_realpath_from_path. 18:49:27 executing program 1 (fault-call:2 fault-nth:2): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:27 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:49:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa0008000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 355.173559][T13859] input: syz0 as /devices/virtual/input/input456 18:49:27 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa0030000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x30a02, 0x82) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x8, 0x8bf}) r3 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400202) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000080)={{0x16, @empty, 0x4e21, 0x3, 'sh\x00', 0x33, 0x376, 0x71}, {@multicast1, 0x4e23, 0x2, 0x7ee3e9ac, 0xd9a, 0x1}}, 0x44) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:28 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x2, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) [ 355.523687][T13909] input: syz0 as /devices/virtual/input/input459 18:49:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xb6020000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:28 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x10, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:28 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() r3 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70}], 0xfd, 0x0) ptrace$cont(0x7, r3, 0x10000, 0x7) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa, 0x44}) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect(r6, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) gettid() r7 = gettid() r8 = getpgid(0x0) sendmmsg$unix(r6, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x2f, 0x80, 0x7f, 0x1, 0x0, 0x8698, 0x20020, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0x9}, 0x401, 0x1, 0x7, 0x7, 0xffffffff, 0x1, 0x77a8}, r7, 0x1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$cont(0xb79aefc72ac6991f, r11, 0x2, 0x8) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x82701, 0x0) ioctl$BLKFLSBUF(r12, 0x1261, &(0x7f0000000040)=0x2) 18:49:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe4ffffff, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 355.900487][T13909] input: syz0 as /devices/virtual/input/input462 18:49:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) 18:49:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:28 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x1274, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff000000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 356.151156][T13951] input: syz0 as /devices/virtual/input/input464 18:49:28 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x1276, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff9f0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x0) 18:49:29 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x2402, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffff8000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 356.423586][T13951] input: syz0 as /devices/virtual/input/input467 18:49:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x0) 18:49:29 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x3b71, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffffe4, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:29 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40081, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0xe1f6ca8239d6ed85, 0x2) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000000)={&(0x7f0000636000/0x2000)=nil, 0x81, 0x5, 0x80, &(0x7f0000ae5000/0x4000)=nil, 0x6}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 356.829660][T13998] input: syz0 as /devices/virtual/input/input471 18:49:29 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4b41, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x0) 18:49:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffffff, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:29 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() r4 = gettid() sendmmsg$unix(r2, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00', @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}], 0xfd, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/dev\x00') ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x10, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x11, 0x0) 18:49:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:49:29 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4c00, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 357.258728][T13998] input: syz0 as /devices/virtual/input/input474 18:49:29 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x18, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:30 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x10002) sendto$rose(r1, &(0x7f0000000200)="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", 0x1000, 0x40004800, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001340)=0x3f) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/187, 0xffffff54, 0x2141, 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) pwritev(r6, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r7 = socket(0x0, 0x2, 0x0) close(r7) r8 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001b40)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001380)={0x0, 0x1, 0x8, 0x4, 0x3, 0x7, 0x8000, 0x1000, r9}, &(0x7f00000013c0)=0x20) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000140)={0xffff7fff, {{0xa, 0x4e23, 0x8, @rand_addr="167792ce025e7b63cb59ba901b8e7c1c", 0x7fffffff}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1a010000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r12, 0x642b1aae34b464c8, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008861) 18:49:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x2) 18:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:30 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4c01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x2, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 357.605087][T14054] input: syz0 as /devices/virtual/input/input478 18:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:30 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa, 0x52}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x3, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:30 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5411, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:30 executing program 2: r0 = userfaultfd(0x0) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @null, @rose, @remote, @default]}, &(0x7f0000000100)=0x48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = socket$isdn(0x22, 0x3, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x3, [], "7d1c31981078c86f7df10397bcef76b0"}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 358.018691][T14054] input: syz0 as /devices/virtual/input/input480 