00000000000000000000000dad560d1a7d220e232334f9db70a00"/80], @ANYBLOB="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"], 0x798) [ 476.088615] binder_alloc: binder_alloc_mmap_handler: 19967 20001000-20002000 already mapped failed -16 [ 476.102698] input: syz1 as /devices/virtual/input/input2491 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000400000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/195) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) chroot(&(0x7f0000000140)='./file0\x00') mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 476.145509] input: syz1 as /devices/virtual/input/input2492 [ 476.160725] binder_alloc: binder_alloc_mmap_handler: 19981 20001000-20002000 already mapped failed -16 [ 476.169118] binder: 19987:19988 BC_FREE_BUFFER u0000000000000000 no match [ 476.176005] binder_alloc: binder_alloc_mmap_handler: 19981 20001000-20002000 already mapped failed -16 [ 476.188122] input: failed to attach handler leds to device input2491, error: -6 20:18:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200880, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x7, 0x9, 0xd6, 0x40, 0xd0}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000b00)={@empty, 0x5a, r3}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 20:18:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x42) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x1a, 0x0, &(0x7f0000001580)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0], 0x0, 0x0, 0x0}) r2 = accept(0xffffffffffffffff, &(0x7f0000001400)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000080)=0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000016c0)={0x58, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000140), &(0x7f00000015c0)=[0x38, 0x30, 0x18]}, 0x5}}, @dead_binder_done={0x40086310, 0x1}], 0xe, 0x0, &(0x7f0000001680)="977c1258ad3f23a84f2a88d1ab0e"}) socketpair(0x13, 0x3, 0x8417, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x4, 0x0, {0xa, 0x4e21, 0x3ff, @rand_addr="7ac3bf93ebe2eb12af2ed5790911e079", 0x5}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="25acbbe15be7247e89b03e9aabc6e6ee9e10298214d54add6502fcdd5f8b8f9c72b45b5ec2ce650a751245559f4da54d60724a54e20e16a25eabf80e969c7be96a4e99f9fb38e7e53ca0ae3e79963cdfc34d5edb3ba8633573c6b6a22d792c52cd77e12a1e73dc92416160920de2d64e1210b55340ab1eb0ad070bf42b756db4ea100846eb8467e8bc99b7e03e417166198be53c77c920d865e50ad28b06dcbfe5541a7c588102ef48f202d0e9a24a6526e3987e8d4d", 0xb6}], 0x2, &(0x7f0000000180)}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000002c0)=@req={0x6, 0x5, 0x3, 0x8001}, 0x10) statx(r5, &(0x7f0000000040)='./file0\x00', 0x800, 0x100, &(0x7f0000001480)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r3, &(0x7f0000000300)={0x80000000}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000140)='erspan0\x00') 20:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1a49bab871a46b97) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x4d, "a6bb1fc53fd33c675a120f08c22862aa0e26fda2881fd8c7688e352679248b1765bb9d116e30766463c27fffc874385a7067f92d4f7e3f14c3972691843f3278f30edee592216043734a111777"}, &(0x7f00000001c0)=0x71) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x100000011, r0, 0xfffffffffffffffd) 20:18:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.249907] binder_alloc: binder_alloc_mmap_handler: 19993 20001000-20002000 already mapped failed -16 [ 476.257918] binder: 19997:19999 unknown command 808482864 [ 476.268734] binder_alloc: binder_alloc_mmap_handler: 19993 20001000-20002000 already mapped failed -16 20:18:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5, 0x7, 0x8, 0x100000000, 0x7, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.318357] binder: 19997:20009 got transaction to invalid handle [ 476.327944] input: syz1 as /devices/virtual/input/input2494 [ 476.336407] input: syz1 as /devices/virtual/input/input2495 [ 476.355301] binder: 19997:19999 ioctl c0306201 200001c0 returned -22 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 476.372018] binder: 19997:20009 transaction failed 29201/-22, size 0-24 line 3118 [ 476.384062] input: syz1 as /devices/virtual/input/input2496 [ 476.392516] input: syz1 as /devices/virtual/input/input2497 20:18:05 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06620440f72b103c99"], 0x0, 0x0, 0x0}) 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 476.452386] binder_alloc: binder_alloc_mmap_handler: 20024 20001000-20002000 already mapped failed -16 [ 476.452597] binder: undelivered TRANSACTION_ERROR: 29201 20:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.558270] input: syz1 as /devices/virtual/input/input2498 [ 476.560999] binder: 20028:20034 unknown command 1074029062 [ 476.578306] binder_alloc: binder_alloc_mmap_handler: 20029 20002000-20006000 already mapped failed -16 [ 476.578360] binder: 20028:20034 ioctl c0306201 200001c0 returned -22 [ 476.599113] binder_alloc: binder_alloc_mmap_handler: 20029 20001000-20002000 already mapped failed -16 20:18:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000010c0)=@nat={'nat\x00', 0x19, 0x2, 0xd58, [0x20000340, 0x0, 0x0, 0x20001008, 0x20001038], 0x0, &(0x7f0000000180), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x5, 0x2, 0x8809, 'irlan0\x00', 'caif0\x00', 'yam0\x00', 'lo\x00', @dev={[], 0xa}, [0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xa0, 0x138, 0x1b0, [@connlabel={'connlabel\x00', 0x8, {{0x25, 0x1}}}]}, [@common=@log={'log\x00', 0x28, {{0x2, "8006274a1518ebaed561c895776bde7e0883f7e925dafdfe8008cd67a2bf", 0xe}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3f, 0x3f, 0x4}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x5, 0x4, 0x6, 0x0, 0x0, "5e4e5028c6ded86df44c5ac41ffe0a17543dd0ee8d65f57f3bab3ef32c9cba52ccd4bf62338400560e082923e56632b405404e30ba33606ef95113d6f0a07484"}}}}, {{{0x7, 0x40, 0x68ff, 'vcan0\x00', 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', 'rose0\x00', @link_local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9b8, 0x9b8, 0xae8, [@mac={'mac\x00', 0x10, {{@dev={[], 0x10}, 0x1}}}, @among={'among\x00', 0x8e8, {{0x81, 0x100, 0x0, {[0x0, 0x0, 0x8, 0x1, 0x3, 0x4, 0xf7e, 0x0, 0x0, 0x8, 0x4, 0x1, 0xdf, 0x5, 0xc54f, 0x100, 0x5b89, 0x8b, 0xfffffffffffffff8, 0x6, 0x7, 0x400, 0x3, 0xf, 0x9, 0x101, 0x80, 0x4, 0x800, 0x8, 0x3, 0x1f, 0x2, 0x1, 0x6, 0x3ff, 0x5d13, 0x3ff, 0x9, 0x1, 0x5, 0x8, 0x7fffffff, 0x0, 0x48, 0x3, 0x1, 0xfffffffffffffff9, 0x80b1, 0xfffffffffffffffc, 0x8, 0x9, 0xfffffffffffffffc, 0x2, 0x6, 0x0, 0xea, 0xff, 0x6, 0x9, 0x1, 0x7, 0x0, 0x7, 0x0, 0x496, 0x10000000000000, 0x8, 0x7fff, 0x9, 0x1, 0x7f, 0x5, 0x1f, 0x8, 0x6, 0x800, 0x3, 0x7, 0xffff, 0x0, 0x6, 0x9, 0x6, 0x4, 0x4, 0x997f, 0x2, 0x0, 0xcc1, 0x8000, 0x503, 0x2949, 0xfffffffffffff801, 0x3, 0x8, 0x1f, 0x1ff, 0x0, 0xf1, 0x8001, 0x3, 0x7, 0x6, 0x1bc638d0, 0x2, 0x5, 0x400, 0x3, 0x5, 0x1, 0x6, 0x7, 0xffffffffffff8a91, 0x80, 0x1, 0x7a, 0x9, 0x1, 0x8b, 0x1, 0x100, 0x5, 0x5, 0x1f, 0xb70, 0x2, 0x4, 0x8, 0xc24, 0xffff, 0x6, 0x0, 0x8, 0x5, 0x99dc, 0x3, 0x82, 0x747000000000, 0xfffffffffffffff9, 0x101, 0xfffffffffffffbff, 0x6, 0x80000000, 0x565, 0xf7, 0x6b80000000000, 0x5, 0x799, 0x0, 0x100, 0xcee, 0x4, 0x9, 0x7f, 0xffffffffffff0001, 0x2, 0x7, 0x1, 0x20, 0x0, 0x3, 0x7f1ee136, 0x80, 0x80000001, 0x1f, 0x0, 0x1, 0x9, 0x9, 0xfffffffffffffffa, 0x5, 0x7, 0x1, 0xdc2, 0xa9, 0x1, 0xede9, 0x8, 0x1ff, 0xfb9, 0x9, 0xa5, 0x80000000, 0x14eee2c2, 0x7f, 0x3, 0x1, 0x6, 0x8001, 0x2000, 0x7, 0x2e0, 0x6, 0x401, 0x80000001, 0x3, 0x6, 0x7f, 0x9, 0xd18, 0x100, 0x7, 0xd0cc, 0x0, 0x2e, 0x89f, 0x1, 0xb0f1, 0x800000000000, 0x6, 0x3ff, 0x8, 0xffffffff, 0x8, 0x3, 0x7f, 0x15de, 0x9, 0x6, 0x0, 0xff, 0x9, 0xff, 0x80, 0x7, 0x2e, 0x1, 0x6, 0x3f, 0x5, 0x400, 0x8, 0x100000000, 0x4, 0x20, 0x7, 0x100000000, 0x2, 0x2, 0x2, 0x1dea, 0x9, 0x3, 0x5e205dd5, 0x6, 0x59b, 0xfff, 0x0, 0xfffffffffffffffb, 0x9, 0x7, 0xc1e, 0x6f, 0x0, 0x6b92, 0x24d2], 0x7, [{[0x0, 0x3], @remote}, {[0x1000, 0x40], @dev={0xac, 0x14, 0x14, 0x1f}}, {[0x7ff, 0xffff], @rand_addr=0x7}, {[0xfffffffeffffffff, 0x9], @multicast2}, {[0x4, 0x6], @empty}, {[0x5b, 0x3], @local}, {[0xffffffffffffffc0, 0x80000001], @remote}]}, {[0x1, 0x1, 0x1f, 0x5f6e, 0x3f, 0x4, 0x1ff, 0x80, 0x500000, 0xfffffffffffffffa, 0x0, 0x1f, 0x9, 0x8, 0x1, 0x3ff, 0x2, 0x8001, 0x4, 0x5, 0x401, 0x8, 0x2, 0xc238, 0x1, 0x20000000000000, 0x1000, 0x1, 0x7f, 0x0, 0x8d1, 0x7, 0x434, 0x3f, 0xb9e5, 0x1, 0x2, 0x7, 0x100000000, 0x97a, 0x1, 0xa8, 0x9, 0x10001, 0x7f, 0x7ddf, 0x0, 0x4, 0x8, 0xf7a, 0x80000000, 0xffffffffffff0000, 0x0, 0x6, 0x3, 0x4, 0x2, 0x8, 0x4, 0x6, 0x7fffffff, 0x7, 0x7, 0xc8, 0x7fffffff, 0x56, 0xec05, 0xff, 0x7, 0x7, 0x2, 0x3, 0x3, 0x3, 0x9, 0x20, 0x78, 0x0, 0x0, 0x4, 0x20, 0x3f, 0x9, 0xfb21, 0x1, 0xfffffffffffffffb, 0xffffffffffffffbb, 0x800, 0x8, 0x0, 0x100000000, 0x8000, 0x3b, 0x1, 0x6, 0x3ff, 0x6, 0x40, 0x1, 0x1, 0x10001, 0x9, 0x20, 0x7, 0x7, 0x5, 0xb8, 0x7, 0x1847, 0x10000, 0x146c, 0x244, 0xe1731c6, 0xfffffffffffffffe, 0x637, 0x0, 0x6, 0x7ff, 0x7, 0x80, 0x2, 0x80, 0x0, 0x1, 0x401, 0x80, 0x1000, 0x43c, 0x81, 0x1000000000000, 0x7, 0x7ff, 0x0, 0x7, 0x8, 0x1, 0x4, 0x8, 0x40, 0x0, 0x1000, 0x1, 0xff, 0x2, 0x7ff, 0x9, 0x4c21, 0xfffffffffffffffb, 0x8, 0x0, 0x1, 0x4, 0x20, 0x2, 0x5, 0xfffffffffffffffb, 0x2, 0x6, 0x7, 0x2, 0x2, 0x0, 0x10001, 0x1, 0x4, 0x5, 0x4, 0x0, 0x9, 0x6, 0x20, 0x1f, 0xfffffffffffffff8, 0xfffffffffffff9ff, 0x0, 0xea, 0x4, 0x200, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x6, 0x80000000, 0x8, 0x8, 0x1f, 0x7611, 0x6, 0x7f, 0x4, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff8, 0x8, 0x79, 0x9b, 0x3, 0x2, 0x6, 0x185, 0x0, 0x1, 0x3ff, 0x80, 0xc10, 0x2, 0x33ac, 0x5, 0x6, 0x10001, 0x3ff, 0x0, 0x3, 0x9, 0x0, 0x3, 0x6, 0x4, 0xffffffffffffff9c, 0x9, 0x10001, 0x80000000, 0x5, 0x8, 0x5, 0x5, 0x8000, 0x0, 0x5, 0x9, 0x94fb, 0xb, 0x80000001, 0x6, 0xff, 0xffffffff, 0x800, 0x800, 0x4, 0x9, 0xe9e800000000000, 0x8, 0x1481, 0xff, 0x5, 0x8, 0x7, 0xfffffffffffff801, 0x2, 0x7fff, 0x1f, 0xfff, 0x334, 0x8, 0x1], 0xa, [{[0x80000000, 0x20], @rand_addr=0x1652}, {[0x4, 0x6], @loopback}, {[0x1, 0x10000], @empty}, {[0x0, 0x10000], @empty}, {[0xfffffffffffffffe, 0xffffffff], @broadcast}, {[0x2, 0x7], @dev={0xac, 0x14, 0x14, 0x29}}, {[0x8000, 0x8210], @multicast1}, {[0x8, 0x1], @dev={0xac, 0x14, 0x14, 0x2a}}, {[0x8, 0x1], @remote}, {[0x800000000000000, 0x7], @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xea4c, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xdd0) r2 = syz_open_dev$binder(0x0, 0x0, 0x40000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0xd, r3, 0x1, 0xac08, 0x6, @remote}, 0x14) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xed, 0x1, 0x2, "0b6b3a3796806ce3ed814be513706c24", "57922347a3b7ee2f929da24298025b0b9a84a7de15a5fd738a2a49ffeaf82cc423489ecffa4aa9be9e7caaf1b390b73b229ab91ebd0928607da56866fccdb4ea341c60fd2347bcace87bcaf2e94e53a332c20870fff5908e8024a0de11f4d84294723ce728d34a58306bbde1de0da0a397f9a9b99e602466da8e33c1bdc3c1548deb40451026091f33d1372283960c124f723158f5609615a3aa5c2eaa960224d1e4dbed9456a3581c16e02afe253bb8cc6e83598f4959725c77014fd7518e8d06ba0ce780295ac9b97ba72e9487e249ecb3aa97998ebbcf"}, 0xed, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$FICLONE(r0, 0x40049409, r0) 20:18:05 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x0) 20:18:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.599519] binder: 20028:20037 unknown command 1074029062 [ 476.614910] binder: 20028:20037 ioctl c0306201 200001c0 returned -22 20:18:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5, 0x7, 0x8, 0x100000000, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.668818] binder: 20043:20045 unknown command 0 [ 476.687575] binder: 20043:20045 ioctl c0306201 200001c0 returned -22 [ 476.691186] binder_alloc: binder_alloc_mmap_handler: 20029 20001000-20002000 already mapped failed -16 [ 476.709864] input: syz1 as /devices/virtual/input/input2499 20:18:05 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.716788] binder: 20043:20050 unknown command 0 [ 476.726630] binder: 20043:20050 ioctl c0306201 200001c0 returned -22 [ 476.733403] binder_alloc: binder_alloc_mmap_handler: 20029 20002000-20006000 already mapped failed -16 [ 476.749205] input: syz1 as /devices/virtual/input/input2500 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0xd67, 0x4, 0x0, 0x0, 0x2, 0x2}) 20:18:05 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x20) write$P9_RATTACH(r1, &(0x7f0000000200)={0x14, 0x69, 0x1, {0x80, 0x1, 0x8}}, 0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) write$binfmt_aout(r1, &(0x7f0000000340)={{0x10b, 0x5, 0x4, 0x29d, 0x3c1, 0x7000000000000, 0x177, 0x7}, "0fa490a1c3d006cf357c36", [[], []]}, 0x22b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 476.781534] binder: 20057:20058 BC_FREE_BUFFER u0000000000000000 no match [ 476.818500] input: syz1 as /devices/virtual/input/input2501 [ 476.842048] binder_alloc: binder_alloc_mmap_handler: 20064 20001000-20002000 already mapped failed -16 [ 476.853745] input: syz1 as /devices/virtual/input/input2502 [ 476.871980] binder: 20064:20066 ioctl 4b71 20000000 returned -22 [ 476.879858] binder_alloc: binder_alloc_mmap_handler: 20064 20001000-20002000 already mapped failed -16 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) fcntl$notify(r0, 0x402, 0x80000001) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x158, 0x158, 0x158, 0x158, 0x158, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, &(0x7f0000000000), {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffff00, 'ifb0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x5c, 0x3, 0x43}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x0, 0x5, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x24, 0x40, 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x7, 0x200, 0xe2, 'snmp_trap\x00', 'syz0\x00', 0x7fff}}}, {{@uncond, 0x0, 0x98, 0x100}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x5, 0x9, 'netbios-ns\x00', 'syz1\x00', 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 476.881836] binder: 20067:20071 BC_FREE_BUFFER u0000000000000000 no match [ 476.889729] binder: 20064:20073 ioctl 4b71 20000000 returned -22 [ 476.967503] binder_alloc: binder_alloc_mmap_handler: 20075 20001000-20002000 already mapped failed -16 [ 476.979042] binder_alloc: binder_alloc_mmap_handler: 20075 20001000-20002000 already mapped failed -16 [ 476.982416] input: syz1 as /devices/virtual/input/input2503 [ 477.006782] binder: 20067:20071 BC_FREE_BUFFER u0000000000000000 no match 20:18:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5, 0x7, 0x8, 0x100000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x204040, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x200, 0x3, 0x3}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) mkdir(&(0x7f0000000080)='./control\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x3fff) r4 = gettid() fcntl$setown(r3, 0x8, r4) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x21) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000962) mkdir(&(0x7f0000000140)='./control/file0\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:05 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r1) [ 477.009349] input: syz1 as /devices/virtual/input/input2504 20:18:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 477.064082] input: syz1 as /devices/virtual/input/input2505 [ 477.100489] binder_alloc: binder_alloc_mmap_handler: 20090 20001000-20002000 already mapped failed -16 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x498080, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e22, @multicast2}}}, 0x88) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/41) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000f2c09", @ANYRES64=0x0], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x5, 0x1f, 0x56}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x7, 0x400, 0x1, 0xffffffffffffffff, 0x11e4}, 0x0) 20:18:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='*[self\x00', 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x1024}, {r1, 0x1}, {r1, 0x2000}, {r0, 0x1000}, {r1, 0x2040}, {r0, 0x8}, {r1, 0x388d55abf1461332}, {r1, 0x40}, {r0, 0x10}], 0x9, &(0x7f0000000080), &(0x7f00000000c0)={0x9}, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="babae665", 0x4}, {&(0x7f0000000340)="e4f53d85c398dadaf2240d87cbb279a94068f23a191c3d52879264ef546ba8c83c4dc02d0835192b1ca71b02e49b6dd061070ee3ea2ec45d35b52b882a6b89ca655a26e7bcece495fe26e46493911c117399b338a306ee8727cfc2778d06c21ffaabac5b422aaa630ade991968e7e0611d24a80e660e03a414bdd5794f4ca35050ed54aeaf368f7f962c488088fea8f4d849dc03753018b8b67d5a2d5504a256351d2aa3e2038a87b834f6babb08f742890f7412c5f2d98d578978a1742b4cd18bda01dc9ae16eb95754d7f160b645aeb1af0cc2cd46ce97ce46a540d82d55ab0c", 0xe1}, {&(0x7f0000000280)="fc67f71238f3c6006e96cfac18b4ea9c4ba193ddf93b2c5af02376cb846bad5d6170f202d90ffa03d69940aa0c874aa1b0c4ed3e73879979783a1fb34b0fb16b43ec23652ce4fa8c904daa084ae26c3e67cf0c633b49b0c1a7bee0b3318a49e16cc7790254252c", 0x67}, {&(0x7f0000000440)="15aff68c6d92056e9d501d1760dcd85728b6db8114100b44fcf632e7670e404469acdcf55471b82f4fc1ae57ae7bfd2ff834570ee6315a7ee54229d1daa90a785bf514b04b3b81224065dff617d018ec3b4b5014951007cd3889b73f7a3e3db07cba9f3274f605ca2df718892ab2526f76250a5aefbe63eff656b7d628ad222805b542913fc7edb228a82c23d7f90abf4f38bf73d7d18c68a8de948e102642cc15a184892e5a243304ab8b0f4f87da67702d22b4dfb689995838e2cf10df2bf261c6b344340b981c5534a9cd49662540597dd5577fe3b78698", 0xd9}, {&(0x7f0000000540)="cb24fff80c24b50e7c769f851e47f7b01c84b86ce48571edf0454b3f432bf849e3ab3f89ae1fef75762fa3039f7dbd0e0b916ecebbf9a53311312bdf498f752b9f2b8f5101691ecdbc2d2c4997848897d7bc79e90ca6f99c225da7d25a6c68c95a93176b00593c65f1d1601edc1bf7555904149442c1503a97072865b83e8bc35aaa6134fdafe5034d3916f5545f5879b6", 0x91}], 0x5}, 0x7}, {{&(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23}, 0x0, 0x0, 0x2, 0x2}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)="215f5befbb662be4224bbfaf2c105eaebbbcdf81ca0a8fd2aafa3c96c7a4a96226b0c25b71850b78c3eda0b420cfec06d5ac8880beaa1c6aef0b2de2194c29851d663963d2a35154a31834c77579dd9698573bbeb18b1b8819fc395c893ce6df1d3c6624a4d3cfb554328a9cd3d79f9606788db712e22aaf79c780efd5c2f5181dbc160ea41865ae044c79cf39ff194faec3698224680a24f1578866db8a2cb43595b619", 0xa4}], 0x1}, 0x8001}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)="2943394dbdcd9c76c5b5d556eb9f33028aead931f914597d13eb8747bf88f74cafacac6bbabe46e67170dc8f842d9fc2926828a131e4c2d5b3aabedcee365af055bb8c06eed2c1123fe211b4ec45bb4c33ff043c18ac7d1a3a2dd89ed62df916a79fc27d33a632db8ba6d34509341d7a06f7b4552c552b93a0b8de87ea0894ad112e067ee07c0d8115af02d0607ac9696ca3af7e04b3a6b5d263b1f54989147067f528a263219aace14224678a468cf28cb53bb1191312d53f18000c7704d0c6307b0876bfa86bf4f5cbaf46d61e3723832d4e1e00d28c488e0bdb4ee133", 0xde}, {&(0x7f00000009c0)="d2ba5af546d8853896a6748507dcd4eea9634478ab27c970df2ddf99c4ca8b00160da75ab5eb613856df3f4db5bf0a9922e86c5feff87cc0552a01f6162e8403f408a7ed2740a21498741f1f7c02e05955a6498e17661841ddd9a6e918450ac3eca48e930245e1b1cea21336f34aee33160b", 0x72}], 0x2, &(0x7f0000000a80)=[{0xb8, 0x116, 0x6, "f04ae2e4088a51c3726e9a855255df72fae71d060f0aeac7e109c37c86e79ccf504b994267bd82229228abcc6bd76203592567d19cbed07a8ab3d4847774c0717d1e94264bf451b54ad731bfa1b1afb4f993b2b5d7ce737f49679e22a63195d65e9c86f2d178bdbc75fcefda5b7efc0f48891d1cbd968e9572c9a2543005813ba2128e5a30384dfc1266f4443e208585f8b48b0781d06e236f1d8fd16525102265edebe3c0ceb4"}, {0xb0, 0x1ff, 0x8000, "aa7b32558167b0e3965230df6e8361a3d84222e411997c6b39a50f7cdd894f6ed8e0ed419051d801f743878627d1b1dd0d2518441a4dd794f231eb6a3c29f5d12ad5f19b1e02e210c66471d274316c64c8933a6dc1dca0d45874429932da2313de1ce3cfd65ef6e145db4c2c21a79489c0ce50d13852e65301b3875f62b8743b734c8058d63de688bba232525814b16dbf6f80e2b96cc58871bd300ca47c22d0"}, {0xa8, 0x116, 0x6, "ceaac65c99552fe87e004f0bf03be32cda4e0fdc5651db1f27a3515c2dda77c56412a92076909cfd39a410aa21cb72b4aaceeaa745c10d5ee4de03ce7618ea8ec835f5eceedc2d6ba26b1b05b241f65cabb203af1b299cfcd3e189d21ee7b9bd575432c4fbe8a96052e6264a4c17f7bab58953639bd27fa3abcf6b721c75cb4c6c4a1feeb044aa631eb9737927f74d86fe205b74d135"}, {0xc8, 0x10d, 0x7, "fb766b53369c2be0c053d375e1225d7b247b6b971ad9c4b78cb62d1607a1cb6fa2c79c26e3ca01055d85e46fd21500c1de2c85774dde18d8346912162b8c3c1af892224e5d02cf7591610aa5dff9beafed20856f20780bb66ba7ad37d999980864205686602a5b90bbe4db8afe02257641a5ad7a9f653ad345e258ce6dc1cbc8aa9e5b7598b999a249367908fa464e27676ccf88472d5bcdb42fc47ea642e7741b4b083b6c0d01b09929da0036b99b3d7d2f889ea4b4"}, {0x98, 0x104, 0xd3, "10a0360dfa15ba905685c2f94337ba679cbce218a53feee859f0eda148fc3bf12b66f2f502b8f1a7e1d16761b3ecd2f143d379b8c57bd242289009f95c739721854960b5f5c40a4c53c96140cd3a9a4a7b579df4e1185e3542bb835978758d5b92ffcd3af21be79c9d50aa814147daec8051ec94bbabee46edd7bd70c958874805"}, {0xc0, 0x103, 0x1f, "1dbe278535bb171f87d8c110b064edb5a55d30816152f1d4e80c46232c834e0c320ddba296fb7a9a3e473e609243d16c43de72a2634c420360338ba57e353f226f7552280c57cfb10b0519fa20735f90b6e9807ac08181f6079cdbb06e9b890717ff1781c0c82b0caa05731c8aa18ad0cc874603d9c8dece8c32fc2e2da5be8700c276005d67f1122c21b90ced846039bea84a6488134d7e15dfe4ff927bbb6055f2cb26987128ff54e7"}, {0x58, 0x11f, 0x81, "dbd2ff5508259ad0a072fcb1c9a5931e71b11bfe248fcd0f763f475433ff84808fd37a142efee0bf2ed14cde9dea520fbac575ceae91fada309597f8da6462bf15ce0af7c878e3"}], 0x488}, 0x400}], 0x3, 0x0) 20:18:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 477.135267] input: syz1 as /devices/virtual/input/input2506 [ 477.157213] binder: 20105:20108 ioctl 5473 20000000 returned -22 [ 477.163763] binder: 20105:20108 unknown command 153882368 [ 477.169349] binder: 20105:20108 ioctl c0306201 200001c0 returned -22 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x93) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x400, 0x5, 0x7df, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5, 0x7, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:06 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom(r0, &(0x7f0000000000)=""/175, 0xaf, 0x0, &(0x7f00000000c0)=@l2={0x1f, 0x2, {0x1ff, 0x6, 0x0, 0x4, 0x7, 0x3}, 0x80000001, 0x2}, 0x80) r1 = dup(r0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0x10001, 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='veth0_to_hsr\x00') r2 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x40000000000000) [ 477.249186] input: syz1 as /devices/virtual/input/input2507 [ 477.257320] binder_alloc: binder_alloc_mmap_handler: 20115 20001000-20002000 already mapped failed -16 [ 477.269703] binder: 20120:20122 BC_FREE_BUFFER u0000000000000000 no match [ 477.282616] binder: 20120:20125 BC_FREE_BUFFER u0000000000000000 no match [ 477.283938] input: syz1 as /devices/virtual/input/input2508 20:18:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xfff, 0x5, 0x401, 0x7, 0x0, 0x1, 0x10310, 0x2, 0x3ff, 0x5, 0x8eb, 0x9, 0x4, 0xc6d4, 0x1, 0x8, 0x9, 0x9, 0x6, 0xffff, 0x6, 0xffffffff7fffffff, 0x10001, 0x5, 0x8000000000000, 0x100000001, 0x80000001, 0xfffffffffffff467, 0x8, 0xfffffffffffffffa, 0x3, 0x3, 0x0, 0xfa0, 0x5, 0x14, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x81}, 0x4020, 0x5, 0x2, 0x4, 0x2, 0x8, 0x1000}, r1, 0x8, r2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f0620840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x240, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 477.364145] binder: 20133:20134 unknown command 1074291440 [ 477.373635] binder: 20133:20134 ioctl c0306201 200001c0 returned -22 [ 477.386311] binder: 20133:20137 unknown command 1074291440 [ 477.400291] binder: 20133:20137 ioctl c0306201 200001c0 returned -22 20:18:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) [ 477.415251] input: syz1 as /devices/virtual/input/input2511 [ 477.455327] binder: 20148:20149 BC_FREE_BUFFER u0000000000000000 no match 20:18:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) time(&(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) [ 477.466528] binder: 20148:20151 BC_FREE_BUFFER u0000000000000000 no match [ 477.476468] input: syz1 as /devices/virtual/input/input2512 [ 477.503831] input: syz1 as /devices/virtual/input/input2513 20:18:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:06 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7f) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@remote, @empty, @local, 0x6, 0x80000000, 0x1, 0x100, 0x100, 0x1000000, r2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 477.529691] binder: 20157:20158 BC_FREE_BUFFER u0000000000000000 no match [ 477.539012] binder: 20157:20158 BC_FREE_BUFFER u0000000000000000 no match 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="eb62a840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) [ 477.574250] input: failed to attach handler leds to device input2512, error: -6 [ 477.593600] input: syz1 as /devices/virtual/input/input2514 20:18:06 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x100000000000000) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$void(r0, 0xc0045c79) [ 477.627927] binder: 20168:20169 unknown command 1084777195 [ 477.634750] binder: 20168:20169 ioctl c0306201 200001c0 returned -22 [ 477.643828] binder: 20168:20170 unknown command 1084777195 [ 477.649640] binder: 20168:20170 ioctl c0306201 200001c0 returned -22 [ 477.683858] binder: 20173:20175 BC_FREE_BUFFER u0000000000000000 no match [ 477.694252] binder: 20173:20175 ioctl c0045c79 0 returned -22 [ 477.695105] input: syz1 as /devices/virtual/input/input2515 [ 477.702469] binder: 20173:20177 BC_FREE_BUFFER u0000000000000000 no match [ 477.720406] binder: 20173:20175 ioctl c0045c79 0 returned -22 20:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0xffffffffffffff33, 0x0, 0x0}) 20:18:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x5}, [{0x2, 0x2, r2}, {0x2, 0x0, r3}], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x34, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(r4, r4, 0x80000) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x2) ioctl$GIO_SCRNMAP(r6, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xfffffffffffffffe) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) 20:18:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) [ 478.177948] binder: 20187:20193 BC_FREE_BUFFER u0000000000000000 no match [ 478.179411] input: syz1 as /devices/virtual/input/input2516 [ 478.192757] binder_alloc: binder_alloc_mmap_handler: 20190 20001000-20002000 already mapped failed -16 [ 478.203897] binder: 20187:20193 ioctl c0306201 20000000 returned -14 [ 478.204756] input: failed to attach handler leds to device input2516, error: -6 [ 478.218566] binder: 20187:20201 BC_FREE_BUFFER u0000000000000000 no match 20:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = dup(r0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000001340)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/188, 0xbc}], 0x5, &(0x7f00000013c0)=""/103, 0x67}, 0x40) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) sendto$inet6(r1, &(0x7f0000001480)="3551cf2df00f7a8e9729a94f88d48bbec2d93411", 0x14, 0x40, &(0x7f00000014c0)={0xa, 0x4e24, 0x20b2, @local, 0x3}, 0x1c) [ 478.223179] input: syz1 as /devices/virtual/input/input2518 [ 478.235230] input: syz1 as /devices/virtual/input/input2519 [ 478.260170] binder: 20187:20201 ioctl c0306201 20000000 returned -14 20:18:07 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="860e4277b89c6fb179bb9bc4ba250dca0bf583697e067efb0cc3f8b96468c5c86433a329ba9ea0193df397477f158e4f88236a3f2eac35d5d107cb2e1e6aa3e294ec83803b427c0612fcd1d24df1126f927bc9ac696089c34a7454ec49a86a0c69a7b9d80a98d18cd80974602801dc4217534425fe2c9217c6a44357766d25018c1a382bd33161bc9c2b9f453176929b8a4be01e02b812967dab426adf54b1b0edea27070e07d1137301e088bd8c74927d0b638a3cd322fe068c4640ce51b63ed59a66aa5f00d8ae08201e38f1", &(0x7f0000000200)="b85a6397231607b048c3fbcd1a1f02e63d9ef41fe227817353c3107eb8b553afc579e9b4a3ba9cd7c4a9fbbbfe3c001fa20ead5451259a514a87588006bff52f15511c59a68c7aa4b27e3c5b9431b3b0b738efd4bafbdce49e0e4e942b4f177ff0aabdd964c04d0d2caa4d9460608083"}, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x40020013, r0, 0x3) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 478.282727] binder_alloc: binder_alloc_mmap_handler: 20207 20001000-20002000 already mapped failed -16 [ 478.296426] input: syz1 as /devices/virtual/input/input2520 [ 478.311216] binder_alloc: binder_alloc_mmap_handler: 20207 20001000-20002000 already mapped failed -16 20:18:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80000, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @remote}, &(0x7f0000000080)=0x242) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1c, r2}) write$apparmor_current(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7065726d70726f667f7aa921405fc46c650002000000"], 0x16) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000240)="c44a369edf0ba6a7fcc3038f1882549c9aa4f9b955a8cfcff549a5db1aca2d214b56a64161ef16d4ea2dccab13fe89c9a12651627c6cb09f6189cbc081d00aacd28f529477bd74eeb6c8a69cccda9cea42729cf25420daf47f7d71ee") syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) memfd_create(&(0x7f0000000200)='/dev/full\x00', 0x7) ioctl$TCSBRK(r0, 0x5409, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xe5, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 20:18:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 478.382005] input: syz1 as /devices/virtual/input/input2521 20:18:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x0) getpeername$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) 20:18:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x80000) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000040)) [ 478.470025] input: failed to attach handler leds to device input2521, error: -6 [ 478.509748] input: syz1 as /devices/virtual/input/input2522 [ 478.537740] input: syz1 as /devices/virtual/input/input2523 [ 478.543165] binder: 20237:20239 BC_FREE_BUFFER u0000000000000000 no match [ 478.567809] binder_alloc: binder_alloc_mmap_handler: 20236 20001000-20002000 already mapped failed -16 [ 478.567990] binder: 20237:20243 BC_FREE_BUFFER u0000000000000000 no match 20:18:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 478.593283] input: syz1 as /devices/virtual/input/input2524 [ 478.608094] binder_alloc: binder_alloc_mmap_handler: 20236 20001000-20002000 already mapped failed -16 [ 478.620556] input: failed to attach handler leds to device input2522, error: -6 20:18:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x3f}, 0xff69) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2}, 0xf) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) lseek(r0, 0x0, 0x3) 20:18:07 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 478.712180] input: syz1 as /devices/virtual/input/input2525 [ 478.751360] binder: 20255:20261 BC_FREE_BUFFER u0000000000000000 no match 20:18:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4, 0xcf]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x800}) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 478.776184] input: syz1 as /devices/virtual/input/input2526 [ 478.826546] input: syz1 as /devices/virtual/input/input2527 [ 478.857743] input: syz1 as /devices/virtual/input/input2528 20:18:07 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000180)=0x2) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d198b321d216f91db8cf94b0e970f2da6739485d91ed036f73e9f50350c5db515e48023b2d77b347517128569580dd5864b5f61f83c7688520d976a95c2565f663fa446125ccc58706860ca3b46d0b3daa354aad504d55ae2093c1616cbe918fd443ed258a1a67dcb974bff6a3a05aff12e47bd6326d00f63a6500bb80c86ab1bbd49234077827c961c26aa572799c3bc35edc24eac16cb9dc44fd148b96fb3f66bb73e8284884607a56e236c1b0bdf62a296003300c22f393644f2189927d50675f2068ac8671086352ff5eef22b2a363a5e65ffa2f55f9101f4784a2768f535be801a4", @ANYRES64=0x0], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0xff, 0xffffffff, 0x80000000, 0xf6}, 0x10) [ 478.875174] binder: 20269:20273 ioctl 40305828 20000000 returned -22 20:18:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:07 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x7f, 0x7, 0x9, 0x4, 0x0, 0x7, 0x40, 0x5, 0x100, 0x5, 0x8, 0x10001, 0x9, 0xde, 0x7, 0x5, 0x6, 0x9, 0x3, 0x1, 0x7f, 0x3, 0x10000, 0x5, 0xb9, 0xfffffffffffffffd, 0x7ff, 0x7, 0x140000000000, 0x80, 0x1, 0x57f486ea, 0x888, 0x0, 0x9, 0x8, 0x0, 0x102, 0x0, @perf_config_ext={0x6249, 0xffffffffbba882ca}, 0x0, 0x9, 0x6, 0x4, 0x0, 0x800, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) [ 478.897852] binder_alloc: binder_alloc_mmap_handler: 20269 20001000-20002000 already mapped failed -16 [ 478.921282] binder: 20276:20277 unknown command 565418193 [ 478.932757] binder: 20269:20278 ioctl 40305828 20000000 returned -22 [ 478.940328] binder: 20276:20277 ioctl c0306201 200001c0 returned -22 [ 479.002075] input: failed to attach handler leds to device input2527, error: -6 [ 479.012307] input: syz1 as /devices/virtual/input/input2529 [ 479.016517] binder: 20276:20277 unknown command 565418193 [ 479.020734] binder_alloc: binder_alloc_mmap_handler: 20282 20001000-20002000 already mapped failed -16 [ 479.026038] binder: 20276:20277 ioctl c0306201 200001c0 returned -22 20:18:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 479.081699] input: syz1 as /devices/virtual/input/input2530 20:18:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd5f4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x276}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa2e4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4048080}, 0x20008000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$P9_RWRITE(r2, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x8}, 0xb) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x7f1, 0x9, 0x9, 0x2a3e}, {0x2, 0x7f, 0x3, 0x4}, {0x9, 0xfffffffffffffffd, 0x84, 0x400000}]}, 0x10) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)=r3) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x800000100000, 0x80, 0x4, 0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x2, 0x0, 0xffffffff}) 20:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f630c4004000000000000000000000011634840010000000000000004000000000000000000000000000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000068000000000000000001000000000000"], @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0xbf, 0x0, &(0x7f0000000340)="56e274020c247760e270daee40097899359813f9b1088f5502d5509f7a6464c3a3cf8fddec770b2227f148282a0edc2332c26394b25d3966b9bc28144ec423bee85108fbbb9a9e733d8edce5a1fdd0d02bda80b2c55110cfe582f14dc465a2d02ad551395e247c7aff9088e0c01811ba5465cd75376b69cbe0cd11287ed4f8c8dcfdcf235a025e7cbb7f75b0dfc535178ecde136b3d6dc6f389eb142659eec67f69f8c1f9ea02de37daa730a605e71997972c613d53bff8d3e2013a3274c21"}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x9) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f00000002c0)=0x44ca6e83, 0x4) accept4(0xffffffffffffff9c, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000400)) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'\x01\xf0\xff\xff\x00'}, &(0x7f0000000140)=0xffffffffffffff01) [ 479.166485] input: syz1 as /devices/virtual/input/input2531 20:18:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="15f45328588be0deb9e6557da9eb4f3ec0f086f8a9262e1ce0118e95ce75faa4c3f1d0d86db6758d966ebcf681fd5b335d3f0720849e76c3e6549db861618e6b079f4e8a8f81839dea194fa4d609e10000000000000000", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 479.208803] binder: 20297:20304 BC_FREE_BUFFER u0000000000000000 no match [ 479.224982] input: syz1 as /devices/virtual/input/input2532 [ 479.242402] input: syz1 as /devices/virtual/input/input2533 20:18:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9, 0x36493544]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 479.277680] binder_alloc: binder_alloc_mmap_handler: 20303 20001000-20002000 already mapped failed -16 [ 479.296036] input: failed to attach handler leds to device input2533, error: -6 [ 479.333819] binder: 20312:20316 unknown command 676590613 [ 479.353970] binder: 20303:20317 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 479.361207] input: syz1 as /devices/virtual/input/input2534 [ 479.364763] binder: 20312:20316 ioctl c0306201 200001c0 returned -22 [ 479.375742] input: syz1 as /devices/virtual/input/input2535 20:18:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x84, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f3265f3c13751ffb35eb679e3a1458abcf215b1d1a139e39a56f9e7bd48d986bc91b6402c6ec1e206995ba1c4fd1d50ca5f3004d17097f379129c9026ad000e37236c0810be05c28466219d886beae91efb68b3b7309fa913000209f4aaffa6ec3b723fe9a20ed6ef65c3e550b81afbfc588bdb8dde24ce745b4a477", @ANYPTR64], 0xffffffffffffff97, 0x0, 0x0}) [ 479.387499] binder: 20303:20317 got transaction to invalid handle [ 479.403650] binder: 20303:20317 transaction failed 29201/-22, size 0-24 line 3118 [ 479.423675] binder_alloc: binder_alloc_mmap_handler: 20303 20001000-20002000 already mapped failed -16 20:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x63, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/215, 0xd7) 20:18:08 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x10000000) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 479.448838] binder: 20303:20307 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 479.469175] binder: 20303:20307 got transaction to invalid handle 20:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) fcntl$dupfd(r0, 0x406, r2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 479.499031] binder: 20303:20307 transaction failed 29201/-22, size 0-24 line 3118 [ 479.514523] input: syz1 as /devices/virtual/input/input2538 [ 479.529699] binder: 20335:20338 BC_FREE_BUFFER u0000000000000000 no match 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 479.568471] binder: 20335:20344 BC_FREE_BUFFER u0000000000000000 no match [ 479.587132] input: syz1 as /devices/virtual/input/input2539 20:18:08 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x200) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x2) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:08 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = dup(0xffffffffffffff9c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0xbc8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x9, 0xfffffffffffffffa}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x100000001}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, r1, 0x0, 0xd, &(0x7f0000000040)='/dev/binder#\x00', r2}, 0x30) r3 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r3, 0x0) 20:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 479.657138] binder: 20354:20357 BC_FREE_BUFFER u0000000000000000 no match [ 479.670771] input: syz1 as /devices/virtual/input/input2541 [ 479.688324] binder: 20354:20363 BC_FREE_BUFFER u0000000000000000 no match [ 479.701874] input: syz1 as /devices/virtual/input/input2543 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_setup(0x3f, &(0x7f0000000100)=0x0) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000140)="a26a221db5634f8f3668b04a443a1da0d2bc558908af989b9ba2c4ef80a4fd6099bf573b7e88b8f397ca", 0x2a, 0x1, 0x0, 0x1, r1}, &(0x7f00000001c0)) fcntl$getflags(r0, 0x40b) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='wlan0:eth1ppp0mime_type\x00') mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x80000000, 0x10, r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x89, @dev={0xfe, 0x80, [], 0x25}, 0x2}}, 0x0, 0x0, 0x0, "593fd36bea656bf0c071ba67c06e5ebcd910806363abff9ee34f3815cc2d43891e4f965595bee53eb0d3d9660448d844375df5fc7cf7eea565d5771bd9aa6a8c5919c3c42a7783ea29a5852f2ed1c994"}, 0xd8) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x38, 0x1, 0x8) 20:18:08 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040040000000000000000000000110000000000000000000000000000000000000020000000000000004271f9b534f5ed62420b62fd6ca54f4dd480ec80dc0273069576105051d6", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0xfffffffffffffefa, 0x803) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) 20:18:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x688b8e15b136cda1, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 20:18:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) fcntl$dupfd(r0, 0x406, r2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x581200, 0xc0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x401, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 479.839547] binder: 20376:20383 got transaction to invalid handle [ 479.854349] input: syz1 as /devices/virtual/input/input2545 [ 479.854636] input: syz1 as /devices/virtual/input/input2547 [ 479.884915] binder: 20376:20383 transaction failed 29201/-22, size 32-7128623391937491266 line 3118 [ 479.885983] binder_alloc: binder_alloc_mmap_handler: 20386 20001000-20002000 already mapped failed -16 [ 479.901033] input: syz1 as /devices/virtual/input/input2548 [ 479.917158] binder_alloc: binder_alloc_mmap_handler: 20386 20001000-20002000 already mapped failed -16 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) fchdir(r0) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000340)=""/137) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="eb70b97e4845e64a19160000", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 479.955678] binder: undelivered TRANSACTION_ERROR: 29201 [ 479.966247] binder: 20376:20383 got transaction to invalid handle [ 479.971039] input: syz1 as /devices/virtual/input/input2549 [ 479.973495] binder: 20376:20383 transaction failed 29201/-22, size 32-7128623391937491266 line 3118 [ 479.989053] binder: undelivered TRANSACTION_ERROR: 29201 [ 480.026210] binder_alloc: binder_alloc_mmap_handler: 20398 20001000-20002000 already mapped failed -16 [ 480.043235] input: syz1 as /devices/virtual/input/input2550 [ 480.049852] audit: type=1400 audit(1556741888.931:50): avc: denied { map } for pid=20402 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir permissive=1 20:18:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x810, r0, 0x2000000) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x8) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x5e, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'ovf\x00', 0x9, 0x7, 0x4b}, {@empty, 0x4e21, 0x2001, 0x0, 0x2, 0x8}}, 0x44) 20:18:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xfffffd57, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840c459989215d0b615052e841c1a72a69c94bcb4b25c67dad6010bf4a747a75b1687f8dc1961b7200d0346c99f50ee945f0a7c02d6d7e4a4757ca63c3c208f20d65ce62101af70d55c856bac05ae2abea6df7a246b58d5c9bc1675b8392122a4171c45827de49f41ff657e4668a84df808188bba7d2382765f2eee348f12cc95ed0e798ebb78a032e036bbe07a9988af5c551b2e414f9bb9c51f59ec7830b500450c98663d542ae1bd1c350044789bc3704d9a21ca1ae7dca866f6e975861c2b505c5e15956d0a7f7d4a75", @ANYRES16=r0], 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x3ffffffe, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002680)='/dev/zero\x00', 0x400480, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000026c0)=0x1, 0x4) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x2, 0x100010, r1, 0x0) 20:18:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) fcntl$dupfd(r0, 0x406, r2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 480.050145] binder: 20402:20405 unknown command 2126082283 [ 480.079408] binder: 20402:20405 ioctl c0306201 200001c0 returned -22 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 480.135153] binder: 20413:20417 BC_FREE_BUFFER u15b6d015929859c4 no match [ 480.144738] binder: 20413:20417 unknown command 478424581 [ 480.152290] binder: 20413:20417 ioctl c0306201 200001c0 returned -22 [ 480.156439] input: syz1 as /devices/virtual/input/input2551 [ 480.165750] binder: 20413:20421 BC_FREE_BUFFER u15b6d015929859c4 no match [ 480.178859] binder: 20413:20421 unknown command 478424581 20:18:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd5f4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x276}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa2e4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4048080}, 0x20008000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 0: syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x202, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000180)={0x7, 0x2}) munlock(&(0x7f0000ff5000/0x8000)=nil, 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x2, 0x3, 0x8000}}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x402000, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x3fe1e2460b305fc3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x4000)=nil) 20:18:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b, 0x82]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 480.201839] binder: 20413:20421 ioctl c0306201 200001c0 returned -22 [ 480.206010] binder_alloc: binder_alloc_mmap_handler: 20423 20001000-20002000 already mapped failed -16 [ 480.222849] binder_alloc: binder_alloc_mmap_handler: 20423 20001000-20002000 already mapped failed -16 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x1}, @register_looper, @reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000080)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x3, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x1, 0x4, 0x24}], &(0x7f0000000100)=[0x38, 0x48]}}, @enter_looper], 0x84, 0x0, &(0x7f00000001c0)="0b1552286c0f2a138aaea63b3bba80b4820c69d3cc8005cd0fe2af3cb7580d912f9fd5bde6c8aa242c1a08b68ef86436be565f85b01653fa7746b7b045746dd397a35b028aeb6023bcf4ef6aa97d4cfa16804278844b43b52e9b87f9cc9a29b4d227724191b983afc8d4851b603f9c16beb368de08a289429bc914db7fa914a645d3e50d"}) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 480.285194] binder: 20434:20435 BC_FREE_BUFFER u0000000000000000 no match [ 480.302664] input: syz1 as /devices/virtual/input/input2552 [ 480.315814] binder: 20434:20437 BC_FREE_BUFFER u0000000000000000 no match [ 480.320383] binder: 20438:20440 Acquire 1 refcount change on invalid ref 1 ret -22 20:18:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03632840", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 480.324217] input: syz1 as /devices/virtual/input/input2553 [ 480.346574] binder: 20438:20440 ERROR: BC_REGISTER_LOOPER called without request [ 480.357941] binder: 20438:20440 got reply transaction with no transaction stack [ 480.366877] binder_alloc: binder_alloc_mmap_handler: 20438 20001000-20002000 already mapped failed -16 [ 480.373716] binder: 20438:20440 transaction failed 29201/-71, size 80-16 line 3026 [ 480.393376] binder: 20438:20445 Acquire 1 refcount change on invalid ref 1 ret -22 [ 480.402470] binder: 20438:20445 ERROR: BC_REGISTER_LOOPER called without request [ 480.411245] binder: 20446:20449 unknown command 1076388611 [ 480.415107] input: syz1 as /devices/virtual/input/input2555 [ 480.417583] binder: 20446:20449 ioctl c0306201 200001c0 returned -22 20:18:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x10) 20:18:09 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x3) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 480.441537] binder: 20438:20445 got reply transaction with no transaction stack [ 480.454655] binder: 20438:20445 transaction failed 29201/-71, size 80-16 line 3026 [ 480.462653] binder: 20446:20452 unknown command 1076388611 [ 480.468305] binder: 20446:20452 ioctl c0306201 200001c0 returned -22 [ 480.478921] input: syz1 as /devices/virtual/input/input2556 20:18:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x581200, 0xc0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x401, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, &(0x7f0000000040)={0x43, 0x9, 0x1, {0xd01, 0x4, 0x2206, 0x1, 0xa900, 0xffff, 0x80000000, 0x6, 0x4}}, 0x43) r2 = dup(r0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000000)={0x80, 0x8e25}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff, 0x9b]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 480.529774] binder: 20460:20462 BC_FREE_BUFFER u0000000000000000 no match [ 480.568705] binder: 20460:20466 BC_FREE_BUFFER u0000000000000000 no match 20:18:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x803) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r2 = signalfd(r0, &(0x7f0000000000)={0x5}, 0x8) r3 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r1, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x3d) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)={0x0}) r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x130, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)=[@fda={0x66646185, 0x7, 0x2, 0xa}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @flat={0x736a2a85, 0x10b, r3}], &(0x7f0000000100)=[0x78, 0x0, 0x38]}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000280)=[@ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x40}, @flat={0x776a2a85, 0x101, r4, 0x3}], &(0x7f00000002c0)=[0x20, 0x28]}}, @increfs_done={0x40106308, r5, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x4}, @fda={0x66646185, 0x6, 0x0, 0x13}, @fda={0x66646185, 0x0, 0x2}], &(0x7f00000003c0)=[0x48, 0x0, 0x18]}}, @acquire_done={0x40106309, r6, 0x1}, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, r7}, @clear_death={0x400c630f, 0x3, 0x2}, @increfs={0x40046304, 0x2}], 0x3f, 0x0, &(0x7f0000000580)="e7af868269d346b3d8608145e62831ddd485aa6cdb03ebb3f3531f9090cbb8e3fae811f5137f480834c4c82be825c5ce94dd0acc7ac77515d0e89509b48927"}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000080)) [ 480.600162] binder: 20468:20472 ioctl 40101283 20000000 returned -22 [ 480.614983] binder_alloc: binder_alloc_mmap_handler: 20468 20001000-20002000 already mapped failed -16 [ 480.621704] input: syz1 as /devices/virtual/input/input2557 [ 480.625146] input: syz1 as /devices/virtual/input/input2558 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 480.650189] binder: 20468:20477 ioctl 40101283 20000000 returned -22 [ 480.664627] binder_alloc: binder_alloc_mmap_handler: 20468 20001000-20002000 already mapped failed -16 [ 480.666367] binder: 20478:20479 BC_FREE_BUFFER u0000000000000000 no match 20:18:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x0, 0x3ff, 0x2, 0x0, 0x5, 0x80, 0x5, 0x101, 0x100000001, 0x5, 0x0, 0xa1e7658, 0x6, 0x40, 0x7, 0x6, 0x7f, 0x6, 0xfffffffffffffbd3, 0x0, 0x7, 0x366c00000, 0x4, 0x0, 0x1ff, 0x3, 0x4, 0x3c43, 0xfff, 0x3, 0x5, 0xc6, 0x9, 0xa, 0x7, 0x0, 0x100000001, 0x4, @perf_config_ext={0x7, 0x100}, 0x2000, 0x3, 0x0, 0x8, 0x10001, 0x4, 0x1}, r1, 0x9, 0xffffffffffffffff, 0x8) r2 = dup2(r0, r0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/174) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='ory.c\xf5\xf6\x14O\x8e[rrenv\x00\x00\x00\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)="29f897d51d67d4f6"}) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000100)=0x9, 0x4) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 20:18:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 480.703204] binder_alloc: binder_alloc_mmap_handler: 20482 20001000-20002000 already mapped failed -16 [ 480.721754] binder_alloc: binder_alloc_mmap_handler: 20482 20001000-20002000 already mapped failed -16 [ 480.742843] input: syz1 as /devices/virtual/input/input2560 20:18:09 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0xf, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x78) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1a}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff, 0x3ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(r0) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20048014}, {&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)="298411d51ab529ca05bf0685d0808c16fdc84036784b9d6b301da2d94c22d59d8357e76467141d62c26643a62f7fefbe5b885dad5b028621d335c1d26705b3d10004e4bfdf8b53de89dec77530a45551294198658de49587254b6582470f045efe79a76b7954309d990259804b6efd791c4430ec6837fb70bc8ecf8fd77397a3e0c2c0be0ddefef4c803e54bf1526dbe26b65e78d63c8ebd11cdbe3ab2d6438410c2016eb7968af8bd0bb559220b05b7781bb44c526580cddcf320392ccc767cb44b2dc897293036adc42d670858fe901f888e365cf7e749d995a62e3be836f946596af87607b59e2c0d55cc37109f7706568b03de", 0xf5}, {&(0x7f0000001340)="922427a40a32126ff1e56fdcca18fadd27eb3a27032a70ee2611d5bcb9730899a9c59ee1b66f3398797501ce31a4e361766e6a0808b85fea26c5a640c420941c258a651dda7834f3421a0c032d2a521854f927ac471fc92459cc018ddcca97d105af17d1cfe726c8c355d2a70fdd9e3c5146ce0579b2e2d3ecd7bf8939785f2a95c5d59cb188e4f2870e6a192fa6c35f08f7cf4508e8db5387fd8bc30663726f8ca486ff2b9164fce9645a08b2a5dd0fd2543c487783f65b4d0cec3b9043103842dca1", 0xc3}, {&(0x7f0000001440)="1b86ac7437b823085f7c6ebdb9dbbeb1737785012e999dbebca82588c008badbd498cb4f188773556092bed92db867a77b96662cd5a40e258a534287ab402c51efa570c858a34415921a1cefc48ef7ac7f6c52914c64f1dd37eb483bdf44e02e9368928766e39621c8cc036f8c73ff9159061da0edf75d3eccb6cfbf85aad08cc500cf68753c413dd0951a869f3d01c00b1e57abff6c2e5a546d904c8c2cb49214f2a86ba11c4305949d910c34e7515bfd2491038c4af2ad48cf59f31f1a284f4f652ad33c279e57db2291d86b051ca047407ae5bbc51cb5c89694c9ca374b", 0xdf}], 0x3, 0x0, 0x0, 0x4000000}], 0x2, 0x40) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001540)={0x0, {{0xa, 0x4e20, 0x96f, @ipv4={[], [], @remote}, 0x1}}}, 0x88) [ 480.846302] binder: 20496:20500 unknown command 0 [ 480.850373] input: syz1 as /devices/virtual/input/input2561 [ 480.863716] binder: 20496:20500 ioctl c0306201 200001c0 returned -22 [ 480.886789] input: syz1 as /devices/virtual/input/input2562 [ 480.893407] binder: 20496:20506 unknown command 0 [ 480.898952] binder_alloc: binder_alloc_mmap_handler: 20508 20001000-20002000 already mapped failed -16 [ 480.911904] binder_alloc: binder_alloc_mmap_handler: 20508 20001000-20002000 already mapped failed -16 [ 480.915858] binder: 20496:20506 ioctl c0306201 200001c0 returned -22 20:18:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x0, 0x3ff, 0x2, 0x0, 0x5, 0x80, 0x5, 0x101, 0x100000001, 0x5, 0x0, 0xa1e7658, 0x6, 0x40, 0x7, 0x6, 0x7f, 0x6, 0xfffffffffffffbd3, 0x0, 0x7, 0x366c00000, 0x4, 0x0, 0x1ff, 0x3, 0x4, 0x3c43, 0xfff, 0x3, 0x5, 0xc6, 0x9, 0xa, 0x7, 0x0, 0x100000001, 0x4, @perf_config_ext={0x7, 0x100}, 0x2000, 0x3, 0x0, 0x8, 0x10001, 0x4, 0x1}, r1, 0x9, 0xffffffffffffffff, 0x8) r2 = dup2(r0, r0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000180)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/174) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x2, {0x2, 0x4e24, @local}, 'bond_slave_1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:09 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4002, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0xc4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffd59, 0x0, &(0x7f0000000580)=[@free_buffer], 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="a0895d7200b20e75baa2f81cbfacbb64d00200b98ad3fe2154c0650f7f4c9be185b5e9890c0d115819184c2af4b8ad2daf63ccd52649164a86d75b468354c047671f30187cba1400f980a5f53f9a419adb116a9e02fe2eb98ad08c1f74bf011b76d1cdd07751c717eb00767c1623470be2166162755d84c0c1868c83478b9ad42b2a35f09fa72801fd01b6d3fda26aa5e862f5076bdf9280e13c2213bb155ec6f80ebb9fd7729f310efbec0e01de19841c7fb11a9b021e1d7c1998f59f", 0xbd, 0xfffffffffffffffc) r4 = request_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='cgroup/user\\-,&wlan0-bdev\x00', 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r4) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000540)) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x7, 0x4) 20:18:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 481.061253] input: syz1 as /devices/virtual/input/input2564 [ 481.075388] input: syz1 as /devices/virtual/input/input2565 20:18:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79, 0x7ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_execute_func(&(0x7f00000001c0)="a84a2ae92c211c420f05bf03000000c4a37bf0c55c41e2e92e363e460f1a7000660fde978fe97c80d1e3e30b014cb8c4014e4e0b5b5b14dee509c421045f4607c4228dbf50e35b70c4c4827958cac4a3bd4877f88ac483397fd300400f01c210f138f653afaf6766f2ab440fec3facacc4c3214cb9a5604b19c201b00b000000f08171a30b8a826e670f542c3d271c00006311660f383be68f0272d25d78ebeb628f680864360fe25800218de3c0f52641802d08000000fa49c45c450f918fffefffffbedcdca1c9fbc462dd3fe566474f383a656465420f6bd9a29fb7e2") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.158064] binder: 20537:20540 BC_FREE_BUFFER u0000000000000000 no match [ 481.167576] binder_alloc: binder_alloc_mmap_handler: 20536 20001000-20002000 already mapped failed -16 [ 481.179234] input: syz1 as /devices/virtual/input/input2567 [ 481.200401] input: syz1 as /devices/virtual/input/input2566 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) close(r0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 481.230052] binder_alloc: binder_alloc_mmap_handler: 20536 20001000-20002000 already mapped failed -16 [ 481.261644] binder: 20552:20554 ioctl 80087601 20000000 returned -22 20:18:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x2, {0x2, 0x4e24, @local}, 'bond_slave_1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.275365] binder: 20552:20554 BC_FREE_BUFFER u0000000000000000 no match [ 481.284342] binder: 20552:20557 ioctl 80087601 20000000 returned -22 [ 481.304263] binder: 20552:20554 BC_FREE_BUFFER u0000000000000000 no match 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="036308404c7cbea3b1f369c11d6a8c5cd743b26e274674b06e1307f4c07ab25671a0f428b321f166096ac408ca2084f449105cabf62a54e7ca0ff7adaef27ffa6ef60ddb404b1a", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4, 0x79]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.326401] input: syz1 as /devices/virtual/input/input2569 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000200)=""/132, &(0x7f00000002c0)=0x84) mkdir(&(0x7f0000001780)='./file0\x00', 0x3a) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1408, 0x37, 0x430, 0x70bd2c, 0x25dfdbfd, {0x1f}, [@nested={0x134, 0x81, [@typed={0x74, 0x87, @binary="ccb5988809dea10d553e18c88e874c34f805896feb3659f3174444dc5e691be82aa46b07877e49763c9fc984bd53e14d77449aefdbaa6f591b870d5adf72684265a186a079a208bb1d09ba107d4fda1654afbc0f05c601fc12460e491349de11ce11320501470e2f5820e1e85994"}, @generic="7f274e60042a911fc4c0a26c1c9e211d06457bdb6f10ab32edb2f50dfb82ee5e13079f84923d97cd572c854b8f7958663ef7221ef5f421919355ce77444022da845c6cc6b5cbf86b342bad70a78e6ef2b09a62255966c36741a8d0c517613cb1ea1612d69ba95b07744d285e5a7c702b9080233802e834b89cbaa0c4f75b1fac337c9e7d34802d3c3be8fa7b4d4bb6fe220850ec99afec8841d8b44f020a802a3cb964df644af6348b3f7b83d0b2", @generic="368573b1be2377407dc03429"]}, @nested={0x28, 0x17, [@typed={0xc, 0x4e, @u64=0x7ff}, @generic, @typed={0x14, 0x7c, @str='/dev/binder#\x00'}, @typed={0x4, 0x86}]}, @typed={0x14, 0x28, @str='/dev/binder#\x00'}, @generic="2bd9cfbff068e3f045ad5b40a8633f4c2994bfb9", @nested={0x64, 0x2e, [@typed={0x4c, 0x3b, @binary="70eec28a20d928641f3291632d9ee8e6ba89cedd80d5ac982512cfd190e8d374e3ffbac17d9f95f7aa4f3f669aa8dfcc70e8478c0c460f740d6c19d178b613fb6bfc9294b31308"}, @typed={0x14, 0x4d, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @generic="12f9752f581e1bdfd70368f40d3475b9e21daa07a187dcb245784c12750ab05024d6eff91c22c6577611a7f835be68c28ed5522ff98f62fa60eedb5dce02a1d54d948db814c4dc38ca3354fe786c3830682cdb3869746663225fa1e1b5d68e2e4956884a", @nested={0xc, 0x3b, [@typed={0x8, 0x38, @u32=0x40}]}, @generic="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", @generic="a401c12f42cf50c5dcd6e12bca375028fe527b079946d03fddc12018ed914d2c2b881b8eb703c23cd650bcf7ad7fa65b7466c783885e4c29a66d0e4d4a95691c3f6c4264fa6fc6ea0718850c3c8ed87aa3f85e3282fe705d082ace7f52e45d153ce3f67b1b3b7ccbe8f7baa9919076d5df950832f9748ac2676d0e2120b4f1034e3b6e849cdb7cbe930088cab3da6527088e3a3389fe7089c95b5645d94e8ee2b3c77e83e19452ba431d5e1750501e9b2df710471028686f4acdad171a9b55ad8932b0471ef536bf9ae4b9a61d03ed9f720993e526fef9a4d87b9283e786fbadf77dab2638a3341889dc5db7610e", @generic="e03452fd54f53fc5dd8a64bd258efaf61c01759955cdd65b6ea7c8abc784b72c4237a9484f2d485223f6a6368779e0abfa8146e9f1f6c27557f199d7c2181be401d5dc75fd25056b1d9ac91e27a54d536e72a2ac3fe327d98e8da1b7002f4944e4f91739078affb29e04bca0f40413c31da6e8117a27ac580f8eb20367f79008194039577a9e97907fd1a915235962bee16f0db7f90d8e1d5e17f81200431afddeda1fe979263531edb04f"]}, 0x1408}, 0x1, 0x0, 0x0, 0x40}, 0x841) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000000, 0x20011, r0, 0xfffffffffffffffd) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0xfffffffffffffffe) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 20:18:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.399517] input: syz1 as /devices/virtual/input/input2570 [ 481.432683] binder: 20569:20573 BC_FREE_BUFFER uc169f3b1a3be7c4c no match [ 481.434726] binder: 20568:20575 ioctl 41009432 20000000 returned -22 