18:49:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x4, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x3) 18:49:30 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5421, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:30 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x5, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:31 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5423, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 358.487511][T14111] input: syz0 as /devices/virtual/input/input483 18:49:31 executing program 2: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x108) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000040)=0x1) 18:49:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x4) 18:49:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 358.889764][T14111] input: syz0 as /devices/virtual/input/input485 18:49:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:31 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5450, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x6, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:31 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000659000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x7, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:31 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5451, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:31 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200020, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'ifb0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0x7, 0xfffffc01, 0xc9, "fb38f09493419ded24ed514b9b5b71eeda24a92a28dd7698709b9fe7b5cc2fbf99be5a0672a124b6f05f8d07e4f6bbce775837ae72b00baf3c83901650346a073aa4021020b6a195f8c1934fd99b927691c4c2ba1cfbfa15dfada43d43ed1e933253a70a1a24c4e9b9fe4f268896436289e5220944e916bed6b9abd6b8b0ebd7ab215a543e8f2d97246152a1080fc6b94faf1a7966ea74115939e7d8f1b95094d4adc3e0ed3817f579ab42cc851785d378663547d364ff76c4a23419009c2375724310ee537d49afc9"}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = msgget$private(0x0, 0x118) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/165) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000140)="73844ae89d", 0x5}]) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 359.177615][T14155] input: syz0 as /devices/virtual/input/input487 18:49:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x5) 18:49:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x8, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 359.641926][T14155] input: syz0 as /devices/virtual/input/input489 18:49:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) 18:49:32 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5452, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:32 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x40000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x9, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x6) 18:49:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xa, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:32 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x5460, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:32 executing program 2: unshare(0x10000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) open(&(0x7f0000000000)='./file0\x00', 0x80402, 0x2) [ 359.901352][T14207] input: syz0 as /devices/virtual/input/input491 18:49:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xb, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 360.340412][T14207] input: syz0 as /devices/virtual/input/input494 18:49:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\xff', 0x4, 0x0) 18:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x6364, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:33 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x890, 0x9, {r2, r3/1000+10000}, {0x0, 0x7530}, {0x4, 0x1, 0x1}, 0x1, @can={{0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "4aecd48443fda893"}}, 0x3aa}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xc, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x7) 18:49:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xd, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x6609, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 360.627085][T14254] input: syz0 as /devices/virtual/input/input496 18:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x48) [ 360.764612][T14257] input: syz0 as /devices/virtual/input/input498 18:49:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xe, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r5 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x4100) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000280)=0x1) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) pwritev(r7, &(0x7f0000000740)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000140)="d82a63a67db0905d22216f988ad69a815ee05bb5fc3b0679b423b1", 0x1b}, {&(0x7f00000006c0)}, {&(0x7f00000001c0)="9429b5b50cb5d7ad4c7bee7c7ce353e6bc63e9863ef212d9b1", 0x19}], 0x7, 0x0) r8 = socket(0x0, 0x2, 0x0) close(r8) r9 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x3, 0x101000) ioctl$PIO_CMAP(r9, 0x4b71, &(0x7f0000000300)={0x1c000000, 0x9, 0x9, 0x0, 0xfff, 0x1000}) r10 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001b40)={r11}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x5}}, 0x5, 0x5, 0xffffffc1}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)={r11, 0x7678, 0x30, 0x8, 0x29f88c5c80000}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r12, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}, &(0x7f0000000200)=0x84) 18:49:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) 18:49:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8912, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x11, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:33 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000004e000/0x1000)=nil, 0x1000}) [ 361.093440][T14291] input: syz0 as /devices/virtual/input/input501 18:49:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:33 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8927, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x4c) [ 361.268544][T14294] input: syz0 as /devices/virtual/input/input502 18:49:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:34 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000822000/0x1000)=nil, 0x1000}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:34 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8933, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) 18:49:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x18, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x68) 18:49:34 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:34 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x894b, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x2f, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 