20:18:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000001340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002cbd7000fe4a8496a1df2db5f9dbdff328ba50af661f1c4dac3400004e22000008000500e0f0120f1e2e7bda637b0aba89fd5771000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) rt_sigtimedwait(&(0x7f00000000c0), &(0x7f0000001400), &(0x7f0000001480)={0x0, 0x989680}, 0x8) clone(0x2000000, &(0x7f0000000180)="43bc8afde66f04146c1ce3fa98f9313a9320e79ed61563b613e342c2b348d2f0d5d312bef57a6fdc7e4660811005f2bafee06bd7220e1c44396437c0eec9602f583d3d46f5e28578f6f9055286c74dfd51bb5c8764c1b641543021a2b52d3373f2f04deab4988349b746581cf11702aa33fc73c1abdfe9fae4f561c62dc320db2ac088e6c896f0bfadba75d5e392e6182f4dce879cb67d77be15d59a44d49bad11552337cdd3092e1ba81505e7cb9060cc40e0c82098bdb7aafcce98a6c05895f6391b1682af5c8b14d31f89cc3a00566dd1c9fde7860e3125a42e5c5f", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)="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") ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000001380)=""/94) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 481.453016] binder: 20569:20579 BC_FREE_BUFFER uc169f3b1a3be7c4c no match [ 481.479233] input: syz1 as /devices/virtual/input/input2572 [ 481.481466] input: syz1 as /devices/virtual/input/input2573 20:18:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {0xffffffffffffff28, 0x6, 0x0, 0x80}, 0x3c, [0xa93, 0x6, 0x8, 0x7, 0x1, 0x6, 0xffffffff, 0x6, 0x8, 0x2, 0x1, 0x4, 0x1ff, 0xae, 0xfffffffffffffbff, 0xffffffff, 0x1ab2, 0x9, 0x9, 0x40, 0x0, 0x1400000000000, 0x800, 0x91c5, 0x4, 0x10000, 0x9, 0x2911ea80, 0xf98, 0x2, 0xfffffffffffffffe, 0x4533, 0xff, 0x3, 0x80000001, 0x80000000, 0x7, 0x4, 0x100000000, 0x100, 0x3, 0x0, 0x7fffffff, 0x8, 0x2d5, 0x6, 0x400, 0x20, 0x8, 0x7ee6, 0x5ef0, 0x0, 0x0, 0x4658, 0x100000000, 0x4, 0xe3, 0x80200000, 0x401, 0xffffffff, 0x8, 0x6, 0xd1, 0x5], [0xfffffffffffffffb, 0x7ed, 0xfffffffffffffffa, 0xffffffff, 0x6, 0x40, 0x0, 0x8, 0x8, 0x4, 0x6, 0x3, 0x2, 0x7, 0x7, 0x5, 0x4cd4, 0x2, 0x9, 0xf5f, 0x0, 0x800, 0x100, 0x1, 0x6, 0xc01, 0x5, 0x0, 0x4, 0x9, 0x2, 0x100000000, 0x1, 0x9, 0x200, 0x9, 0x5, 0x45d8, 0x400, 0x6, 0x1, 0x538, 0x1f, 0x3, 0x3, 0x8, 0x1, 0x7, 0x7, 0x0, 0x5, 0xffffffffffffee06, 0x7, 0x6, 0x6, 0x0, 0x0, 0x400, 0x8, 0x1, 0x0, 0x8001, 0x378, 0x10000], [0x33, 0x10000, 0x7, 0x0, 0x29f, 0x5, 0x7ff, 0x0, 0xffffffff80000000, 0x0, 0x3f, 0x9, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0x33128b5f, 0x30, 0x1, 0x18, 0xf3a7, 0xcc, 0x7e80, 0x4, 0x5, 0x3, 0x4, 0x7ff, 0x1ff, 0xffffffffffffffff, 0x5, 0xfff, 0x7, 0x8, 0x7c87, 0x45, 0x1, 0x5, 0x7fffffff, 0x10000, 0x400, 0x2, 0xf10b, 0x5, 0x8001, 0x3d, 0x1000, 0x2d0680000000000, 0x80000001, 0x7, 0x3ff, 0x4, 0x100, 0x6, 0x5, 0x9a, 0x3, 0x5, 0x100000000, 0xfffffffffffff000, 0xfb1, 0x2, 0x81], [0x5, 0x1, 0x9, 0x0, 0x2, 0x5, 0x8001, 0xb0, 0x71, 0x8, 0x3, 0xd290, 0x5ce9, 0x234d, 0x1, 0x8648, 0x3, 0x0, 0x81, 0x6, 0x589, 0xffff, 0x100000001, 0x9, 0x9, 0xa0, 0x7, 0x8, 0x1, 0x3, 0x44, 0x2, 0x81, 0x1f, 0x700000000, 0x7fffffff, 0x6, 0x9, 0x80000000, 0x0, 0x6, 0xfffffffffffffff7, 0x6, 0x401, 0x100000000, 0x3, 0xff, 0x9, 0x3000000, 0x5, 0x0, 0x0, 0x10001, 0x7, 0x8, 0x4, 0x8, 0x3, 0x7, 0x0, 0x80000000, 0x67, 0x44, 0x1]}, 0x45c) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) r2 = dup2(r1, r0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.534263] binder: 20586:20588 ioctl 40046205 0 returned -22 [ 481.567412] binder: 20586:20588 BC_FREE_BUFFER u0000000000000000 no match 20:18:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, [], [{0xffff, 0x20, 0x6, 0x400, 0x4, 0x2}, {0x1, 0x1f, 0x8382, 0x3, 0x4a58, 0x8}], [[], []]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.594660] binder: 20586:20588 ioctl 40046205 0 returned -22 [ 481.609979] binder_alloc: binder_alloc_mmap_handler: 20590 20001000-20002000 already mapped failed -16 [ 481.621573] input: syz1 as /devices/virtual/input/input2575 20:18:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x88102, 0x4) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x7, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0xf}, @empty, r3}, 0xc) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.678301] binder_alloc: binder_alloc_mmap_handler: 20590 20001000-20002000 already mapped failed -16 [ 481.706742] binder: 20606:20614 ioctl c0c0583b 20000000 returned -22 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x64, "b9aec592b7581238d5d422c6a6ad28b254078597d4038bddaf2e713589fa43564eacf2d4e37d7deb48eabd6e0e571d3e700ef57be0edc73cadac68df596b6db97134dad36561153f58fc7bab8143446ac1290b30ddf973cdbe952308683a03750db5401b"}, &(0x7f00000001c0)=0x88) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.734113] binder: 20606:20614 BC_FREE_BUFFER u0000000000000000 no match [ 481.755645] input: syz1 as /devices/virtual/input/input2578 [ 481.772838] binder_alloc: binder_alloc_mmap_handler: 20618 20001000-20002000 already mapped failed -16 20:18:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.791287] binder: 20606:20623 ioctl c0c0583b 20000000 returned -22 [ 481.829415] input: syz1 as /devices/virtual/input/input2580 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x141080, 0x0) write$UHID_CREATE(r1, &(0x7f0000001340)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000340)=""/4096, 0x1000, 0xfffffffffffffc01, 0x3, 0x0, 0x7fffffff, 0x1000}, 0x120) 20:18:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x161c19a021a0d93a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.832720] binder_alloc: binder_alloc_mmap_handler: 20618 20001000-20002000 already mapped failed -16 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 481.869734] input: syz1 as /devices/virtual/input/input2581 [ 481.892045] binder: 20632:20635 BC_FREE_BUFFER u0000000000000000 no match [ 481.904342] binder: 20632:20638 BC_FREE_BUFFER u0000000000000000 no match 20:18:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 481.923959] input: syz1 as /devices/virtual/input/input2582 [ 481.927850] binder_alloc: binder_alloc_mmap_handler: 20639 20001000-20002000 already mapped failed -16 20:18:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x3) ioctl$RTC_VL_CLR(r1, 0x7014) [ 482.022047] input: syz1 as /devices/virtual/input/input2583 [ 482.028190] binder: 20646:20652 BC_FREE_BUFFER u0000000000000000 no match [ 482.038586] binder_alloc: binder_alloc_mmap_handler: 20651 20001000-20002000 already mapped failed -16 [ 482.039266] input: syz1 as /devices/virtual/input/input2584 [ 482.050652] binder: 20646:20657 BC_FREE_BUFFER u0000000000000000 no match [ 482.062957] binder: 20651:20656 ioctl 5473 20000000 returned -22 20:18:10 executing program 0: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="000329bd7000fedbdf2508000000300003000800080000000000080001000100000014000600fe880000000000000000000000000101080001000100000008000500e900000038000200080006000900000014000100ac14141d00000000000000000000000008000900ff7f000008000500260f000008000500018000000c00030008000400050000000800040000000000080004000500000044000100080006007165640008000100020000000800090037000000080001000a000000080001000a0000000800010002000000080001000a00000008000800000000008aacc8d527ed42914246c83ed45527076494900fa2f90d1d522cbb6d74207b473889a30b1b2833366ec5e422901dc59caa6869b3c4912a641b81f5d606626f8da07edb853d8c98d014f83ee6522244e718b61eebca00d2a6709077215a9e2f0c05f8ba0438132893"], 0xe4}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) 20:18:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x2, {0x2, 0x4e24, @local}, 'bond_slave_1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.070929] binder_alloc: binder_alloc_mmap_handler: 20651 20001000-20002000 already mapped failed -16 [ 482.078915] binder: 20651:20659 ioctl 5473 20000000 returned -22 [ 482.092508] binder: 20660:20661 BC_FREE_BUFFER u0000000000000000 no match 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) accept(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000140)=0x80) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x102) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.122015] binder: 20660:20666 BC_FREE_BUFFER u0000000000000000 no match 20:18:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10000000, 0x51, r0, 0x0) [ 482.185921] input: syz1 as /devices/virtual/input/input2585 20:18:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 482.251918] input: syz1 as /devices/virtual/input/input2587 [ 482.265312] input: syz1 as /devices/virtual/input/input2588 [ 482.294309] binder_alloc: binder_alloc_mmap_handler: 20685 20002000-20004000 already mapped failed -16 [ 482.333977] binder_alloc: binder_alloc_mmap_handler: 20685 20002000-20004000 already mapped failed -16 20:18:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, 0xffffffffffffffff, 0x0) 20:18:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x20000028) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x148) socketpair(0x10, 0xf, 0x65, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='a\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0c00020000000100000000000c0003001f000000000000000c000400ff030000000000000c00080004000000000000000800010000000000"], 0x9}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000100)={'bond0\x00', 0x40}) [ 482.342063] input: syz1 as /devices/virtual/input/input2589 [ 482.357824] binder: 20693:20695 BC_FREE_BUFFER u0000000000000000 no match [ 482.377433] binder: 20693:20701 BC_FREE_BUFFER u0000000000000000 no match [ 482.384185] input: syz1 as /devices/virtual/input/input2590 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000240)={0x0, 0x4}, 0x18) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x8, &(0x7f0000000180)={&(0x7f0000000100)}}, 0x18) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)=0x6) [ 482.430961] input: syz1 as /devices/virtual/input/input2591 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x11) 20:18:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0xe839b4a, 0x6}) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) [ 482.481419] binder_alloc: binder_alloc_mmap_handler: 20710 20001000-20002000 already mapped failed -16 [ 482.493290] binder: 20712:20715 BC_FREE_BUFFER u0000000000000000 no match [ 482.497572] input: syz1 as /devices/virtual/input/input2592 20:18:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa81a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3c6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.556455] binder: 20721:20723 BC_FREE_BUFFER u0000000000000000 no match [ 482.585322] binder_alloc: binder_alloc_mmap_handler: 20720 20001000-20002000 already mapped failed -16 [ 482.596463] binder: 20721:20731 BC_FREE_BUFFER u0000000000000000 no match 20:18:11 executing program 0: io_setup(0x1ff, &(0x7f0000000080)=0x0) r1 = memfd_create(&(0x7f00000000c0)='vboxnet0:\x00', 0x5) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000200)="d77b98a9f0bebf8c67984340191fb1266260b9fe0e52b335f7f6700b05aad16d03837f797a0608d7247a871db523e43d2a4071fca1393ebcf247fb5ccb51b647b90c446c7ccb2fade397be56ddc8fd2c8502b97ade24b67fa3291143c33279949d52a91dc19fa1e609cc90f97fc5be482b4fa89c7b7d7ebcd8a438d38ad963593b6a51591f6ac2f9a9af267321df6d61efa08777fc8e3daed9017cda276ee9c26605e5d958bf0d33997e88b4dd18f3ff31400d9b8edf9444b1fe8e5b63be793a448099fccce27c78d29ddbb86432690de183f5a7a6b893bd9704b1e6e6e699c20749", 0xe2, 0x1, 0x0, 0x0, 0xffffffffffffff9c}]) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0363a248", @ANYRES64=0x0], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3ff, 0x400000) 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80100, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 20:18:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.598029] binder_alloc: binder_alloc_mmap_handler: 20720 20001000-20002000 already mapped failed -16 [ 482.623991] input: syz1 as /devices/virtual/input/input2594 20:18:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="feff0840f06408008666d85a118f9ea7acb175cdbc460aa4e3", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 482.695933] input: syz1 as /devices/virtual/input/input2593 [ 482.705744] input: syz1 as /devices/virtual/input/input2595 [ 482.717273] input: syz1 as /devices/virtual/input/input2596 [ 482.733172] binder_alloc: binder_alloc_mmap_handler: 20737 20001000-20002000 already mapped failed -16 20:18:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.758723] binder: 20737:20747 ioctl 6612 0 returned -22 [ 482.763678] binder: 20751:20752 unknown command 1074331646 [ 482.770809] binder_alloc: binder_alloc_mmap_handler: 20737 20001000-20002000 already mapped failed -16 [ 482.771593] binder: 20751:20752 ioctl c0306201 200001c0 returned -22 [ 482.789804] binder: 20737:20747 ioctl 6612 0 returned -22 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:11 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) r1 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="036308407fa93a6ec66fe88e690c694551ba", @ANYRES64=0x0], 0x0, 0x0, 0x0}) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) [ 482.805071] binder: 20751:20755 unknown command 1074331646 [ 482.814487] binder: 20751:20755 ioctl c0306201 200001c0 returned -22 [ 482.855750] input: syz1 as /devices/virtual/input/input2597 20:18:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0x3, 0x1, 0x3}, 0x401, 0x8, 0x5}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:11 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) exit_group(0x51b3) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 482.896188] binder: 20759:20763 BC_FREE_BUFFER u8ee86fc66e3aa97f no match 20:18:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa81a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3c6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000009c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) r5 = getgid() r6 = getpid() stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) sendmmsg$unix(r2, &(0x7f0000000d80)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="ce1b05c34d2d6f13d0f7c1aeb25aae357ed594cee33f21c87d1618e8b4edd9986e8b03fc6b87f638a11bf4133aacfc9fa01bea9f3529dd98d8b3abc1e2a00698fbd794fe664d0e43a8b712220459e43127c85a7c66bb263ad6ea559b6568177dfd61808346860cdd620ceb91bf7aa4f196f016dca05be7b5987de845b44cfecd3e830c07d7df834c9e09598c55112ba2068f3f4655816f0f56afec714dae75b51b16c48bcfbff36bfd4480f3b5675d5514a4054dcd08a9d6c772b5bd2ba7a7f438f7db5d9ab1e1827811b05cdc4b3d206ff2ba21d400c55bcae609c712af7753c739e527bc1a4ebec8e09c670eabe6755341d4bb", 0xf4}], 0x1, 0x0, 0x0, 0x20008005}, {&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x48c0}, {&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000100)}, {&(0x7f00000005c0)="fd9a23a3f1eb16dbe271dae81018e23e9051dc9372c12381b6b9f4eff66d6c5a686f357c20a11d89267bf854efa823b81de948ff96e84f33852fa6f866bd24bc6dddaae73de0886de7fbbcf19235042f9d5a96e769d1f4ae496b085c6145fe116fc0160e22579d27e6f5aefa9eb99f9c48730c4ef740e0fb4e6a45379056800477", 0x81}, {&(0x7f0000000680)="1e86da18b1fb4c605a7d16349951eefdfb8d35ae9699a70676d56f6107b25c81244c979e3d3f55f2ff50a880c0884768c736fdec73c2563d4332d0d6b4f6dfe5c81ae47dba7cf84831904b718c2d488a3bd9da892df7e2e0cae4d4e87b1fce62e1babd045858c42eeedb3f6aaed18184e1535a51727166f66bf97d5262078bb453d7832dfefe272e99ad64dd4febd172ae24bb0e4cc8ada499cc001cce552a2354a1cc278102a53904fadc47676829c1b98770a7e46ab83349bdc4297b6b16b71366e011e1388a552de493b98b501ccbb0baf6a0559be9968a00c0072c09e18c1f0aede8c2841704fc0261", 0xeb}, {&(0x7f0000000780)="e9f3a7fa0a49e8c895b5929991339baec01b91a0f7f21e52c32a69b71edb80ddf8bb26f57030b4176364dd58df97b7e0d7fbda5e9a203f55144bf80dc6863da80d4336bcc980e4f18c54bf3ed4b5889868cab4653f5779c8d382e049c20f1c0a774ff41ecad1ef072a6efd4ca60ffc5cec3cf6381e5a7ce35e3f36de89da3548287738a82d72c184ff6c2227d21ac84982630659650bad4ebca316daec37743708500f1dbe", 0xa5}, {&(0x7f0000000180)="ae9f8261e74a050b062031760458755a74", 0x11}, {&(0x7f0000000840)="0ed5d75e2159118169404c059449ef1bb0574e1849d3b26080c57d210a077bdc338cdfb486006d32dabb255d388ae267659153aff40eb7c696d9122f84faae6c3f5158089c544d428ca3a1b6740e72695cc958e6220a95c48331c4e01d855eb652ae1de3ae5703e1d47d22c44b29e78e748cb82bc4369cae62582b7108f699e1887df14dc741ccce0de48c47b27691f61e354654b62f9bd4e3b07592ec2a0e5fdb1c2994e6600a94618ec1be0064d8604e394db1f596d6ce377ccc3c6785ec14804060eb5ae8ca2ce6b4f424ead515a640918c91c94cc4d0476ab21776ffbccba893a30fb14a990346d9cd04", 0xec}], 0x6, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x10}], 0x30, 0x10}, {&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)="270db2f337e3187501f82f95946b68dad8f15fd9ba4d8cd2384745b57c2521a23272d4e2a1bfd41dc6af", 0x2a}], 0x1, &(0x7f0000000d40)=[@cred={0x20, 0x1, 0x2, r6, r7, r9}], 0x20, 0x8040}], 0x4, 0x40) getsockopt$netlink(r2, 0x10e, 0x11, &(0x7f0000000340)=""/193, &(0x7f0000000240)=0xc1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="8c56eaaca6848f4376aebf82a03408f4979f1913ee37fde0740c9bafd1e3ae3b866b61e7780fb6fe35ab42bd23272729d95d5986ddb3be18d4bd38b7fd3add23add7e2ad9691a635174eb0597a41b359d480aa442caed0f89084f4fadbf97bcaee9f2a5d9c263a2765499d85e77ab3035449d96ebb7e02d9011173d2f0c970d4ed3ec7be48", @ANYRES64=0x0], 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000010c0)=ANY=[@ANYPTR=&(0x7f0000001080)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYRES16, @ANYRES16, @ANYPTR=&(0x7f0000001000)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYPTR, @ANYRESHEX=r7, @ANYRESOCT=r8]], @ANYPTR, @ANYBLOB="f5cba7ca65e564cff55d16018e5ef7e96c276c930e874145491cdb06930a9757c4405e19691ba27854cadddf5e79052ccbf10df822f4c746beb50e1b17cfce79a67c67ee0503cda11c8588720c432aeb7b0cf9547159669fc1", @ANYPTR=&(0x7f0000001180)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRESOCT=r9, @ANYPTR=&(0x7f0000001140)=ANY=[@ANYRESOCT=r6, @ANYPTR64, @ANYPTR, @ANYRES32=r4], @ANYRES64=r2, @ANYRESDEC=r4]]) write$binfmt_misc(r1, &(0x7f0000000e80)={'syz0', "86d3d9e64cbab7cf69a44caf78f3dfd0db30485e2aa61dcc780b487ec49f9376cbeaaf780002877fe185e86a1bf73ccf17466d1c8c46feeb9330a045ddccac372038e63447644d26090870e2e2db2c7e399ad500098e512b5c3f6b363d9080302b0bd966afd85bbfa1a1866c4a98f7cdaaa5a310ee36c58a80345c572cd6ddcfd0648a8d7a18667c15ae98711d01c90ad11d1df9ab41424746987d56aaf7494fa8ab32a3848c186042f4872e50ed30a3cc9cbb78"}, 0xb8) 20:18:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.961841] input: syz1 as /devices/virtual/input/input2599 [ 482.975270] binder: 20772:20776 ioctl 540f 20000040 returned -22 20:18:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x400000000000000, 0x8811, r0, 0x1) getpeername$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/125) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x69, 0x1, {0xa8, 0x0, 0x3}}, 0x14) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x8, 0x0, 0x80080, 0xffffffff}) 20:18:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r1 = getpgrp(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x5, 0x40, 0x8, 0x7, 0x8, 0x101, 0xfedf, 0x7, 0x100000001, 0x3, 0xfffffffffffffffd, 0xd8, 0x1eb4, 0xfb, 0x2, 0x3198, 0x1504, 0x1, 0x4, 0xf07, 0x3, 0xfefb, 0x3f, 0x1ff, 0x6, 0x0, 0x3f, 0xff, 0x0, 0xdcb, 0xfffffffffffffffe, 0x0, 0x9, 0x4, @perf_config_ext={0x9, 0x800}, 0x13000, 0x2, 0xbb, 0x1, 0x80000000, 0x108000000000000, 0x7}, r1, 0x2, r2, 0x8) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) r3 = dup3(r0, r0, 0x80001) ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0363ee3f4b1214ac1f028000000687d66311e2668944dbcbf0719b74701b1f0833c9f2d6cba282b6f738bfa5a402890786eb3c40f60dcf39049af95b5d321d8ebb9d9d76f2b9d5646f21e53f58c4957fca3aea71cca6ea309723be76334f3f688d449d68ad576ac07b011c2a097f4e48f755d06c73b815d9e0e66372a277a85cc252adf590d76feb0c06248c4ded5ba62373a9a0abe9e6ae1ba328867d9d49fa3d3155eb74b4c9756b0fb915deae789e19", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 483.025369] input: syz1 as /devices/virtual/input/input2600 [ 483.051577] input: syz1 as /devices/virtual/input/input2601 20:18:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.101557] binder: 20792:20794 unknown command 1072587523 [ 483.137608] binder: 20792:20794 ioctl c0306201 200001c0 returned -22 20:18:12 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x1c) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) 20:18:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x59, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09d0b75d", @ANYRES64=0x0], 0x0, 0x0, 0x0}) fsetxattr(r0, &(0x7f0000000000)=@random={'system.', '/dev/binder#\x00'}, &(0x7f0000000040)='/vmnet1\xceem0\x00', 0xc, 0x3) [ 483.146698] binder: 20792:20800 unknown command 1072587523 [ 483.152962] binder: 20792:20800 ioctl c0306201 200001c0 returned -22 [ 483.154516] input: syz1 as /devices/virtual/input/input2602 20:18:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2201, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.202758] binder: 20805:20807 unknown command 1572327433 [ 483.231124] binder: 20805:20807 ioctl c0306201 200001c0 returned -22 20:18:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x80) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0x0, 0x0, 0x3, 0x1, 0x3}, 0x401, 0x8, 0x5}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.247354] binder_alloc: binder_alloc_mmap_handler: 20806 20001000-20002000 already mapped failed -16 [ 483.259081] binder_alloc: binder_alloc_mmap_handler: 20806 20001000-20002000 already mapped failed -16 [ 483.262300] input: syz1 as /devices/virtual/input/input2604 [ 483.275706] input: syz1 as /devices/virtual/input/input2605 [ 483.290963] binder: 20805:20815 unknown command 1572327433 20:18:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', 'security[\x00'}, &(0x7f0000000080)='\\\x00', 0x2, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x180011, r1, 0x0) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x51, r1, 0x0) 20:18:12 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.304725] binder: 20805:20815 ioctl c0306201 200001c0 returned -22 [ 483.327147] input: syz1 as /devices/virtual/input/input2606 20:18:12 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x42, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) 20:18:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.396501] binder_alloc: binder_alloc_mmap_handler: 20823 20003000-20005000 already mapped failed -16 [ 483.428996] binder_alloc: binder_alloc_mmap_handler: 20823 20003000-20005000 already mapped failed -16 [ 483.430406] input: syz1 as /devices/virtual/input/input2607 20:18:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:urandom_device_t:s0\x00', 0x26) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:12 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x6123, &(0x7f0000000000)="09e80a2d6a39fb0f025dc885be081e54de6494bb714cff990c3c96a1522da99a0fa2dd91c7319be4b7f7c76e2e645220ebdc8f781a46eda2") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000090097ee3e5a74baed2300006658000000002e41a1d9888a79557b19788185d5", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7fff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000100)='-::!\x00', 0xffffffffffffffff}, 0x30) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x40) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000003c0)=""/7) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r5, 0x101, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'irlan0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x4d0efb3a, 0x10001, 0x0, 0x10001}, {0x200, 0xbf, 0x7ff, 0xe7c}, {0x8, 0x6, 0x8, 0x8}, {0x1000, 0x4, 0x0, 0xfff}, {0x5, 0x81, 0x4, 0x7}]}) [ 483.466770] binder: 20834:20836 BC_FREE_BUFFER u0000000000000000 no match [ 483.476003] binder: 20834:20839 BC_FREE_BUFFER u0000000000000000 no match 20:18:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x178) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@local, @local, @mcast2, 0x8, 0xbd, 0x80000000, 0x0, 0x8d, 0x80000, r3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.509079] input: syz1 as /devices/virtual/input/input2608 [ 483.515859] binder_alloc: binder_alloc_mmap_handler: 20843 20001000-20002000 already mapped failed -16 [ 483.544632] binder_alloc: binder_alloc_mmap_handler: 20843 20001000-20002000 already mapped failed -16 20:18:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x32040, 0x0) prlimit64(r1, 0xd, &(0x7f0000000080)={0xfd, 0x5}, &(0x7f00000000c0)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11, 0x2010, r2, 0x2000000000) [ 483.545249] binder: 20844:20848 ioctl 6123 20000000 returned -22 [ 483.564460] binder: 20844:20848 unknown command 0 [ 483.577134] binder: 20844:20848 ioctl c0306201 200001c0 returned -22 20:18:12 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2001d, r0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0xffffffff, 0x8, 0x8ff}) creat(&(0x7f00000000c0)='./file0\x00', 0x106) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0xffffffff, 0x2, 0x9, 0x3, 0x800, 0x81}) 20:18:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:12 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0xffffeffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 483.677611] input: syz1 as /devices/virtual/input/input2611 20:18:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:12 executing program 4: r0 = syz_open_dev$binder(0xfffffffffffffffd, 0x0, 0x802) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8802, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x80000001, 0xfffffffffffffff8, 0x6, 0x1, 0x20, 0xfffffffffffff001, 0x3}, 0x1c) unshare(0x20000000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2d, &(0x7f0000000100)=""/15, &(0x7f0000000140)=0xf) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000180)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0xffffffff) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x432, 0x1, 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x0, 0x2, [@rand_addr=0x6, @multicast1]}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@mcast2, 0x24, r4}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.741609] input: syz1 as /devices/virtual/input/input2612 20:18:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = dup(r0) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x4, 0x3}) 20:18:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.827447] input: syz1 as /devices/virtual/input/input2613 [ 483.851204] input: syz1 as /devices/virtual/input/input2614 20:18:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.909363] binder: 20896:20897 BC_FREE_BUFFER u0000000000000000 no match [ 483.936345] input: syz1 as /devices/virtual/input/input2616 [ 483.948571] binder_alloc: binder_alloc_mmap_handler: 20895 20001000-20002000 already mapped failed -16 20:18:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 483.960326] binder: 20896:20904 ioctl 7001 0 returned -22 20:18:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) clock_settime(0x7, &(0x7f0000000000)={0x77359400}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.006303] binder: 20896:20897 ioctl 8940 20000040 returned -22 [ 484.017997] input: syz1 as /devices/virtual/input/input2617 [ 484.026268] binder: 20896:20904 BC_FREE_BUFFER u0000000000000000 no match [ 484.036489] binder_alloc: binder_alloc_mmap_handler: 20895 20001000-20002000 already mapped failed -16 20:18:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9a3, 0x10, 0x3b0, 0x1, 0x3, 0x3e, 0x4, 0x12a, 0x40, 0x2f8, 0x200, 0x8, 0x38, 0x1, 0x44, 0x7ff, 0x100000001}, [{0x6474e551, 0x3, 0x7, 0x4, 0x77, 0x9, 0x7, 0x3ff}], "1bc04938875053d108266b5ed8c4f977f4b640097d49e44096abdbd61ef2e546483d0bcec345f8effcf97a0f22677089ff455ff91c165da590b335d3862f539dd4", [[], [], [], [], [], [], [], [], []]}, 0x9b9) r1 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) [ 484.064956] input: syz1 as /devices/virtual/input/input2618 [ 484.071354] binder: 20896:20904 ioctl 7001 0 returned -22 20:18:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.134563] input: syz1 as /devices/virtual/input/input2619 [ 484.171031] binder: 20921:20926 unknown command 0 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.181346] binder: 20921:20926 ioctl c0306201 200001c0 returned -22 [ 484.188347] binder_alloc: binder_alloc_mmap_handler: 20924 20001000-20002000 already mapped failed -16 [ 484.196142] input: syz1 as /devices/virtual/input/input2620 [ 484.206414] binder_alloc: binder_alloc_mmap_handler: 20924 20001000-20002000 already mapped failed -16 [ 484.209073] input: syz1 as /devices/virtual/input/input2621 20:18:13 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x4, 0x3}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) 20:18:13 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x801) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 484.242700] binder: 20921:20933 unknown command 0 [ 484.259676] binder: 20921:20933 ioctl c0306201 200001c0 returned -22 [ 484.270581] input: syz1 as /devices/virtual/input/input2622 20:18:13 executing program 4: r0 = eventfd2(0xbfc2, 0x80000) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2, 0x40010, r1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x3) 20:18:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000240)={0x50, 0xbc49, 0x1, 0xaf}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) getgroups(0x9, &(0x7f0000000940)=[0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000980)=[0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xffffffffffffffff]) getgroups(0x0, &(0x7f00000009c0)=[r6, r7, 0xffffffffffffffff, 0xee01, r5, 0xee01]) r9 = getgid() stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x1}, [{0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x3}, [{0x8, 0x5, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x54e656702d40f5ec, r9}, {0x8, 0x6ee78baff92f7f3d, r10}, {0x8, 0x2, r11}, {0x8, 0x0, r12}], {0x10, 0x2}, {0x20, 0x2}}, 0x6c, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r13, 0x40086200, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2feb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/228) ioctl$FS_IOC_FSGETXATTR(r13, 0x801c581f, &(0x7f0000000080)={0x4, 0xee22, 0x48e1, 0x7, 0x6}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.303110] binder_alloc: binder_alloc_mmap_handler: 20942 20001000-20002000 already mapped failed -16 [ 484.314715] binder: 20944:20946 BC_FREE_BUFFER u0000000000000000 no match [ 484.318605] binder_alloc: binder_alloc_mmap_handler: 20942 20001000-20002000 already mapped failed -16 [ 484.323883] binder: 20944:20948 BC_FREE_BUFFER u0000000000000000 no match 20:18:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$evdev(r1, &(0x7f00000000c0), 0xffffffffffffff68) r2 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r0, 0x53) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r3}) 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.431405] binder: 20956:20961 BC_FREE_BUFFER u0000000000000000 no match [ 484.469080] input: syz1 as /devices/virtual/input/input2625 20:18:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0xffffffffffffffc2) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 484.479159] input: syz1 as /devices/virtual/input/input2626 20:18:13 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.502880] binder: 20956:20968 BC_FREE_BUFFER u0000000000000000 no match [ 484.535861] input: syz1 as /devices/virtual/input/input2627 20:18:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.565678] input: syz1 as /devices/virtual/input/input2628 [ 484.575244] binder_alloc: binder_alloc_mmap_handler: 20971 20001000-20002000 already mapped failed -16 [ 484.599778] binder: 20979:20984 BC_FREE_BUFFER u0000000000000000 no match [ 484.610211] binder: 20971:20982 ioctl 6609 0 returned -22 20:18:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x67}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x50}]}]}, 0xffffffffffffffd0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2M\x01in_bytes\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/197) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 484.619544] binder: 20979:20989 BC_FREE_BUFFER u0000000000000000 no match [ 484.631343] input: syz1 as /devices/virtual/input/input2629 [ 484.631647] input: syz1 as /devices/virtual/input/input2630 [ 484.645726] binder_alloc: binder_alloc_mmap_handler: 20971 20001000-20002000 already mapped failed -16 [ 484.699328] binder: 20996:20998 ioctl 5429 20000000 returned -22 [ 484.704002] binder: 20994:20997 BC_FREE_BUFFER u0000000000000000 no match [ 484.718909] binder_alloc: binder_alloc_mmap_handler: 20996 20001000-20002000 already mapped failed -16 [ 484.734800] input: syz1 as /devices/virtual/input/input2631 20:18:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x5d84) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x123002, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@mcast1}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc) 20:18:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.746705] binder: 20996:21001 ioctl 5429 20000000 returned -22 [ 484.757298] binder_alloc: binder_alloc_mmap_handler: 20996 20001000-20002000 already mapped failed -16 [ 484.776203] binder: 20994:21003 BC_FREE_BUFFER u0000000000000000 no match 20:18:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f0000000200)) getgroups(0x2, &(0x7f0000000240)=[0xee01, 0xee01]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getgroups(0x3, &(0x7f0000000340)=[0x0, 0xee01, 0x0]) r7 = getegid() r8 = getegid() getgroups(0x5, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xee01, 0x0, 0xee01]) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) setgroups(0xa, &(0x7f0000000500)=[r2, r3, r4, r5, r6, r7, r8, r9, r10, r11]) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r12, 0x5414, &(0x7f0000000540)={0x0, 0x0, 0x4, 0x80000000}) ioctl$TCSBRKP(r12, 0x5425, 0x7) 20:18:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.820243] input: syz1 as /devices/virtual/input/input2632 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800000000000000, 0x20011, r0, 0x3ffff) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x51, r0, 0x0) [ 484.866226] binder: 21014:21017 BC_FREE_BUFFER u0000000000000000 no match [ 484.873231] binder_alloc: binder_alloc_mmap_handler: 21009 20001000-20002000 already mapped failed -16 [ 484.883198] input: syz1 as /devices/virtual/input/input2634 [ 484.897568] input: syz1 as /devices/virtual/input/input2633 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 484.968347] binder: 21025:21031 BC_FREE_BUFFER u0000000000000000 no match [ 484.982479] audit: type=1400 audit(1556741893.861:51): avc: denied { getattr } for pid=21029 comm="syz-executor.4" path="socket:[70131]" dev="sockfs" ino=70131 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 484.986855] binder: 21025:21035 BC_FREE_BUFFER u0000000000000000 no match 20:18:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x100000000000) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x204) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x100, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xbfe, 0xf4d7, 0x6, 0xded, 0x2, 0x3f, 0x5, 0x23c, 0x40, 0x302, 0x6, 0xf2c, 0x38, 0x1, 0x6, 0x6, 0x8}, [{0x6, 0x401, 0x4, 0x401, 0x0, 0x39b4, 0x1000, 0xa96}], "da0ea651ff5b66ace70a06f74f7e5592de23eeb298571e50cf9ac0d1f2dc0d4edda4e103cc613ec5ecdf9cfdd23d3826c063a89a623059fc35cdbe4becb2d8531f28634c0fb758d20ff1cd6af802eb928f386edf114ac1e46ca7c6623f3fbedbb755efb67a57e3872a461569317a4dbec50be397bedacb0f1621eb002457a3a2ad8c9f35af64b51c", [[], [], [], [], [], [], [], []]}, 0x900) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getuid() r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x8e27, 0x3, 0x4f, 0xffffffffffff8000, 0x0, 0x7fffffff, 0x800, 0x5, 0x0, 0x21, 0x9, 0x8001, 0xffffffffffff2232, 0x100, 0x1, 0x3, 0x0, 0x7fff, 0x401, 0x9, 0x8001, 0x8001, 0x2d, 0x6, 0x5, 0x1, 0x7, 0x3, 0x2, 0x2, 0x200, 0x40, 0xfffffffffffffffc, 0xf45, 0x7fff, 0x6, 0x0, 0x9, 0x0, @perf_config_ext={0xffff, 0x3f}, 0x2004, 0x1, 0x0, 0x7, 0xffffffff, 0x2c0}, r2, 0xf, 0xffffffffffffffff, 0xa) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2000000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0xf7d}}], [{@fowner_gt={'fowner>', r1}}]}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42400, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 485.105962] input: syz1 as /devices/virtual/input/input2639 20:18:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="038995bfc83276b38a3445429879aefa872209d6b154d7748c600bbc3b35d8c6f9d846446fe00e6c16be714d41690a4212dba851d5ab9fa34d0845e73e586c98c305fb29400c1cc8e38d2dfd1e3cdb87d4fe17f0098efc3f41527ccf84c75e80ac19819158c153b8313d2ec0e9281a34c6c049b7e35afdd3464f47d5e9b569", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000140)=0x6e, 0x80800) accept$unix(r2, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) io_setup(0x80, &(0x7f0000000000)=0x0) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000440)="36e7606789d0fec19cd5918d3d876c21cfaf049d9b8381a0034f56f076b4f9d91690899325fbc9081a75b9397e9bf8a8c16b1c8ac8d59b4397b7a33e0dc0b8718972a0bf1fb85cd404a6e32824490cc7499099e42a7bea6efb3b36536484cc67945316b8a75eb1cbe3f578aebd", 0x6d) rt_sigpending(&(0x7f0000000700), 0x8) r4 = dup3(r1, r0, 0x80000) ioctl$TCSETXW(r4, 0x5435, &(0x7f00000004c0)={0x6, 0x537, [0x2, 0xfc1, 0x4, 0x10000, 0x4], 0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000040)="6c0c08b48c89718df777f00599632de0af9e5fb113e86abf96b91fe5c1c756ad5085341df791335b8cf1bed0bf63e7730767284ca2ac9f8a2a77d8de544fc6b7302eacdfa0c911707e7316e3a017310085540cb9b848d88e04abf02dd33d9b7309554caf1e4b97", 0x67, 0x4, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x14b0, r1, &(0x7f0000000200)="b59f542b8425830e85d64666c83090a1042c4080c1a63df689d6138a4ad28dbb25cf37903adf6af9b2663b6dbf592cd5247db33cc6605ccbd4b76bca1759aa3680e14717661ca2101339b192a83de34be849b6682af177b5c9fda012d0318b7eb571bf1d8197a2ae183123e2cdc3bc894a3fbd644ac821a1c53a41d5745fa420f5d8f2985b7501dda57a5b", 0x8b, 0x4a, 0x0, 0x0, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0xe60, r1, &(0x7f0000000340)="9f4551111b638e581168b63a3c2ec60856b5df072ff67bcf8831e50ab970394a04445b9f698c65116185e303d73056cfe4542dc41cccc1d05d6ff1b4267f9fe2edfa41a7b831046ae68e5a2550a5880dd605516964420bc12e5ff7617dfa02cefd1cf90cfee587b41b8f67f73d52f083fa9451c9dc397a6216b428910250d0b70b0880", 0x83, 0xffffffff, 0x0, 0x2, 0xffffffffffffff9c}]) [ 485.158563] binder: 21051:21054 BC_FREE_BUFFER u0000000000000000 no match [ 485.190249] input: syz1 as /devices/virtual/input/input2640 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x20010, r0, 0x120000100) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 485.234859] input: syz1 as /devices/virtual/input/input2641 [ 485.252846] input: syz1 as /devices/virtual/input/input2642 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="72de311894415f4147690d384375345f", 0x10) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/150) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x13f0, 0x7, 0x9, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x6}, [@nested={0x368, 0x74433033, [@typed={0x14, 0x52, @ipv6=@local}, @generic="a26a9c76a0618bb323b080c6934318c5fc2dd62f65c997a69c6366d5c3fcc4ae10c22962edd3342b74f545fb201259625ec806ff91c71b637f65c35a09ba0908a867fcbc2cba711a2a29050412940360efdaed7fac0a6faf8b5cc381222da947e0ee4c382972a0b18b6db91ff890753924a1e5cb59a024b4bda9a54e", @generic="fda51b376be71a6210bbdb7cdbeb4070eac24df25d1116a609ce922f0ca6a08eef3494b4d622750493c2d90d2f18507a09a93cfb", @typed={0x14, 0x54, @str='/dev/binder#\x00'}, @generic="65ca4e336574ef23308033d626dd93d545946b576f60c3ee4fa7055594128af6dd336893d3d4af254c6d774b543d7d8f6b979f489c7f18ae173f344997eca0f9f2a9031a17f0593c79fe176add79c84b4df051773f781bb3d6d572bc6bd8cce567951e645e182b1d6d48c3366c9c7c8e7b870b0f9f78fe331eabf2dd8b9a6b0af9226d5b4d3bfbedf3a22b32517b7cadc1f8b11f8c17724afbbc2dcf6d82abf6da68cc3001f4f7b682a5eb45c1b13af0174e881374c76954c5af4756627ded69d72f4f6161d602adf43135f8", @generic="45a5cd4d45edb5ab04ebfd9282cd2e1c4c6e194e71f93ad3cf4ebcf50f34f61a8bc36ff131d84d982ad36be76daa25623daf12d29094d2445b27e6b3659f1b9bc80988654a219dd8846b295dc1bf954f71065d29acb7b0a82cfc87ea7a8af47d6bb5fafe4f002104adf7870360f930ba70509c05a7399d7c311f3f049689d06831749676d00c936b9d9a5818a19e8a3900c2e72ad0d5b5b60f0f4718aed283ed0c79fbe581c6de25473c9e856d7998cd71a959062940139a9934ec8d357738b4231a85ce3a0a467afc3b0609", @generic="e5192462593cd3b0c7f2118fff459569b08125403164d69d575e8c46a2aff3d17364520422bd3ee8bdaf4fe5c2a0b9c045f46869f66ac5e13bc507fdeb3e01ff2ac801d188bf6017deb009fd9196e3bd080acb1b24be208596965070e99f5614e566c4ece192e363ba524accfc5ca7cfc7470909b2f644517ce9a9f544e7634537d334f1a3c75adc79545f576acdac82e242ce1873cfb68643d738a3287869be883142d86f03e2c3fa12dc0fd77e6aa26db66b59cbc2ca789f242a2333de21799ccdfbc2c9db44fbb79c1dcd2f3f7e315f7e942d3f9a3098a406b7159cadc05c7aca40e18fb856760371b4b4eadaabf727390849"]}, @typed={0x8, 