361.726053][T14335] input: syz0 as /devices/virtual/input/input505 18:49:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de80000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:34 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x6f}) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 361.918500][T14342] input: syz0 as /devices/virtual/input/input507 18:49:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x4e, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:34 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0xae01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x0) 18:49:34 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r2 = socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(r1, 0x0, r2) 18:49:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de80000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x6c) 18:49:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x71, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:34 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0xae41, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 362.279116][T14382] input: syz0 as /devices/virtual/input/input509 18:49:35 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa0040, 0x0) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr="eb02398cb6f94a184feb98dbd33fb460", 0x3}}, 0x24) 18:49:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x95, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 362.365066][T14396] input: syz0 as /devices/virtual/input/input510 18:49:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de80000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:35 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0xae80, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x6, 0x0) 18:49:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xb4, 0x18}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x74) 18:49:35 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x40045431, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0x7fffffff, 0x38000, [], &(0x7f0000000000)=0xf}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 362.713643][T14418] input: syz0 as /devices/virtual/input/input513 18:49:35 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004854}, 0x2000090) [ 362.875769][T14439] input: syz0 as /devices/virtual/input/input515 18:49:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:35 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x400454ca, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x7a) 18:49:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x0) 18:49:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de8000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:35 executing program 2: r0 = userfaultfd(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x401) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x4, 0x2, 0x943, 0x10001, r5}) [ 363.194495][T14461] input: syz0 as /devices/virtual/input/input517 18:49:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:35 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x400454d9, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 363.290867][T14467] input: syz0 as /devices/virtual/input/input519 [ 363.372266][T14472] QAT: Invalid ioctl 18:49:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xd, 0x0) [ 363.457803][T14472] QAT: Invalid ioctl [ 363.492342][T14479] QAT: Invalid ioctl 18:49:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:36 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x2, 0x0, 0xfff, 0xe3}, 0x8) 18:49:36 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x400455c8, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) [ 363.603788][T14488] input: syz0 as /devices/virtual/input/input520 18:49:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x300) 18:49:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x11, 0x0) 18:49:36 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x40045731, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xc}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 364.063564][T14519] input: syz0 as /devices/virtual/input/input523 18:49:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:36 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @remote}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xd}}, r7, 0x8}}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000519000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 364.188571][T14533] input: syz0 as /devices/virtual/input/input526 18:49:36 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x40049409, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x500) 18:49:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x118, 0x0) 18:49:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x40086602, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:37 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f00005b2000/0x1000)=nil, 0x1000}) [ 364.616169][T14560] input: syz0 as /devices/virtual/input/input528 18:49:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x14}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x600) [ 364.808609][T14566] input: syz0 as /devices/virtual/input/input530 18:49:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1000) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1c}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4008700e, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1801, 0x0) 18:49:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x700) [ 365.181504][T14602] input: syz0 as /devices/virtual/input/input533 18:49:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x24}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/118, 0x76}, {&(0x7f0000000640)=""/66, 0x42}], 0x9, 0x4e7) fstat(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0x0, r5, r6, 0x0, 0x0, r9]) setgid(r6) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4008ae89, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x2) 18:49:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x3f00) 18:49:38 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4008ae90, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:38 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) rt_sigaction(0x0, &(0x7f0000000080)={&(0x7f00000001c0)="c40115f119c4c17ff06a0067360f01fcc4e1f9db0af20f2cb900000100d9cbc421cf10d7660fc6e70bc4e2f52906c4e1157664f64b", {0x4}, 0x8000000, &(0x7f0000000040)="8f09e0936da466400f107713f0291ac421e414504ec4c235167200430f0f2d57f7000097c482e9dd810f00000041e585c4627930d9410f0fb1feefffff8a"}, &(0x7f0000000140)={&(0x7f00000000c0)="8f4990920f2e660f50c2f24a98c421796eacb97d57a81b41def2c4a35d0e9500800000482e66410f3a211b000f828effffff2e41fe8d000000818fe910020b", {}, 0x0, &(0x7f0000000100)="c4e25997849a00100002f341d3be00000000f3400f1efe36f2aa360f9e6f00f3450f7e4ce5f50fb912c44211070b429f36400f38c904fc"}, 0x8, &(0x7f0000000180)) [ 365.666790][T14633] input: syz0 as /devices/virtual/input/input537 18:49:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:38 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4020940d, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:38 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x2f}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 366.144230][T14635] input: syz0 as /devices/virtual/input/input540 18:49:39 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) fchdir(r1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4020ae46, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x30}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x3) 18:49:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x4000) 18:49:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4090ae82, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:39 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0xa, 0x2, 0x9, 0x2, 'syz0\x00'}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 18:49:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x43}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x400000100002f, {0x0, 0x0, 0x9947}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x4800) [ 366.636142][T14695] input: syz0 as /devices/virtual/input/input542 18:49:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x4138ae84, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00002}) 18:49:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:49:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x44}, [@ldst={0x6, 0x5, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 18:49:39 executing program 2: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xde, "85eae73fb52eaa7e5b52dbb5d38cc1d22006190c215f719f65b9c900224b25a531c6867f55d1f19b08d7f0ffe43fee7e7fe0bae7814f23ebb6eb739182e066b111eb4d3abe243eaf078612b9f4d73a1f1d1beaae059fb98a413699cef7c46fe5947725462ab2055150f840894f8f1580f641e3715cccef6324f463e94eb16272b5c8ab976f7dd1cfe7e22e698fe228b2f96acc0182932514169ac80eb0817ed3113c83e5f29d443a31c72c6cc7cb736e87d74264da95c59b95b14b3cf7190c691cfe8d7502777935b15b6d25ca2c22224135b8ea390ca1281241d3696acf"}, &(0x7f0000000140)=0x102) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 18:49:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000000010000000000000800000000000000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 367.079904][T14695] input: syz0 as /devices/virtual/input/input545 [ 367.111755][T14695] ------------[ cut here ]------------ [ 367.117582][T14695] refcount_t: increment on 0; use-after-free. [ 367.123929][T14695] WARNING: CPU: 0 PID: 14695 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 367.133102][T14695] Kernel panic - not syncing: panic_on_warn set ... [ 367.139677][T14695] CPU: 0 PID: 14695 Comm: syz-executor.5 Not tainted 5.4.0-rc6+ #0 [ 367.147541][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.157571][T14695] Call Trace: [ 367.160868][T14695] dump_stack+0x197/0x210 [ 367.165195][T14695] ? refcount_inc_not_zero_checked+0x1a0/0x200 [ 367.171359][T14695] panic+0x2e3/0x75c [ 367.175236][T14695] ? add_taint.cold+0x16/0x16 [ 367.180021][T14695] ? __kasan_check_write+0x14/0x20 [ 367.185109][T14695] ? __warn.cold+0x14/0x35 [ 367.189506][T14695] ? refcount_inc_checked+0x61/0x70 [ 367.194683][T14695] __warn.cold+0x2f/0x35 [ 367.198936][T14695] ? refcount_inc_checked+0x61/0x70 [ 367.204111][T14695] report_bug+0x289/0x300 [ 367.208423][T14695] do_error_trap+0x11b/0x200 [ 367.212995][T14695] do_invalid_op+0x37/0x50 [ 367.217389][T14695] ? refcount_inc_checked+0x61/0x70 [ 367.222563][T14695] invalid_op+0x23/0x30 [ 367.226697][T14695] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 367.232482][T14695] Code: 1d 7f 08 7e 06 31 ff 89 de e8 7b a3 2e fe 84 db 75 dd e8 32 a2 2e fe 48 c7 c7 c0 ae e6 87 c6 05 5f 08 7e 06 01 e8 17 d7 ff fd <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 367.252148][T14695] RSP: 0018:ffff8880601cf8b0 EFLAGS: 00010286 [ 367.258194][T14695] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 367.266146][T14695] RDX: 00000000000195f2 RSI: ffffffff815cc5a6 RDI: ffffed100c039f08 [ 367.274097][T14695] RBP: ffff8880601cf8c0 R08: ffff8880a60da100 R09: ffffed1015d04101 [ 367.282052][T14695] R10: ffffed1015d04100 R11: ffff8880ae820807 R12: ffff88809254f640 [ 367.290003][T14695] R13: 0000000000000000 R14: ffff8880a38d7580 R15: ffff8880a1eb49e0 [ 367.297975][T14695] ? vprintk_func+0x86/0x189 [ 367.302604][T14695] kobject_get+0x66/0xc0 [ 367.306826][T14695] cdev_get+0x60/0xb0 [ 367.310787][T14695] chrdev_open+0xb0/0x6b0 [ 367.315111][T14695] ? cdev_put.part.0+0x50/0x50 [ 367.319861][T14695] ? security_file_open+0x87/0x300 [ 367.324968][T14695] do_dentry_open+0x4e6/0x1380 [ 367.329717][T14695] ? __kasan_check_read+0x11/0x20 [ 367.334732][T14695] ? cdev_put.part.0+0x50/0x50 [ 367.339480][T14695] ? chown_common+0x5c0/0x5c0 [ 367.344137][T14695] ? inode_permission+0xb4/0x560 [ 367.349068][T14695] vfs_open+0xa0/0xd0 [ 367.353033][T14695] path_openat+0x10e9/0x46d0 [ 367.357603][T14695] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 367.363394][T14695] ? kasan_slab_alloc+0xf/0x20 [ 367.368137][T14695] ? kmem_cache_alloc+0x121/0x710 [ 367.373147][T14695] ? getname_flags+0xd6/0x5b0 [ 367.377800][T14695] ? getname+0x1a/0x20 [ 367.381849][T14695] ? do_sys_open+0x2c9/0x5d0 [ 367.386434][T14695] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 367.391791][T14695] ? __alloc_fd+0x487/0x620 [ 367.396295][T14695] do_filp_open+0x1a1/0x280 [ 367.400779][T14695] ? may_open_dev+0x100/0x100 [ 367.405456][T14695] ? __kasan_check_read+0x11/0x20 [ 367.410479][T14695] ? do_raw_spin_unlock+0x57/0x270 [ 367.415572][T14695] ? _raw_spin_unlock+0x2d/0x50 [ 367.420420][T14695] ? __alloc_fd+0x487/0x620 [ 367.424922][T14695] do_sys_open+0x3fe/0x5d0 [ 367.429416][T14695] ? filp_open+0x80/0x80 [ 367.433648][T14695] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 367.439091][T14695] ? do_syscall_64+0x26/0x760 [ 367.443755][T14695] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.449799][T14695] ? do_syscall_64+0x26/0x760 [ 367.454472][T14695] __x64_sys_open+0x7e/0xc0 [ 367.458970][T14695] do_syscall_64+0xfa/0x760 [ 367.463460][T14695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.469331][T14695] RIP: 0033:0x413fb1 [ 367.473210][T14695] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 367.492803][T14695] RSP: 002b:00007fec7f24a7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 367.501195][T14695] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 367.509145][T14695] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00007fec7f24a850 [ 367.517102][T14695] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 367.525052][T14695] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fec7f24b6d4 [ 367.533010][T14695] R13: 00000000004c9d18 R14: 00000000004e1a70 R15: 00000000ffffffff [ 367.542421][T14695] Kernel Offset: disabled [ 367.546840][T14695] Rebooting in 86400 seconds..