0x1a, @str='\'\x00'}, @typed={0x8, 0x68, @fd=r0}, @nested={0x1064, 0x83, [@generic="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", @typed={0x14, 0x37, @ipv6=@ipv4={[], [], @multicast1}}, @generic="df453b6e43de82c6a3028ac7c4e7ba3190be58bfb997bad38ca0edf906a87cba0eea0d7315f0a8b38f05b8ffdfd1efcbb8b82a6009f4381661b9c222ec765d2894c0ffd6b2f53815cf"]}]}, 0x13f0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r2) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000a, 0x10, r0, 0x80000000) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0x0) fdatasync(r0) write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xe88b, 0x9, 0x1, 0x1b, 0x7f, 0x3, 0x3f, 0x7, 0x17a, 0x38, 0x328, 0x40, 0x0, 0x20, 0x2, 0x3, 0x3, 0x4}, [{0x6474e557, 0x3, 0xf6, 0x0, 0x4, 0x7f, 0x8, 0x100000001}], "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", [[], [], [], []]}, 0x1458) [ 485.282865] input: syz1 as /devices/virtual/input/input2643 [ 485.293930] binder: 21069:21077 unknown command -1080719101 [ 485.302745] binder: 21069:21077 ioctl c0306201 200001c0 returned -22 20:18:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x100, 0x5434, 0x6, 0x8, 0x8, 0x7f}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) 20:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000200)=0xffffffff, 0x4) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="031507333512df919aa5ab90bccb3fab9fac5d096e828ea47a236dbeb9f3bd2bc15dce9191eb9a266246e1afcd9798f8a9dc3c1f20000000000000003bbc1a50fc08b2f8fecc7ea9403ebae8d512440f936c8ca8aa4d060b603cd643f8faaf2674c108ec2f0c1d500906af0a8adb6e6b37e4e17a6fc957648d8218ddf743848e7a180cd7b714e17a406b4b6e923cb6cfe565a5c33af8d1404f5515d41a7c450d24893a3f32010000008e75", @ANYRES64=0x0], 0x0, 0x0, 0x0}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)) 20:18:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 485.463744] input: syz1 as /devices/virtual/input/input2646 [ 485.468695] input: syz1 as /devices/virtual/input/input2645 [ 485.477315] binder_alloc: binder_alloc_mmap_handler: 21090 20001000-20002000 already mapped failed -16 [ 485.487120] binder: 21095:21101 unknown command 856102147 20:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 485.512838] binder_alloc: binder_alloc_mmap_handler: 21090 20001000-20002000 already mapped failed -16 [ 485.523584] input: syz1 as /devices/virtual/input/input2648 [ 485.525883] binder: 21095:21101 ioctl c0306201 200001c0 returned -22 [ 485.532237] input: syz1 as /devices/virtual/input/input2647 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x20000, 0x50, r0, 0x0) 20:18:14 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 20:18:14 executing program 4: r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$void(r0, 0xc0045c79) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000140)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:ap\x02_var_log_t:s0\x00', 0x23, 0x1) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) [ 485.573946] binder: 21095:21101 unknown command 856102147 [ 485.587655] binder: 21095:21101 ioctl c0306201 200001c0 returned -22 [ 485.595840] input: syz1 as /devices/virtual/input/input2649 20:18:14 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) syz_open_dev$binder(0x0, 0x0, 0xffffffffffffffdf) 20:18:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 485.675759] audit: type=1400 audit(1556741894.561:52): avc: denied { mac_admin } for pid=21127 comm="syz-executor.4" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 485.690352] input: syz1 as /devices/virtual/input/input2650 [ 485.703040] SELinux: Context system_u:object_r:ap_var_log_t:s0 is not valid (left unmapped). 20:18:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00') ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r1 = socket$unix(0x1, 0x0, 0x0) getpeername(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') delete_module(&(0x7f00000002c0)='broadcast-link\x00', 0xa00) get_thread_area(&(0x7f0000000340)={0x401, 0x1000, 0xffffffffffffffff, 0x7, 0x40, 0x2, 0x3, 0x6, 0x89a2, 0x3}) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x20c, r3, 0x601, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42e80214}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x54}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff601b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x20c}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@ipv4={[], [], @loopback}, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@local}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) accept4$inet(r2, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10, 0x800) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000440)) fstat(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:14 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setfsgid(r1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0xbb, 0x5bc1cf23}, {0x5, 0x6}], r0}, 0x18, 0x2) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 20:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 485.753871] audit: type=1400 audit(1556741894.621:53): avc: denied { associate } for pid=21127 comm="syz-executor.4" name="binder4" dev="devtmpfs" ino=5432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 20:18:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 485.800851] input: syz1 as /devices/virtual/input/input2651 [ 485.841026] input: syz1 as /devices/virtual/input/input2652 20:18:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 20:18:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:14 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) syz_open_dev$binder(0x0, 0x0, 0x2) [ 485.906810] input: syz1 as /devices/virtual/input/input2653 [ 485.930082] input: syz1 as /devices/virtual/input/input2655 [ 485.954796] input: syz1 as /devices/virtual/input/input2654 [ 485.963139] binder_alloc: binder_alloc_mmap_handler: 21155 20001000-20002000 already mapped failed -16 20:18:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:14 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1cc) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8) sendto$packet(r0, &(0x7f00000000c0)="08c51105dffaa9df393d29dd2c61f0a8b3a2748e25dd2c907f38586af844aca8e5d251c03833566b344b662e66e2908cf170c1c334c679a9ca73911c05b7ba0ea687e0f1301f4d84ae1642151b091955e757a88eb0e2273ccf907bf2dd5ced3fbcd942d1c9a4433961e691cc6a929bd0829dbeedc80ac0504b5b16ac2d25fdf9ca6f390b19a67e1c1ee104d33eed33419e78a56432aa33405f8902f7e83a96af4a93257ff44a610ea9c5bae54d066ed96dab97d280b05ee0", 0xb8, 0x80, &(0x7f00000001c0)={0x11, 0x6, r1, 0x1, 0x4, 0x6, @dev={[], 0xf}}, 0x14) r2 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r2, 0x0) readahead(r2, 0x10001, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') write$P9_RFLUSH(r0, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) write$P9_RXATTRCREATE(r3, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) [ 486.007444] input: syz1 as /devices/virtual/input/input2656 [ 486.022069] binder_alloc: binder_alloc_mmap_handler: 21155 20001000-20002000 already mapped failed -16 [ 486.047088] binder: 21172:21174 unknown command 0 20:18:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @remote}, 0x8) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000080)=[@enter_looper, @acquire_done={0x40106309, r1, 0x4}], 0xb1, 0x0, &(0x7f00000000c0)="e603090b2480a7c9e48697eb26f2a3ee8180a1a45645658cc216f58f53d689ad70201771f83afb069874ef79f643b43c617cbf5d2113611c86c3f0d2deafbc00e115aeaa63a7fa23f7417dbb2f136998685de76424b538b92d386b838b30b91dfb019cd4688cbfe5f5e24b1570a445edbb8df1923856ae5281718da5b299fb11a211563cdab080a2d4cdbc78a7589a44744e2a6c454264e5cb0e0606c8389a5c601084fb5c66d1c2c690e7df079e8e8467"}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56814062330e7526598e243ed338ccdce76eec87eb681e2a239da02e633e03a36c2c1494fffbffffde01b085e22631442d1d21473a1a13e90bf7b25745bca9396f0f5ff73a00"/81, @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 486.062437] binder: 21172:21174 ioctl c0306201 200001c0 returned -22 [ 486.088796] binder: 21172:21178 unknown command 0 [ 486.093825] binder: 21172:21178 ioctl c0306201 200001c0 returned -22 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x55, r0, 0x0) 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 486.146228] binder: 21183:21186 BC_ACQUIRE_DONE u0000000000000000 no match [ 486.176750] binder: 21183:21186 unknown command 1648394582 [ 486.184415] input: syz1 as /devices/virtual/input/input2659 20:18:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x1, 0x0, 0xfffffffffffff001}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x20011, r0, 0x4) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 486.202048] input: syz1 as /devices/virtual/input/input2658 [ 486.204866] binder: 21183:21186 ioctl c0306201 200001c0 returned -22 [ 486.238617] input: syz1 as /devices/virtual/input/input2660 [ 486.277798] binder: 21183:21201 BC_ACQUIRE_DONE u0000000000000000 no match [ 486.295752] binder: 21183:21201 unknown command 1648394582 [ 486.309127] input: syz1 as /devices/virtual/input/input2661 [ 486.313314] binder: 21205:21208 ioctl 40286608 20000040 returned -22 [ 486.317243] binder: 21183:21201 ioctl c0306201 200001c0 returned -22 20:18:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffff63) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400202, 0x0) write$ppp(r1, &(0x7f0000000880)="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", 0x1000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x7fffffff}) 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20100, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="fc2abeed188fcbfc35cb2e32c36d4fd35cf1b09de863325f2b22672b479dfb5ad25c6bd3a204994f3e1a677d044165391423c1ff8f1f8689765c32a3cd6bca77e72bd190ec7db8ce4c074b9881b139110abfee87") [ 486.323655] binder: 21205:21208 ioctl 40286608 20000040 returned -22 [ 486.348252] input: syz1 as /devices/virtual/input/input2662 20:18:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:15 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='batadv0\x00', 0x7, 0x6, 0x8}) 20:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 486.428233] binder_alloc: binder_alloc_mmap_handler: 21218 20001000-20002000 already mapped failed -16 [ 486.440724] input: syz1 as /devices/virtual/input/input2664 [ 486.459723] binder_alloc: binder_alloc_mmap_handler: 21218 20001000-20002000 already mapped failed -16 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x51, r0, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) sched_yield() 20:18:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 486.503421] binder: 21228:21233 BC_FREE_BUFFER u0000000000000000 no match [ 486.515373] input: syz1 as /devices/virtual/input/input2665 [ 486.524725] binder: 21228:21236 BC_FREE_BUFFER u0000000000000000 no match 20:18:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x70, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000001c0)="2afc7c54b148de85819c3051736a4515a5933aabc74442355804a67f96e1850cf5c0fe6ca9f983fe0f24d34a6d772971f908ad8ee70a04b301cd3376c8a82ad487860ac7180a109deb43cc18e18ed1fa123fc1b2bbbad39068aff756c92ad48cd67b5ae6801efb8beb11b83d18090f053c80db4527c9b0b75d386b77c7899da1bd80b136b298fe439f23393f98b98b223e033367afd5860a9731de4d5c1cdd28fc4dc60bab727b7a3496970e281d55a0b1f79fe07fe3d09bb94fd6b1b4fb3a5b18db60b8f3032ff1eaec37b547addecfc764d11c82454655e73272920f096644939277a263fb1dafccbefae26e6edc82511af275e5f388f254") ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x7, 0xc, 0x8, 0x100, "35e5da092480d3585efcb9682ccb6d3e6f7d0b65742ef87587700bff40cc5ad6"}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xb0, 0x2, 0x2, "8901331e8ca7f292dce00c3133ea9795", "af8a86f5248054fdd98cf9eb52650bdc4b222363f9f2b74b5fe9f7f8f521413ed439bc38ba244ae9bfba95254186290ccf3c14d9cb73937307fd9b81a2c29c475e815bac7ff4c5caee9ae8444733dd393cc5b2bd4ab39b17a760c61765cb5a5316c28ef3fcaa3c9151e95bc15f628620755089761df2520f95851536adc4a4ad2167d22182570b5daa61e708f95293741b320297f26ecdeebaa891"}, 0xb0, 0x1) [ 486.607547] input: syz1 as /devices/virtual/input/input2666 [ 486.624419] binder: 21247:21249 BC_FREE_BUFFER u0000000000000000 no match [ 486.639512] binder: 21247:21249 unknown command 0 [ 486.646057] binder: 21247:21249 ioctl c0306201 200001c0 returned -22 20:18:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') recvmmsg(r1, &(0x7f0000002340)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/90, 0x5a}], 0x1}, 0xffffffff}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/4, 0x4}], 0x3, &(0x7f0000000600)=""/122, 0x7a}, 0x80000000}, {{&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/53, 0x35}, {&(0x7f0000000800)=""/39, 0x27}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f00000009c0)=""/24, 0x18}], 0x7, &(0x7f0000000a80)=""/199, 0xc7}, 0x101}, {{&(0x7f0000000b80)=@rc, 0x80, &(0x7f0000001380)=[{&(0x7f0000000c00)=""/192, 0xc0}, {&(0x7f0000000cc0)=""/212, 0xd4}, {&(0x7f0000000dc0)=""/145, 0x91}, {&(0x7f0000000e80)=""/229, 0xe5}, {&(0x7f0000000f80)=""/173, 0xad}, {&(0x7f0000001040)=""/62, 0x3e}, {&(0x7f0000001080)=""/254, 0xfe}, {&(0x7f0000001180)=""/198, 0xc6}, {&(0x7f0000001280)=""/218, 0xda}], 0x9, &(0x7f0000001440)=""/99, 0x63}, 0x101}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f0000001640)=[{&(0x7f0000001540)=""/222, 0xde}], 0x1, &(0x7f0000001680)=""/214, 0xd6}, 0xffffffffffff8000}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001780)=""/24, 0x18}, {&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/158, 0x9e}, {&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000001a00)=""/107, 0x6b}, {&(0x7f0000001a80)=""/118, 0x76}, {&(0x7f0000001b00)=""/3, 0x3}, {&(0x7f0000001b40)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/60, 0x3c}], 0x9, &(0x7f0000001cc0)=""/187, 0xbb}, 0xa3c8}, {{&(0x7f0000001d80)=@can, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/93, 0x5d}, {&(0x7f0000001e80)=""/154, 0x9a}, {&(0x7f0000001f40)=""/247, 0xf7}], 0x3, &(0x7f0000002080)=""/5, 0x5}, 0x465}, {{&(0x7f00000020c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002280)=[{&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/182, 0xb6}], 0x2, &(0x7f00000022c0)=""/67, 0x43}, 0x3f}], 0x8, 0x102, &(0x7f0000002540)={0x77359400}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000002580)={@local, r3}, 0x14) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000180)=0xfff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xc01, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20:18:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 486.666503] binder: 21247:21258 BC_FREE_BUFFER u0000000000000000 no match [ 486.683507] binder: 21247:21258 unknown command 0 [ 486.706385] binder: 21247:21258 ioctl c0306201 200001c0 returned -22 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x18540) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() setreuid(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f0000000000)='wchan\x00') [ 486.745066] binder_alloc: binder_alloc_mmap_handler: 21262 20001000-20002000 already mapped failed -16 [ 486.794770] input: syz1 as /devices/virtual/input/input2668 [ 486.795954] input: syz1 as /devices/virtual/input/input2669 [ 486.813738] input: syz1 as /devices/virtual/input/input2670 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80002) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0xffff) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630c40", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x20, 0x5, 0x7}) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x92a, 0x3, 0x1ff, 0x1, 0x2, 0x3, 0x2, 0xe7, 0x40, 0x9e, 0x180000000000000, 0xd5, 0x38, 0x1, 0x58, 0x0, 0x2}, [{0x1, 0x0, 0xb07, 0x5, 0x9, 0x9, 0x10001, 0x5}, {0x7, 0x200, 0x8, 0x0, 0x7, 0x10000, 0x5, 0x6}], "e7bc8c0ccb9e9239402990674f3f6de22ff10c7bd494c8dc69dbf7e121042b99e0916d3c1e2b3deb1d5276ec8cc34bf85445f3bb1839208fa366afebeb23fe91fa9187f5e71c4c8e6a9c1ca81023691b2b8a8204dd8330d8e5c6c9cbb8f276258a04d0dbc7150b40d44f258f56b23d34ff8143f5a0f29695bd4cb39b9a8c4042af9f2c05cd73555a58ccd7361e6d96c3f43049f0d46ec2dbec9310d3564b51d2d8ccc874ba9abd41fcb85ded271cb2c6ddbdf838801857c2ea9d8f83cca033df6b17fb715cb5af77761d6a95d537dcecdf795af51680e534f6d9199e78fb596c4e0021b2a174f8f635e7bf"}, 0x19b) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 486.915342] binder: 21287:21291 unknown command 1074553603 [ 486.930972] binder: 21287:21291 ioctl c0306201 200001c0 returned -22 [ 486.946610] binder: 21287:21295 unknown command 1074553603 [ 486.961003] binder: 21287:21295 ioctl c0306201 200001c0 returned -22 [ 486.969302] input: syz1 as /devices/virtual/input/input2671 20:18:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 20:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/56) readahead(r0, 0xffffffffffffffe6, 0x7) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x51, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 20:18:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:15 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 20:18:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.046359] input: syz1 as /devices/virtual/input/input2673 20:18:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) [ 487.095663] binder: 21308:21315 BC_FREE_BUFFER u0000000000000000 no match [ 487.106224] input: syz1 as /devices/virtual/input/input2674 [ 487.125042] binder: 21308:21322 BC_FREE_BUFFER u0000000000000000 no match 20:18:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.160973] input: syz1 as /devices/virtual/input/input2676 [ 487.182034] input: syz1 as /devices/virtual/input/input2677 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.203188] binder_alloc: binder_alloc_mmap_handler: 21326 20001000-20002000 already mapped failed -16 20:18:16 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000ff7c", @ANYRES64=0x0], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x60) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002dbd7000fcdbdf2503000000080005000700000008000500020000000c000200080002eb4e2100002c000100080001000a00000008000800ff070000080008000090b517c3c9058fafab0a641fff7f00000008000104000008000500030000000800060006000000080006004375e99fd53bfa8644012bd63588cbc8382868919c5267cbb141dc7b6731e3a2b245f6625daa688d230c5dedd72169e5909bd5c3045a1b9b0fd0de7d0300af67f6ac10deeb1ea2195799551d0ca6616ad217eafb77c91496c32baa2b7debb7b9b57c1abda859af70af8a66ce9804fb684c1809bbcd23a73e1abade2fe5d61aa5d15091f2097646d005975558f520bc5f050b9d0413f108569aa982c7fec00477cd54e33c33021ec1d5a9487c7622bdba2fc4cf8a8a490a41e12fc71a8c71ad50a1990013b14415a3ad"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.243366] binder_alloc: binder_alloc_mmap_handler: 21326 20001000-20002000 already mapped failed -16 [ 487.288702] binder: 21341:21344 unknown command 2097086464 [ 487.314229] binder: 21341:21344 ioctl c0306201 200001c0 returned -22 [ 487.327523] input: syz1 as /devices/virtual/input/input2681 20:18:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) 20:18:16 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840b9117df10406d3e75013a4bef2b94bcf4b3ab6c651f475e8d3d1d6cd271f8d122e71e25d1eef5f5d3df98d5f125ab4054465896005158a59c2ab17adfeefdab7772828bb347c14299a1cc587ff606981488794f67d762efecc6bd2f5cbb5f6b975075494e57770e5a3be504b83c8772f999c17d6c2ab29cfa50f9125fa52cac1f1f79026ce93518aa4c41713326a559fb8b438bcfc1d5f92bc1cb2c1644ee361d088c07148327d37b69fab0184be8d09d43e263e57174896e432a1671b4e3bca54c5b8de4ec3760672c217c15ae8e4", @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.347085] binder: 21341:21350 unknown command 2097086464 [ 487.353041] binder: 21341:21350 ioctl c0306201 200001c0 returned -22 20:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 487.426860] input: syz1 as /devices/virtual/input/input2682 [ 487.445332] input: syz1 as /devices/virtual/input/input2684 [ 487.454277] binder: 21358:21365 BC_FREE_BUFFER ue7d30604f17d11b9 no match 20:18:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 0: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03630878", @ANYRES64=0x0], 0x0, 0x0, 0x0}) [ 487.488741] input: syz1 as /devices/virtual/input/input2686 [ 487.499750] binder: 21358:21375 BC_FREE_BUFFER ue7d30604f17d11b9 no match 20:18:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.552853] input: syz1 as /devices/virtual/input/input2687 20:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.594256] binder: 21380:21385 unknown command 2013815555 [ 487.605955] binder: 21380:21385 ioctl c0306201 200001c0 returned -22 [ 487.626679] input: syz1 as /devices/virtual/input/input2689 [ 487.639219] input: syz1 as /devices/virtual/input/input2690 [ 487.649557] binder: 21380:21390 unknown command 2013815555 [ 487.667470] binder: 21380:21390 ioctl c0306201 200001c0 returned -22 [ 487.678198] input: syz1 as /devices/virtual/input/input2691 20:18:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0xac300, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x660080, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 487.819375] input: syz1 as /devices/virtual/input/input2692 20:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.859666] input: syz1 as /devices/virtual/input/input2694 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.918888] input: syz1 as /devices/virtual/input/input2695 20:18:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 487.977518] input: syz1 as /devices/virtual/input/input2697 [ 487.993457] input: syz1 as /devices/virtual/input/input2698 20:18:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.061873] input: syz1 as /devices/virtual/input/input2699 [ 488.087527] input: syz1 as /devices/virtual/input/input2700 [ 488.098128] input: syz1 as /devices/virtual/input/input2701 20:18:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0], 0x0, 0x0, 0x0}) 20:18:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.149201] input: syz1 as /devices/virtual/input/input2702 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.215375] binder: 21454:21457 unknown command 0 [ 488.228891] binder: 21454:21457 ioctl c0306201 200001c0 returned -22 [ 488.247315] input: syz1 as /devices/virtual/input/input2703 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) [ 488.307354] input: syz1 as /devices/virtual/input/input2705 [ 488.313538] input: syz1 as /devices/virtual/input/input2706 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_to_team\x00', 0x1}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x8000b, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) sendto(r2, &(0x7f0000000880)="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", 0x1000, 0x8000, &(0x7f0000000140)=@sco={0x1f, {0x0, 0x4000000000000000, 0x5, 0x9, 0x818, 0x5}}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0xb) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.358421] input: syz1 as /devices/virtual/input/input2707 [ 488.394944] binder_alloc: binder_alloc_mmap_handler: 21475 20001000-20002000 already mapped failed -16 20:18:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x204) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x100, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x5d84) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.500999] input: syz1 as /devices/virtual/input/input2710 [ 488.508040] input: syz1 as /devices/virtual/input/input2711 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.554592] input: syz1 as /devices/virtual/input/input2713 [ 488.563791] input: syz1 as /devices/virtual/input/input2714 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.648489] input: syz1 as /devices/virtual/input/input2715 [ 488.656481] input: syz1 as /devices/virtual/input/input2717 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r1, 0x0, 0xc6, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.720377] input: syz1 as /devices/virtual/input/input2719 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_to_team\x00', 0x1}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x8000b, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) sendto(r2, &(0x7f0000000880)="ccba88b60b0b909132f6825adba42cdb27ffd20389578aed86e82ee3593792287e999939f17c2f7c5461b5b5858e845673a23ba49723cba17ff3f83759b9e854eb950c2a0436b973b16181432915cfd7397910940fadc17d095b642c960c91a0ca0b6eb1a69a1ee342e94e7008c6f6753332ee9bf15a05cccb650bbd8c770e60b2e0809a3e3120e200454b8d4d42975aa9335121fabf74aa717fe3a6f58bb00697273dbc338ad959acfffc825576a26ce3a8c575c6a48984bbb8ab731d5c423a731c4a93d5298262de9731271fef541ecd5fe69fdf8bd0c6bd397ffbd5582dc5cdb9fc8e697f630fd343caccc0639a7991d8a78c52659751b22a88ce5e031d7b2b3440473f6afff2376f37068e5be7f25e49847f2f84de368ad7d4f0e0387c6c0015b4c993cb58595f7d5f3bab5263bb9e01cd3db003a1d1a1db2d56876e0f2ff59cdb969f649b07e30aa4f25b310ff85ceda5a0ab489af976d29fa044bea13accfd22d41568a34171264b81ac20d0ee2866e47caa701e0881c6952f0ca45d7ce52129164f6a9af2f3e1deb74b744012bed7b100acebf72379ab9bd953bc4e3f0a5f019530efdc72efcdf923f945238335fdc426edeb3c4d9a77e017c97d0de824644d2a08e37d7d9766a4844d2f1806c600da1926879779ae5ec09fa381f9386a6593ffc5baca6d3ee3c8d68a556a4eefa51da62404e8559008170232bad01fc4f1f1bcc8dd9bb08b969fbd4bb6e1decca54559a7459515a48f1857da10cacecc6649227bb9d389b9f6a8e3d6fafc6ee53a82500f4097bba01d76bb38ca2ce46ff3f03f31925b024cc022d3fece246e46200bd5706fa205e4b2b479485238dcb3e4a4b1ac3cd9ccf0f82d7a447199c93a9e00ac2ca056292aa00aa4b93e494f87c19fd6f9d9ed7369367c1abe90fad01f20c6c03a1b0b1ae5eb19387033c92ca8cb01b537655ea884fbeec4ee239488b91bf41042f16de5cd54fa902f8ae6ed8fa3ae6bc00bcf7e37e8e7e9dec0f2411b12003f840eb048e2a22330fb5b90cbe6469a194b466998bffaec0ee13bdba26cbc868ebf3a643cec2189be623b5b02762c615130fd5d94548c8b6c78d527b3c88967b86151625768370abd1a8df054fa16381a832aa774add6b737472e2f972eb20629ad4b8090c238f27e3b04bfc928e1c9ebcf724f6bff6be9371ed244bebc167f43a5c8e40d2cd58f81d71b4950a286684a3f7061da751bb942d52f4597263764d3358a7264a3c5e90eb3c0dd9adeee68937784fab5a78adbb6f71cfae75054ff4fd99aaa8e4e968c0488cdc0ef6dfbb76625d522ef248ade7469802c251a4e6badfed15fd47b239b3383905e6085dbf00a78e632de0c19d6a6b000780e53732059dcde145145cc18f48d3b3dd76344284fa91f00a32ac1596ea53c6e4fa298474604426ae3445ad440cb307ae6016d51b67e9bac5409e645830485bf91ff3a524f3d6c4bf70c35a455e986be4b1815b4709bdecef9bd0cbb57ec3294b654d4305ea11ba456d26e755bb8406799fdc2b1cbe378b8be738b0f7dd4a652ae6f4687edefb7c7df74166e1bf1eef109afadd24720417870a4cc93db37b8f915f5e7e0108fd48605698d7393539ffe11fd6f5adf8d09132c5a4ca8bf08af2fc2d4603e77d30f409bd21d451480240069da409430e2349df74f716a8ad2ad3b061078d127d5c8db06a2d90426c7a25ce00abeff17e9d89e4fcda99edfa41c5a98ff86881caace105d7f16bd8fe5fa4f00d0f2491932c9527d87c2e6d684880c5cf82905626ab539e68f43f9caa26f68161aa34e7eac63ebefde331fc3635fb83402f67d94a7eb817aa90476740dea724e35aea6135b0deb82e0f31e8315dcc8d95e1855397e4c26b09be13db7b27dfd7bfcefed7ba50bb46351be7c579694e2d3558350710548b4a5e0fc4971b82fa8c8dbd097b7eb4d4c1c6c0082e7f118a2b993176533998398e0a8ae89ad68280df42c2d02633b374833dc21c4bac283372dc30499082b0d99d6654dcae4c4c87958a39d4b0eea237b4006bb5464e7c5e2bd7f598339f8c742caccdef241a61cfddd8d79c3109836a250225b1cd9560c3982186e9135a25c3c4114b6b7529f81b73886671a00a1a483b7e75bccb5ace0e19f55cf4222b4dd57a01414c66fa344777a58af8f2b388da55e706db8634acf94826586504d4f0c3866127966a254c1bf3e10f200f57bdaca8d937faa277586f9c6c1550782f16f5e304ef8e7acbf52b42b1e8768fe597eef5072f550e3f320cc9f134335f2be10eef8bd25fe4888117be440a73ace0cb29cbe8c267f4df777c1a8032d20d4243744585111556c6eaf64bacf47870111677c55ed640576e0fdde61c85d8ca37edf8e1ba1527c7dfb291c34ef75cf7d80e3cc0c6275ca9f8b1676e89e2b8b3bc5b102f05675d74652d8ce926a52a1a47a7138e6965fb92af9a032f2c56d8953e51e3c0cdd95ef7078551d37f2724d1e3eb688978ebd76c001cf448b99c5dfee10e23f56d52d6f4dd9ad49bce0e9ff255751d4a6117e9f991cde4b88f329d764f31394473874947f05a6af9f40659d3925ed5b0610b1580bbfae59bfc5980faac48b3749a4510f9021c487c9b80b6f394b44ece5f335cf6c34ccafac5424ead2b492657f946bbff3535b37e74362c1e256a9ffcc2cdce862a741457edabe3ce1b98e2c45c2029a8d3869c5f656aa407be10fb9254c70946b483689c2d22481054d381818372b1bb8f4de78db51b6d932af3342dfda1eaa1212ddfd72b73fe6d5c53489ad09ace782ce33df51b936e3768812ce6ff0d95dc85ff59261a9d0863a281252e095200d225206945e20c7d1c48b2e51182da250b1f3af82e13b8b7a782cd78deee459a23a887b27e828e5d3c9118c2246112a915613bb6ac9166422f8ed9a1ba18504bf46b51abcd902b63a6f9a9663b6a3554eeb8c3f29c80dd29a4096612f70bcc803f88d76e7e027df98b04f47421fa47106bc700364dc98fb2e2316a2e401f9baa572b0ac46085ce34f226059f1d5ed4cce09c2e7de9d6d93af11ee8e101245937f3c23677f5570dbb4b7bc831cc0c56d2a0f14312f874c5d2c32ea4040081e341c53befc61a7493a23da843d898a0d870f0fd8c17e8b1e86a898439d2c0004d96632248dc23e19f20df38761f315d388fadefa90dbe37fd90b07adcd6b20804645cb78c3af62a930d198a1a4683f459a97ee1f31685dbcad6a50a4194af36baa1f4bdb0fe471570b08fa5cf8e4ef63aff82d51fe63c613b320997b147c79bbe970e42fe14ed51cb7089d692580b2013f2fb9e6e70d81468b0a208dd6a3414c92c5c740aa761b3a5bf1d9f61ef9be2e328805c7d10180a606cda8938e9e174d14bfe069babf44c597218574eb49f67f9953c251fc35393234474335f4a12a4a81cbd4b072871f020bcdd4ff4a9421c49e9e3eea7d2644ee80857843f4ccc111d4fd4cd49bfae892bb977777d725333eeda0501f6ea9b5cb330dd76de9bc1df5cd7a626a10a8c1eee069ff41426958dded3b0e736a0b9dfc56d3c681b4a7b5186d163248bf86328dc055ec1667f2b79015b18e01018682872a361fd0babd9f6b60528ccc980cb91495df1983e7f9241115bd3229d8829bb03ee1cd2fe6a5ed9c4a32c76030501cfdf62aa9ac49836d5218b2d0dac243f7a5a2f130b0bb0515d30e6282c07b462d481850954fdfefd1e39c44b876c28bb2a7b5d41db0830cde17d06d1080efb92a657acfdf34b5d4af41df6ad29cd384d6a9e8900e1f908ccffb3fdf09dc0ed537f06ca3e2d999aa447f996c5813d93a94f19c4b63362ebb51e9c7962cb4d15e4d248630d4c08614713218906e50387893e4c1deae1a5bd81fede36051fd667605991a566e305ebfa969c4d63d4a49ae16559df2588d5255afeb5c295f75f3c07c78b10e90499e746c22437d2a647746d28fb9f3402c576f11ecad69708a63a9d0bdaa05ba5c5944cb277a6f2b4d4a232a40bd2d23b7afe7fdfd7847e1bfeb169b8dbe32692f22fc797696282c573c14cff608fed877176904b398e42a948a25ec28773a93d518fb4ab06bfc82b329d902dab368f5af99d35a7b03e71fc85b34e3bdb0b031169573708d0ffdbe0fe3b6cddd86134bf3b12e9099b2c49ab4eaa8a08db186f933a0428d0f2bf9c5f1e98f1cc3fb8d31b87ddaf6d74460ac028af575f0e27641822fecea8471cc5efeb6520454f12fc3635e9e6285f2f8fa28107d3e2b06465399645258b840a6b24e32a0a839e05e8c62d189092b359887b0d168b0212371f1a32273194d8a9b14dd9c38aefcfe2a5184165f8640208f52c65f60d98d27316a17528aadff8cfe88de33197404cb8172a319773a98a2ddda3cf60c110baabc6f652108c4eb3986bb4bcb8913f26184b31dd6d815e78cc971ebde6ea2904bf5153f6acffa196526e52c1a0cac175e960a4e93b866ab03f7c91abfe3ed98bacdecdca8bee56f383511f84af6e4229e7ee018bc820fbabfd75eef5f00b3c30730bf94771e81a94b829e5cf7e14e427fe236b439b6169c71adb9413717d8341491dc11a84fbd931cfdd76f8d3c9d2bc50027c58f0d04baf1814d4eb7e0b87e24d16479370ee041efc594ceade62626bb1466e326334e98984a82c023699115ddc238250d1608a2988dab60eb66594d6c87a7205e745ce1e4b650e63bea5c352dd3ead89887919ed18fdf8b3ef2459a6cd54bc6f07277915fdefbef5539b28f5a39b2d162c3e0ff6fdf2723ea0c62affe024ac2bbd1f3211499fbaf0c4801c400f2ce519242fb5965b72de832b0fe5c838c226cae7bbba783d5b149d5ebca561c19f364935fdfe11b2f44143eea24aac6dd859cc3a6bc5db71af5fd0fe684a25408ae031435f8a5e3ec2f9b042ff7bcc2dfa7d6fe7bd2198d76162881e30ac57c13b84faf84678198f460e31a3af18c9d094075e402cac17a3cc632a371fa4ddbf616bc39ff9b14b8b091310485be3e926fc416a8c8a792068a797e774d73d8adb4480726b44279915e3b6c50402c8ca20f7bb50004ee4c03458f355661563cc3ae0ad70d48f9cdad42b40638403e4e65f1364976fb0c8496cbb7f0087d1e4be1bf6fb019492bb837122c2d8ffd7393ede79c845a6cef1697f690f98b9a2d8620f0a56d35d41e7dbc287698e7ba4500ee5276e5b018831ce8b77d8d490c3e258deea475f65c7a47a50bb3e5624af095d88ebc0ddbcdf781bef56b3a2150f6ce663643a6a48891f5e47266c18622d9e627082584db2a1c846e54d80d09a6c043b1d71f11a5f995373f73a231352efa695b87614b07162f6a78620e20c608d3ac598ae5e933ca7203f68c341129889399ccbc0ed33f49b95beb16a0f131b849c66e51033b342972f315a4e77160c590f3bbe36982be3c50b4274a9f73832874401d7e202304be970b4adab41d72f38c1b3cea7499e51103ea4ffb916ce7f0be621fc96a6e58563cfc492b9a65d62fa3d96048a395e367e1c303b9d2509620135055250ca99b620f87a443577b5fe5e8990ec81004e192b503340c0eb18244f072d3d92a0f6c42b755abc842bc808ea7abfad9b494e76eedda26a0fb081e14da4acf8a601ed0bccd6761e619564683fff4d1b0f8fe7798a9a68ee021720988e7d9d8f659b8c7d783813b9c3d0bbe080244cfd343cd8c61a1180df1bc781dff8417824eecf4aae7f74a9abc764d0aeab29a8ade26a88fef28291eeb8943f8ad2be7a17abf230837ef9d471ab1a42028740ba6162802b60742ff692ccd68546b8a", 0x1000, 0x8000, &(0x7f0000000140)=@sco={0x1f, {0x0, 0x4000000000000000, 0x5, 0x9, 0x818, 0x5}}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0xb) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.786455] input: syz1 as /devices/virtual/input/input2723 20:18:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.858423] input: syz1 as /devices/virtual/input/input2725 [ 488.878437] input: syz1 as /devices/virtual/input/input2726 20:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 488.924066] input: syz1 as /devices/virtual/input/input2727 20:18:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.035689] input: syz1 as /devices/virtual/input/input2729 [ 489.061707] input: syz1 as /devices/virtual/input/input2730 20:18:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.151919] input: syz1 as /devices/virtual/input/input2732 [ 489.203760] input: syz1 as /devices/virtual/input/input2733 20:18:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_to_team\x00', 0x1}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x8000b, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) sendto(r2, &(0x7f0000000880)="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", 0x1000, 0x8000, &(0x7f0000000140)=@sco={0x1f, {0x0, 0x4000000000000000, 0x5, 0x9, 0x818, 0x5}}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0xb) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.295035] input: syz1 as /devices/virtual/input/input2734 20:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) clock_settime(0x7, &(0x7f0000000000)={0x77359400}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.368149] input: syz1 as /devices/virtual/input/input2735 [ 489.388767] input: syz1 as /devices/virtual/input/input2736 20:18:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.466814] input: syz1 as /devices/virtual/input/input2737 [ 489.507448] input: syz1 as /devices/virtual/input/input2738 20:18:18 executing program 1: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000080)="399eda886a6a89cede122724ec52ce8b0691a7c8316b0fba8bbfd3645df2dfa5f1740a20e4771d2ed3961566cf0578092d4e88d62c4fdb0ad14bf36c39b9298617fd2e8f3273483a2907a9", 0x4b, 0x800, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 489.553983] input: syz1 as /devices/virtual/input/input2739 20:18:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_to_team\x00', 0x1}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x8000b, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) sendto(r2, &(0x7f0000000880)="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", 0x1000, 0x8000, &(0x7f0000000140)=@sco={0x1f, {0x0, 0x4000000000000000, 0x5, 0x9, 0x818, 0x5}}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0xb) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.622222] input: syz1 as /devices/virtual/input/input2740 20:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.690586] input: syz1 as /devices/virtual/input/input2741 [ 489.710897] input: syz1 as /devices/virtual/input/input2742 [ 489.720412] input: syz1 as /devices/virtual/input/input2743 20:18:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1f) 20:18:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.796990] input: syz1 as /devices/virtual/input/input2745 20:18:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.847754] input: syz1 as /devices/virtual/input/input2746 [ 489.915355] input: syz1 as /devices/virtual/input/input2747 20:18:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1ad) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x7) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 489.988199] input: syz1 as /devices/virtual/input/input2748 20:18:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.051409] input: syz1 as /devices/virtual/input/input2749 [ 490.069674] input: syz1 as /devices/virtual/input/input2750 20:18:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x1f) [ 490.108735] input: syz1 as /devices/virtual/input/input2751 20:18:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.157160] input: syz1 as /devices/virtual/input/input2752 20:18:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.253959] input: syz1 as /devices/virtual/input/input2753 [ 490.274937] input: syz1 as /devices/virtual/input/input2754 20:18:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.305521] input: syz1 as /devices/virtual/input/input2755 20:18:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3b8, 0x6, 0x4, 0x3ff, 0x5, [{0x7f, 0x80000001, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x1f, 0x0, 0x0, 0x1}, {0x4, 0xe76b, 0x2, 0x0, 0x0, 0x2000}, {0x80000001, 0x6, 0xb7}, {0x3, 0x3, 0x4, 0x0, 0x0, 0x2000}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.385842] input: syz1 as /devices/virtual/input/input2756 [ 490.455778] input: syz1 as /devices/virtual/input/input2758 20:18:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1ad) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x7) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c12") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.555587] input: syz1 as /devices/virtual/input/input2759 20:18:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x7, 0x900, [0xbc, 0x10000, 0x412, 0xa2f8, 0x9], 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.597516] input: syz1 as /devices/virtual/input/input2760 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.656369] input: syz1 as /devices/virtual/input/input2762 20:18:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.697611] input: syz1 as /devices/virtual/input/input2763 20:18:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3b8, 0x6, 0x4, 0x3ff, 0x5, [{0x7f, 0x80000001, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x1f, 0x0, 0x0, 0x1}, {0x4, 0xe76b, 0x2, 0x0, 0x0, 0x2000}, {0x80000001, 0x6, 0xb7}, {0x3, 0x3, 0x4, 0x0, 0x0, 0x2000}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.745253] input: syz1 as /devices/virtual/input/input2764 20:18:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.795940] input: syz1 as /devices/virtual/input/input2765 20:18:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c12") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.844240] input: syz1 as /devices/virtual/input/input2766 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 490.893912] input: syz1 as /devices/virtual/input/input2767 [ 490.923638] input: syz1 as /devices/virtual/input/input2768 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 491.006995] input: syz1 as /devices/virtual/input/input2769 20:18:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c12") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x7, 0x900, [0xbc, 0x10000, 0x412, 0xa2f8, 0x9], 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.106903] input: syz1 as /devices/virtual/input/input2772 [ 491.145902] input: syz1 as /devices/virtual/input/input2773 20:18:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x161c19a021a0d93a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.204951] input: syz1 as /devices/virtual/input/input2775 [ 491.212535] input: syz1 as /devices/virtual/input/input2776 [ 491.225298] input: syz1 as /devices/virtual/input/input2777 [ 491.298585] input: syz1 as /devices/virtual/input/input2778 20:18:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lapb0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0x8, [0x6, 0xec, 0x40000000, 0x5, 0x2, 0x9, 0x719, 0x48a, 0x6, 0x4, 0xacd3, 0x2, 0x2, 0xbb76, 0x2, 0x8, 0x9220, 0x2, 0x3, 0x80, 0x6, 0x654, 0x80000000, 0x0, 0x1, 0x5, 0x0, 0x3, 0xfffffffffffffff8, 0x144, 0x9, 0x65, 0x7, 0x7ff, 0x0, 0x0, 0x6, 0x1ff, 0xe77, 0x75, 0x1, 0x3b2, 0x5, 0x0, 0x400, 0x3ff, 0x1f, 0x1, 0x2b3, 0x9, 0x2, 0x2, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0x0, 0x3, 0xffffffffffffff60, 0x38, 0xfffffffffffffff8, 0x9, 0x7, 0x3, 0x80000000, 0x6, 0x6, 0x5000000000000000, 0x5, 0x2, 0x7, 0x6, 0x8, 0x0, 0x3, 0xffffffff, 0x1, 0x9, 0x26cf, 0x3, 0x4, 0x81, 0x1, 0x20, 0xc8e6, 0x6, 0x3, 0x3a, 0x8, 0x8000, 0x0, 0x5, 0xb413, 0x100000000, 0x6, 0x9, 0x1, 0x9, 0x10001, 0x7, 0x7a32, 0x800, 0x5, 0x10000, 0x5, 0x2, 0x3a03, 0x3, 0x80000001, 0x2, 0x3, 0x6, 0x9, 0xa1da, 0xdd, 0xfffffffffffffff9, 0x2, 0x4, 0x4, 0x7, 0x6, 0x3c0, 0x800, 0x4, 0x1ff, 0x5, 0x8000, 0x7f, 0xb2, 0xf319, 0x6, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x4, 0x1, 0x8, 0x9d, 0x1, 0x0, 0x333, 0x4, 0x19, 0x7880, 0x1, 0x3, 0xff, 0x101, 0x2, 0x6, 0x6, 0x100000000, 0x1, 0x0, 0x9, 0xe5e, 0x0, 0x1, 0x6, 0x7, 0x9, 0x3, 0x7fff, 0x7f, 0x3809, 0x5, 0x0, 0x7, 0x6, 0x4, 0x9, 0x9, 0x5, 0x22, 0x7, 0xbf, 0x80, 0xf06c, 0x101, 0x5, 0x5, 0x8, 0x81, 0x100, 0x9, 0x2, 0x2, 0x8, 0x0, 0x2, 0x38b, 0x6, 0x3f, 0x8001, 0x7, 0x0, 0x2b1, 0x5, 0x4, 0x6, 0xd4, 0x6cff, 0x3, 0x7, 0x100000000, 0x400, 0xffffffffffffffc1, 0x7, 0x7fff, 0x1, 0x2, 0x9, 0xffffffffffffffff, 0x5, 0x6, 0x3, 0x3, 0x1, 0xffffffffffffb4f5, 0x1, 0xff, 0x3f, 0x9, 0x0, 0x5, 0x1, 0xffffffffffff8000, 0x8, 0x2, 0x841, 0x4, 0x5, 0xfffffffffffffff7, 0xa3, 0x8000, 0x80000001, 0x1, 0x9, 0x10001, 0x88af, 0x800, 0x5, 0x1, 0x3dd3, 0x0, 0xffffffffffffffff, 0xfffffffffffffbff, 0x7, 0x0, 0x1, 0x3f, 0x6, 0x1fc, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x951, 0x3, 0x614, 0x9c2, 0x0, 0xffffffffffffff7f, 0x4, 0x81, 0x80, 0x5, 0x428, 0xff, 0x4, 0x7, 0x1, 0xea, 0x400, 0x2, 0x5, 0x1ff, 0x81, 0x101, 0x3, 0xcf, 0x6, 0x80000001, 0x6, 0x7, 0x1, 0x4, 0x5, 0xffffffffffffff80, 0x101, 0x8, 0xff, 0x1, 0x10000, 0x0, 0x1200000000, 0x9, 0x0, 0x10000000000, 0xeab, 0x5, 0x4, 0x25a, 0x3f00000000, 0x10000, 0x800, 0x7c00000000, 0x9, 0x20000000000000, 0xfffffffffffffff7, 0x1, 0x8, 0x7, 0x4, 0x7fffffff, 0xfd, 0x1, 0x7fffffff, 0x100, 0x401, 0x8, 0x8, 0x6, 0x1, 0x8, 0xffffffff, 0x1, 0x100000001, 0x37c, 0x6, 0x2c, 0x5, 0x3f, 0x1, 0x400, 0x3f, 0x5, 0x0, 0x1, 0x7, 0x101, 0x1, 0x20, 0x4, 0x300000000, 0x8, 0x5, 0x3f, 0x6, 0x20, 0xc9e, 0x2, 0x88a6, 0x0, 0x7, 0x10000, 0x2719, 0x1800, 0x1, 0x8, 0x1, 0x1b, 0x8, 0x20, 0x9, 0x9, 0x10000, 0x4, 0x7fff, 0x40, 0x6, 0x6, 0x0, 0x0, 0x9, 0xde, 0x7ca, 0x6, 0x4, 0x5, 0x4, 0x6, 0x20, 0x0, 0x1512, 0x7, 0x2, 0x9, 0x6, 0x4e, 0x2, 0x2, 0xffffffff, 0x3, 0x7, 0xfffffffffffffff7, 0x81, 0x2, 0x4, 0xb824, 0x7, 0x3, 0xeb6, 0x5a23, 0x1, 0x1f, 0x90, 0xa9fc, 0x0, 0x8, 0x5, 0x4, 0x20, 0x6d, 0x7f, 0x0, 0x7, 0xe8fc, 0x4, 0x7, 0x3e0, 0x2, 0xfffffffffffffffe, 0x6cb, 0x1f, 0xa2, 0x4, 0x3f, 0x2, 0x80, 0xdc, 0x8001, 0x0, 0x7e90, 0x4, 0x9, 0x26, 0x5, 0x8c0, 0x7, 0xceed, 0x3, 0x200000000000000, 0x5, 0x7d30, 0x1, 0x2, 0x3, 0x1000, 0x7, 0x5, 0xffffffffffffffc0, 0x5, 0x3, 0x81, 0xff, 0x4, 0x5, 0x1, 0x1, 0x4, 0x2, 0x7, 0x834, 0x1, 0x20, 0x6, 0x3f, 0x9, 0x873, 0x7, 0xdd, 0x0, 0x5, 0x8, 0x1ff, 0x1, 0x4, 0x5, 0x0, 0xcde, 0x8609, 0x3f, 0x590c, 0x7, 0x100, 0x6, 0x2, 0x1831, 0xffffffffffffffe1, 0x1, 0x8, 0x2, 0xff, 0x2, 0x1, 0x101, 0x1, 0x2, 0x7, 0x3453, 0x8, 0x0, 0x10001, 0x1, 0x9, 0x1, 0x1, 0x2, 0x400, 0x7, 0x100000000, 0x40, 0x3, 0x0, 0x5, 0x67ad, 0x5024, 0xaee1, 0x100, 0x81, 0x2, 0x7, 0x1f, 0x0, 0x1000, 0x81, 0xdf4, 0xffffffff, 0x5, 0xff, 0x1f, 0x7d, 0x8, 0xffffffffffff80e7, 0x2, 0xffff, 0x101, 0x8, 0x0, 0x0, 0xf616, 0x7f, 0x1, 0x0, 0x8, 0x400, 0x1f, 0x5, 0x100000001, 0x101, 0x7fff, 0x10001, 0x2335, 0x9, 0xed, 0x1, 0x2, 0x400, 0x6881, 0x7, 0x7fffffff, 0x180000000, 0x3f, 0x1, 0x800, 0x2, 0x9, 0xffffffffffffffe1, 0x7, 0x7ff, 0x6, 0x3, 0x1, 0x5, 0x3, 0x4, 0x10000, 0x5, 0x1, 0x5effe5f2, 0x81, 0x5, 0x400, 0xff, 0x100, 0xfffffffffffffeff, 0x3, 0x800, 0x80000001, 0x878, 0x2, 0x800, 0x7fffffff, 0x7, 0x8, 0x7ff, 0x7d0e757b, 0x65, 0x7ff, 0x4, 0xaf18, 0x74d95ada, 0x572, 0xbbeb, 0x3, 0x0, 0x0, 0x400, 0x200, 0xff, 0x7, 0x2, 0x100000001, 0x5, 0x32, 0x2, 0x20, 0x7ff, 0x892b, 0x7, 0x3, 0x40, 0x4c14, 0x9, 0x293, 0x2, 0x8001, 0x7, 0x7, 0x800, 0x7, 0x6, 0x2, 0x10001, 0x49, 0x40, 0xb2, 0x2, 0x8000, 0x7, 0x7, 0x0, 0x9, 0x4, 0x8, 0x7fffffff, 0x18, 0x7ff, 0x6, 0x4, 0x400, 0x9, 0x53495a45, 0x7, 0x1, 0x40, 0x1, 0x7, 0x1, 0x4, 0x480000, 0x7fffffff800, 0x5, 0x2, 0x7, 0x1, 0x0, 0xfffffffffffff000, 0x1, 0x1, 0x5, 0x357, 0xa5, 0x5, 0x2, 0x3f, 0x20, 0x6, 0x10000, 0x3, 0x1, 0x98, 0x10001, 0x8, 0x8, 0x6, 0x10001, 0x8, 0x400, 0x8, 0x7ff, 0x4, 0x2, 0xfffffffffffffffb, 0x8, 0x401, 0xffffffffffff0001, 0xfffffffffffffffa, 0xdf5, 0xf2b, 0x3f, 0x20000000000, 0x80000001, 0x3, 0x5, 0x8000, 0x1, 0x2, 0x3ff, 0x6, 0x1000, 0x100000001, 0xffffffff, 0x8, 0x8ce2, 0xd7, 0x1, 0xfffc000000000000, 0x3, 0x9, 0x7ff, 0x8, 0x4, 0x8, 0xe2, 0x9bb, 0x4, 0x3, 0x5, 0xfffffffffffffff9, 0x200, 0x4, 0x5, 0x7fff, 0x7743, 0x7, 0x7, 0x80000000, 0x14, 0xffff, 0x33bd, 0x1, 0x2, 0x1ff, 0x1ffe000, 0x2, 0xfffffffffffffff8, 0x1ff, 0x100, 0x7fff, 0x1, 0x9, 0xa5e, 0x80000000, 0x7, 0x5, 0x2, 0x3, 0x9, 0x9, 0x18000000000000, 0x40, 0x52e99fa6, 0x1, 0x10001, 0x7fff, 0x8, 0x9, 0x5, 0x5, 0x80000001, 0x3ff, 0x8, 0xf3, 0x0, 0x7c1, 0x3, 0x4, 0x5, 0x6c7, 0x1, 0x6, 0x6, 0x2, 0x4, 0x1aaf, 0x9, 0xffffffff80000000, 0x1000, 0x5, 0x7ff, 0x88, 0x66ec, 0x20, 0x0, 0x200, 0x1, 0x7, 0x7f9e4879, 0x1000, 0xcde3, 0x3, 0x80000000, 0xb9, 0x2, 0xf5fa, 0x3, 0xff, 0x1000, 0x9, 0x7f, 0x4, 0x1, 0x0, 0xfffffffeffffffff, 0x3, 0xffffffff, 0x6, 0xfffffffffffffffd, 0x5, 0x7f6e, 0x8, 0x5, 0xba, 0x1, 0x9, 0xffffffffffffffc1, 0x6713, 0x7fff, 0x1, 0x6, 0x0, 0xffffffffffffff42, 0x4, 0x7, 0x401, 0xb2c, 0x5, 0x100, 0xfffffffffffffff9, 0x4, 0x1a1, 0x800, 0x4, 0x10000, 0x1, 0x3, 0x3f, 0x7, 0x6, 0x1000, 0x7, 0x5, 0xd7, 0x1, 0x3, 0x9, 0xe3, 0x8, 0x20, 0x1, 0xfffffffffffffffb, 0x40, 0x9, 0x1, 0x0, 0x2, 0x2, 0x9, 0xd54, 0x2, 0x100, 0x8d, 0x2, 0xbd7d, 0x9, 0xc, 0x0, 0x3, 0x6, 0x6, 0x9, 0x3, 0x132, 0x5, 0x1, 0x3, 0x1, 0x9, 0x0, 0xf8, 0xf54, 0x3, 0x8000, 0x0, 0xcf, 0x8, 0x4e, 0x2, 0x1, 0x3, 0x1ff, 0x9, 0x9, 0x4, 0x80000001, 0x80000000, 0x0, 0xf2, 0x8000000000000, 0x0, 0x3, 0x10000, 0xab, 0x1f, 0x7ff, 0xcee, 0x0, 0x80000000, 0x5, 0x100, 0x1ac, 0x8, 0x0, 0x763, 0x30ffcbc2, 0x9, 0x6, 0x3e, 0xbe, 0x80, 0xfd, 0x7ff, 0x6, 0x2, 0x879e, 0x9, 0x1, 0x3b03, 0x5, 0x512f121a, 0x2, 0xd90e, 0x800, 0x3, 0x80000000, 0x7fff, 0x200000000000000, 0x889, 0xc971, 0x4, 0x20, 0x7ff, 0x5, 0x80, 0x2, 0xcedb, 0xa80a, 0xa08, 0x80, 0x8, 0x8, 0xfffffffffffffffe, 0x0, 0x20, 0x7, 0x4, 0x6, 0x8, 0x2, 0x4, 0x0, 0x401, 0x9, 0x6, 0x401, 0x2, 0x6, 0x1f, 0x6, 0x5, 0x5, 0x8, 0x8, 0x9c1, 0x7f, 0x8000, 0x1, 0x40000000, 0x1, 0x3, 0x5, 0x400000000000, 0x401, 0x100000000, 0x724, 0xffff, 0x8, 0x7, 0x4, 0x79, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x800, 0x6, 0x3ff, 0x5, 0x81, 0x5, 0x7fffffff, 0x4, 0x10000, 0x7, 0x1, 0x7f, 0x0, 0x7, 0x7, 0x75e2cd49, 0x9, 0x401, 0x5, 0x4, 0x4, 0x0, 0x985, 0xffffffffffffffff, 0x8, 0x8001, 0x30df, 0x4, 0x80000000, 0x1000, 0x9, 0xffffffffffff0000, 0x494160a9, 0x3, 0x8, 0x1, 0x2, 0x1, 0x6, 0x400000008000000, 0xffff, 0x1, 0xffffffff80000000, 0x6, 0x10001, 0x80000000, 0x7c, 0x7, 0x8, 0x7, 0x50, 0x1, 0x9, 0x100000001, 0x40, 0x1, 0x8, 0x4, 0x4, 0xbbf, 0x100000001, 0x4, 0x8, 0x1, 0x8001, 0x9, 0x6, 0x1, 0x130e, 0x1, 0xcd, 0x1, 0x222c, 0xf985, 0x10001, 0x5, 0xfffffffffffffff8, 0x7ff, 0x255, 0x2, 0x100, 0x7fff, 0x3ff, 0x6, 0x6183, 0x7, 0x7, 0x39, 0x6, 0x101, 0x9, 0x5, 0xdec2, 0x7fffffff, 0xfffffffffffff801, 0x9, 0x2, 0x80, 0xffff, 0x1, 0xffff, 0x6, 0xa61, 0x1ff, 0xe, 0x7f, 0x10000, 0x8, 0x4, 0x6, 0x0, 0x2, 0x100000000, 0x6, 0x3, 0xffffffff, 0x0, 0x5, 0x3e4, 0xffffffffffffffc0, 0x5b, 0x7fffffff, 0x1, 0x6, 0x10001, 0x1, 0x2, 0x9, 0x2, 0x8, 0x6, 0x6, 0x7c, 0x7, 0xfffffffffffffffc, 0x5, 0x6, 0x3000000000000, 0x101, 0xfffffffffffffffb, 0x4, 0xab5a, 0x20, 0x100000000, 0x40, 0x412, 0x9, 0x7, 0x8, 0x2, 0x9, 0x8, 0xf2, 0x1ff, 0x6c321dd1, 0x80000000, 0x1, 0xffffffff, 0x8, 0xa2, 0xffff, 0x10000, 0x2, 0x0, 0x1614, 0x0, 0x4, 0x7, 0xb3b, 0x80, 0x99f, 0xfff, 0x2, 0xc726, 0xf4, 0x88d0, 0x0, 0x7ff, 0x200000, 0x4, 0x8000, 0x8001, 0x8, 0x3, 0x6, 0xffff, 0x6, 0x5, 0x7, 0x8, 0x0, 0xfff, 0x3, 0xfff, 0xed, 0x3000000000000000, 0x0, 0x8, 0x8, 0x1000000000000, 0x4, 0x8, 0x0, 0x9, 0x9, 0x100000000, 0x5, 0x2, 0x9, 0x8, 0x2, 0x7f, 0xffffffffffffffff, 0x7f, 0x1, 0x0, 0x3, 0x4, 0xeef, 0xe, 0x5, 0x7, 0x9, 0x3, 0xf9f, 0x81, 0x7, 0x3, 0x0, 0x9, 0x3f, 0xffff, 0x9, 0x1000, 0x3ff, 0x3, 0x1, 0x5, 0x80, 0x1, 0x1, 0x2, 0x1, 0x1, 0xdfa, 0x9, 0xff, 0x2, 0x100000001, 0xe2, 0x15ff, 0x44bb, 0x3, 0x409, 0x2, 0x9, 0x44, 0x2, 0x3, 0x7, 0x49f7d8d2, 0x100, 0x101, 0x9, 0x7, 0x40, 0x6, 0x7, 0x800, 0x11, 0x12, 0x1, 0x4aa, 0x1, 0x1, 0x2, 0x7fffffff, 0x7fff, 0x7, 0x8001, 0x6, 0x1000, 0xfffffffffffffffd, 0x1, 0x5, 0xfff, 0x0, 0x3, 0x9, 0xfffffffffffffffe, 0x9, 0x636, 0x7, 0x584, 0x6, 0x7, 0x1ff, 0x52d, 0x3, 0xfffffffffffffff9, 0x81, 0x1f, 0x102000000000000, 0x7, 0x9, 0x7f, 0x9, 0x6, 0xc45, 0x80000000, 0x730, 0x7755, 0x4, 0x40000000000, 0x2, 0x40, 0xfff, 0x81, 0x5, 0x4, 0xfffffffffffffbff, 0x0, 0xd4f, 0x1, 0xffffffff7fffffff, 0x1000, 0x8, 0x800, 0xffffffff, 0x414e, 0x20, 0x56, 0xa5c, 0x8, 0x589d, 0xbf, 0xffffffff, 0x4, 0x3f, 0x101, 0x0, 0x640, 0x6, 0x4, 0x101, 0x64ff, 0x1, 0x9, 0x6, 0x2, 0x2, 0x2, 0xffffffffffffffc1, 0x8, 0x7, 0x1ff, 0x1, 0x0, 0x3c, 0x5, 0xc74, 0x6, 0x295, 0x9, 0x2, 0x2, 0xfffffffffffff801, 0x3f, 0x8001, 0x40, 0x0, 0x3, 0x1, 0xfffffffffffffff8, 0x10001, 0x9, 0x1, 0x0, 0x3, 0x176f, 0x6, 0x3, 0x3, 0x5, 0x1, 0x3, 0x2, 0x400, 0x1, 0x7fffffff, 0xa8b, 0x3b888bcb, 0xffffffff, 0x62a, 0xd1ae053, 0x7, 0x8, 0x4, 0x200, 0x0, 0x5c, 0x4, 0x0, 0x1e, 0x0, 0xfffffffffffffffe, 0x3, 0x3, 0x6795, 0xffd, 0x5aa, 0x10001, 0xfffffffffffffffc, 0x9e, 0x8b, 0x3, 0x10000, 0x1ff, 0x8f, 0x2, 0x1, 0x1, 0xe4b5, 0x1, 0x0, 0x81, 0xfe2, 0x0, 0x0, 0x3, 0x8, 0x101, 0x10000, 0x16, 0x1, 0x0, 0x1, 0x9, 0x9, 0x5bb, 0x7, 0x7, 0x10000, 0xffff, 0x4, 0x80000000, 0x1, 0xf4, 0x64, 0x7, 0x1, 0x3, 0x400, 0xfffffffffffffffe, 0x6, 0x81, 0x200, 0x40, 0x3, 0xfffffffffffffffc, 0x16, 0x100000001, 0x3, 0x4, 0x0, 0x9, 0xffff, 0xfffffffffffffbff, 0x3, 0x800, 0x8, 0x5, 0x1, 0x7f, 0x1, 0x1f, 0x0, 0x81, 0x8, 0x9, 0x5, 0x5, 0x6, 0x3, 0x4c3c713a, 0x1, 0x8e6, 0xcd, 0x2, 0x100000001, 0x81, 0xe66, 0x5, 0x2e1, 0xb6, 0x80000001, 0x8, 0x8, 0x9, 0x3b6, 0x1, 0x5, 0x7, 0x24, 0x3, 0x5, 0x6, 0xf4, 0x2, 0x2, 0x4, 0x0, 0x81, 0x2, 0x5, 0x4, 0x1, 0x8, 0x8000, 0x4, 0x8000, 0x0, 0xe7f, 0x0, 0x5, 0x5, 0x9ee, 0x5, 0x80000001, 0x6, 0x0, 0x1, 0x1cb45f2f800, 0x5, 0x0, 0x9, 0x5, 0x2a3, 0x0, 0x3, 0x0, 0x7, 0xfffffffffffff800, 0x4, 0x80000000, 0x8, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x101, 0xffff, 0x1000, 0x5, 0x0, 0xf1, 0x1ff, 0x100, 0x9ac000000000, 0x5, 0x7, 0x800, 0x800, 0x8, 0x1, 0xa4e, 0x8000, 0x7, 0x9, 0x5, 0x5, 0x8001, 0x6, 0x5, 0x1, 0x7a, 0x200, 0x9, 0x5, 0x1, 0x1f80000, 0x2, 0x8, 0x10001, 0x2, 0x7, 0x800, 0x9, 0x3, 0x100000001, 0x1, 0xfffffffffffffdf3, 0x65, 0xfffffffffffffffe, 0x7f, 0xfffffffffffff637, 0x0, 0x2, 0x7fffffff, 0x893, 0x9, 0x9, 0x3f, 0x4, 0x62b8, 0x100000001, 0x9, 0x401, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x7ff, 0xffff, 0xfffffffffffffff7, 0x6, 0x37, 0x3fc000000, 0x20000, 0x8, 0x4, 0xc2d, 0x7d8, 0x10000, 0xf3d, 0x1, 0x100000000, 0x1f, 0xa000000000000000, 0x7fffffff, 0x7, 0x1, 0xf0, 0x7, 0x9, 0x4, 0x3e7000000, 0xffff, 0xb770, 0x7, 0xfffffffffffffff8, 0x1, 0x0, 0x37c, 0x800, 0xa, 0x8, 0x3ff, 0x7fff, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x81, 0xfff, 0x5, 0x4, 0x820, 0x7, 0x51, 0x800, 0x8116, 0xc87, 0xfffffffffffffffb, 0x10001, 0xff, 0xa4fd, 0x9, 0x7ff, 0x0, 0x1, 0x800, 0x81, 0x6, 0x91, 0x5, 0xddf0000000000000, 0x5, 0x7, 0x4, 0x40, 0xc4b, 0x3, 0x5, 0x2, 0x9, 0x20, 0x8001, 0x9, 0xc5e, 0x0, 0x3, 0xffffffffffffffb8, 0x20, 0x9, 0x1f, 0x10000, 0x0, 0x8, 0x7fff, 0x80000000, 0x7fffffff, 0x1, 0x7, 0x1, 0x10000, 0x8, 0x6, 0x2, 0x200, 0x6, 0x57994e1a, 0x200, 0x915, 0x2, 0x2, 0x101, 0x5, 0x1, 0x5, 0xff, 0xfff, 0x2, 0x48c, 0x3f, 0x4, 0x1, 0x83, 0x4, 0x8, 0xffff, 0x1, 0x635b, 0x1f, 0x7, 0x400, 0x9c12, 0xfffffffffffffbff, 0x8000, 0x1, 0x551, 0x4, 0x0, 0x2, 0xfffffffffffffff9, 0x9, 0x9, 0x7f, 0x0, 0x1, 0xffff, 0x3, 0x0, 0x10000, 0xdf4, 0x6, 0x1, 0x1, 0x2, 0x7, 0x1f, 0x80000000, 0x81, 0x40, 0x8, 0x10001, 0x5, 0x3f, 0x6, 0x6, 0x6, 0x0, 0x80000001, 0x10000, 0x401, 0x2, 0x7f, 0x100000001, 0x39d, 0x401, 0x2, 0x3, 0x8b1c, 0x5, 0x4, 0x0, 0x8d3b, 0x80000000, 0x9, 0x9e95, 0x4, 0x3, 0x8, 0x9, 0xde20, 0xfffffffffffffffd, 0xe7b9, 0x6, 0x2, 0x7a1, 0x9, 0x83, 0x9b70663, 0x100000000, 0x1, 0x7fff, 0x0, 0x9, 0x21, 0x5, 0x6, 0x7d9, 0x400, 0x2, 0x98, 0x6, 0x0, 0x61, 0x7ff, 0x40, 0x800, 0x0, 0x7, 0x1, 0x8, 0x7, 0x5, 0x400, 0xfffffffffffffff8, 0x400, 0x4e, 0x9, 0x3ff, 0x1, 0xfffffffffffffff8, 0x8, 0x1110, 0x380, 0x81, 0x1, 0x0, 0x6, 0x7, 0x100000000, 0x882, 0x8, 0x8, 0x20, 0x20, 0x4, 0x0, 0x4, 0x2, 0x800, 0x2, 0x9, 0x3, 0x0, 0x0, 0x1000, 0x1f, 0x1f, 0x1, 0x983, 0x3ff, 0x5, 0x1, 0x409f, 0x1, 0x5, 0x80000001, 0x4, 0x5, 0x5, 0x3, 0x3, 0x7, 0x100000000, 0x9, 0x80, 0x1ff, 0x2, 0x66, 0x8, 0x1c6, 0x2bc000000000000, 0x40, 0x0, 0x0, 0x3, 0x9, 0x9, 0x6, 0x9, 0x6, 0x0, 0x4, 0x40000000000, 0x7, 0x80, 0x40, 0x3, 0x7, 0x6, 0x0, 0xe917, 0xff, 0x0, 0xfffffffffffffff9, 0x6, 0x200, 0x80000000, 0x40, 0x4, 0x5, 0x0, 0x3ff, 0xff, 0x80000001, 0x5, 0x2, 0x101, 0xff, 0x100000000000000, 0x3, 0x2, 0x1ff, 0x808, 0x81, 0xffffffff, 0xfffffffffffffeff, 0x10001, 0x100000001, 0x0, 0x4, 0x3, 0x7, 0x8, 0x101, 0x1, 0x10001, 0x40, 0x80000000, 0x63a8, 0x3, 0x6, 0x80, 0x3, 0x0, 0x7f, 0x10001, 0x8, 0x3, 0x61a, 0x6, 0x9, 0xeee9, 0x9, 0xbe9, 0x20, 0x8001, 0x101, 0x970c, 0x9, 0x3f, 0x495, 0x7fffffff, 0x3, 0x3ff, 0x4, 0x1, 0x7ff800, 0x2, 0x6, 0xfffffffffffff801, 0x3, 0x25, 0x5, 0x1, 0x3d15f5b7, 0x4, 0x6, 0x4, 0x10000, 0x1000, 0xffff, 0x2, 0xd9ab, 0x5, 0x6, 0x1ff, 0x8, 0x40, 0x1, 0x1, 0x7, 0x5, 0x6, 0x10000, 0x10000, 0x200, 0x80000001, 0x2, 0xf74, 0x8, 0x5, 0x7, 0x10000, 0x7a, 0xb6, 0x3, 0x5, 0x1, 0x5d, 0x4, 0x4, 0x85e, 0x2, 0x6, 0x3, 0x80000001, 0x7, 0x20, 0x2, 0x7, 0xfffffffffffff800, 0x7, 0x0, 0x3, 0x0, 0x1, 0x3, 0x7fffffff, 0x7, 0x1, 0x7f, 0x2, 0x8, 0x8001, 0x0, 0x1, 0x0, 0x9, 0x6, 0x40, 0x1, 0x2, 0x1, 0x2, 0x100, 0x100000000, 0xde8, 0x7fff, 0x76, 0x0, 0x6, 0x4, 0x1, 0x100000000, 0x14b07dc4, 0xb78, 0x9, 0x80, 0x3fa, 0x1, 0x80, 0x87, 0x0, 0x0, 0x8000, 0x8, 0x6e64, 0x1, 0x0, 0x401, 0x5, 0x6, 0x2853, 0x8001, 0x7, 0x6, 0x3aa, 0x5, 0x3, 0x7, 0x5, 0x1, 0x9, 0x5, 0xfffffffffffffffd, 0x1, 0x8, 0x1b, 0xfffffffffffffff9, 0x4c8, 0x1, 0x3, 0x4, 0x8, 0x20, 0xfff, 0x9, 0x100000001, 0x40000000000000, 0x80, 0x4f98814b, 0xf1, 0x5, 0x1, 0x4, 0x8, 0x40, 0x3ff, 0x3, 0x101, 0x81, 0x800, 0x76, 0x5, 0xeab, 0x92, 0x5, 0x8, 0x3, 0x782, 0x7f, 0x8, 0xffff, 0x3, 0x7f, 0x2, 0x10000, 0xc43, 0xa13, 0x3f, 0x3, 0x6, 0x3, 0x2, 0x0, 0x4, 0x9, 0x80000000, 0x2d6d, 0x81, 0x5, 0x1, 0xf441, 0x9, 0x5, 0x0, 0xf0f, 0xff, 0x3f, 0x0, 0x1ff, 0x4, 0x100000001, 0x0, 0x3, 0x100000000, 0x9, 0xffffffff, 0x8001, 0xffffffffffffff81, 0x1, 0x8001, 0x1f, 0x9, 0x0, 0x4, 0x5, 0x2, 0xcb14, 0x1, 0x4, 0x5, 0x4, 0x80, 0xffffffff, 0x5, 0x9, 0xb2, 0xffff, 0x2, 0x10000000000, 0x36c, 0x3, 0x101, 0xff, 0x8, 0x7f, 0x3f, 0x80000001, 0x9, 0x2, 0x2, 0x2, 0x3948, 0x3, 0x100000000, 0x800, 0x0, 0x401, 0x80, 0x6, 0x6, 0x4, 0xfff, 0x3, 0x80, 0x8000, 0x200, 0x3, 0x200, 0x80000001, 0xc97b, 0x6, 0x4, 0x3, 0x1ff, 0x5, 0x200, 0x800, 0x0, 0x0, 0x100, 0x10001, 0xfff, 0xffffffffffffffff, 0x80, 0x100, 0x4, 0x491, 0xf45, 0x3, 0xffff, 0x8, 0x4, 0x6, 0x1, 0x3f, 0xffffffff, 0x5, 0x0, 0x5, 0x3ff, 0x5, 0xb7db, 0x3, 0x5, 0x0, 0x8001, 0x9, 0x9, 0x7fffffff, 0xf, 0xd7de, 0x3ff, 0xffffffffffffffff, 0x8, 0x7, 0x1, 0x5, 0x9, 0x7, 0x100000000, 0x100000001, 0xfffffffffffffffd, 0x8, 0x0, 0x3a, 0x3, 0xd27a, 0x7f, 0xe2, 0x7, 0x0, 0x8, 0x4, 0x7, 0x10000, 0x6, 0x100000001, 0x3, 0x8, 0x2c, 0x81, 0x3ff, 0x9, 0xff, 0x24a, 0x80, 0x8, 0xfffffffffffeffff, 0x2000, 0x8, 0x1, 0x5, 0x6, 0x8001, 0xd4, 0x80000000, 0x9, 0x5, 0x81, 0xfffffffffffffffd, 0x81, 0x8b2, 0x4, 0xb0df, 0x7fff, 0x80000000, 0x6, 0x30, 0x3, 0x1, 0x400, 0x6, 0x1, 0x8, 0x2, 0x9, 0x2, 0x100000001, 0x6, 0x1, 0xb7, 0xfffffffffffff801, 0x40, 0x0, 0x5, 0x81, 0x401, 0x8, 0x9, 0xd4, 0x1, 0x884, 0x8, 0x1, 0x5, 0x6, 0xffffffffffff32e1, 0xff80000, 0x1, 0xc46, 0xf6, 0x7ff, 0x5, 0x2, 0x1, 0xfffffffffffff801, 0x5, 0x1, 0x2, 0x7, 0x5, 0x0, 0x100, 0x1, 0x8000, 0x4, 0x4a, 0x9, 0x3, 0x7, 0x4, 0x5, 0x3, 0x4, 0x4, 0x1, 0x80000000, 0x0, 0x8001, 0x101, 0x0, 0x8001, 0x9, 0x80000001, 0x4e70, 0x55, 0xffffffffffffff9b, 0x59b, 0x7, 0x3372800000000000, 0xff, 0x5, 0x3, 0x8, 0xedd9, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x7fffffff, 0x800, 0x800, 0x4, 0x8, 0x0, 0x3f, 0x2, 0x0, 0x1, 0x9, 0x8000, 0x4, 0x40, 0xfffffffffffffffe, 0x2, 0x10000, 0xce5, 0x34, 0xfffffffffffffc01, 0x7, 0xffffffffffffffc1, 0x400, 0x80000000, 0x2, 0x101, 0x3f, 0xff, 0x2, 0xf038, 0x4, 0x3, 0x8, 0x80000000, 0x9, 0x1, 0x6c74, 0x1, 0xb7a2, 0x2, 0x6, 0x8290, 0x0, 0x6, 0x5, 0x2, 0x40, 0x1f, 0x101, 0x18000000, 0x1f, 0x7ff0000000000000, 0x1000, 0x10000, 0xabd3, 0x7, 0x6, 0x0, 0x0, 0x300000000, 0xfffffffffffffffa, 0x2, 0x5, 0x6, 0x100000001, 0x1, 0x5, 0x80, 0xffff, 0x40, 0x1, 0x9, 0x3, 0x9, 0x0, 0x4, 0x9, 0x20, 0x4, 0x3, 0xf2f, 0x7ff, 0x101, 0xfffffffffffffff8, 0x80, 0xef, 0xad, 0x8, 0x1, 0x10000, 0xfff, 0x100, 0x1000, 0x5, 0x1, 0x9, 0x0, 0x8, 0x80000001, 0x24, 0x73a, 0x2, 0x80000000, 0x3ff, 0x2, 0x8001, 0x2, 0x5, 0x4, 0x3, 0x3, 0x10001, 0x2, 0x8000, 0x6, 0x3, 0x6ae, 0x77, 0x3, 0x5, 0x9a79, 0xc000000000, 0x27, 0x4, 0x780d, 0x9e6, 0x1, 0x3, 0x8, 0x8, 0xd91, 0x7, 0x5, 0x3f, 0x40, 0x7, 0xffffffffffff0000, 0x8, 0x7fffffff, 0x4, 0x20, 0x100000001, 0x1f, 0x7fffffff, 0xef8, 0x7fffffff, 0x54da, 0xecdf, 0x0, 0x7f, 0x0, 0x10001, 0xa5, 0x4fc0000000000000, 0x6, 0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2, 0x2, 0x3f, 0xfffffffffffffeff, 0x80000001, 0xffff, 0x5, 0x20, 0x8, 0x0, 0x0, 0x7, 0x8000, 0x6528, 0x2, 0x800, 0x6, 0x3, 0xfffffffffffffffb, 0x10001, 0xfd60, 0x8, 0x3ff, 0x6, 0x8a, 0x3, 0x6, 0x6, 0x0, 0x72c, 0x6, 0x8, 0x10000, 0x9f, 0x1000, 0x9, 0x7, 0x7f, 0x9, 0x6, 0x1, 0x5, 0x6, 0x6, 0x8, 0x1, 0x800000000000000, 0x2, 0x0, 0x6, 0x1, 0x25, 0x4, 0x9b57, 0x6, 0x910000, 0x9, 0x1000, 0xfff, 0x8b50, 0x4, 0x5, 0x9, 0xfff, 0x4, 0xfffffffffffffffc, 0x7, 0x8, 0x4, 0x1, 0x3, 0x5d, 0x4, 0xffffffffffff41d1, 0x7, 0x5bf, 0x7ff, 0x9e4, 0xffff, 0x200, 0x9, 0x9, 0x8, 0x4, 0xfffffffffffffffa, 0x14, 0x84f, 0x2, 0x40ed, 0x1, 0x7, 0x10001, 0x5, 0x786, 0x401, 0x7fff, 0x8001, 0x6, 0x3, 0x2, 0x401, 0x7fff, 0x3, 0x7, 0x2, 0x0, 0x10001, 0x7, 0xc7a, 0x100000000, 0x1, 0x3f, 0x10000, 0x3ff, 0x8001, 0x1, 0x80, 0x80000000, 0x4, 0x9, 0x7, 0x4, 0x5, 0x3f, 0x8b64, 0x4, 0x5, 0x3ff, 0x1f, 0x43e, 0x1ff, 0xfffffffffffffffc, 0x6, 0xaffa, 0x1, 0x4, 0x1, 0x5, 0x6, 0x1, 0x1, 0x3333, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x4, 0x8, 0x5, 0x5, 0x6, 0x140000000000000, 0x0, 0x3, 0x80000000, 0x800000000, 0x6, 0x800, 0xfffffffffffffffa, 0x66f4, 0x6, 0x100400000, 0x3, 0x0, 0xc8c, 0x80000000, 0x100, 0xfec, 0x20, 0x100, 0x1859, 0x3, 0x6, 0x7fff, 0x62, 0x9, 0x8000, 0x3f, 0x0, 0x81, 0x3, 0xff, 0x1, 0xc5d, 0x100, 0xc9, 0x5, 0x7f, 0x5, 0x1ff, 0x8232, 0x4, 0x101, 0x30, 0x4c1, 0x3, 0xfffe000, 0x401, 0x3ff, 0x6, 0x9, 0x7, 0x9, 0x625e, 0xfffffffffffffffa, 0x7e0, 0x0, 0x5, 0xd8e, 0x3, 0xd6, 0x46ae, 0xf1, 0x9ee, 0x4, 0x1, 0x612, 0x7f, 0x1, 0x9, 0xff, 0x0, 0x5, 0x6, 0x4, 0x5, 0x6, 0x1, 0x7, 0x8dfe, 0x7fffffff, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffff41, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0xff, 0x6, 0x10000, 0x4fa, 0xfffffffffffffff7, 0x78bb, 0xb3, 0x5, 0x3ff, 0x5c7, 0xffff, 0x3, 0x401, 0xcb6, 0x6, 0x80000001, 0x5, 0x7fffffff, 0x0, 0x33, 0x401, 0x6, 0x11709b25, 0x8c, 0x8, 0x80, 0x80000000, 0x7, 0x5, 0x1000, 0xfff, 0xffffffffffffff43, 0x6e00000000, 0x7262, 0x4, 0xdc, 0x1, 0x8000, 0x4, 0x4, 0x4, 0x1, 0x3, 0xff, 0x26, 0x3, 0x3ff, 0x5, 0x6, 0x1b4, 0x9, 0x9, 0x564a, 0x9, 0x8, 0x9, 0x401, 0x0, 0x3, 0xfffe0000, 0x5, 0x4, 0x7fff, 0x8, 0xffffffffffffffff, 0x8, 0x81, 0x1000, 0xffffffff00000001, 0xffffffff7fffffff, 0x30, 0x100000000, 0x1000, 0x9, 0x7fff, 0x5, 0x200, 0x1, 0x3, 0x6, 0x72d, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffb, 0xffffffffffffffc1, 0x100000001, 0x5, 0xffffffff80000000, 0xffffffff, 0xec, 0x1, 0x6, 0xc78, 0xff, 0x81, 0x3f, 0x2, 0x2, 0x2, 0x1, 0x57307bc9, 0x6, 0x6a, 0x3, 0x3, 0x7fffffff, 0x9, 0x3, 0x8001, 0x9, 0x1, 0x7f, 0x0, 0x5, 0x5, 0xffffffffffffff80, 0x0, 0x40, 0x100000001, 0x6, 0x3, 0x5, 0xe0, 0x6, 0x100000001, 0x100000001, 0x2, 0x7, 0x0, 0x2000000000, 0xbe, 0x3, 0x0, 0x3, 0x185, 0x43b7, 0xbae6, 0x5, 0xff, 0x8, 0xffff, 0xfe9b, 0xffffffffffffffff, 0x8, 0x99d0, 0x3, 0x0, 0x400, 0x7, 0x1, 0x0, 0x7, 0xffffffff, 0x3f, 0x7, 0x200, 0x100, 0x8, 0x0, 0x1f, 0x7, 0xab, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0xfbaf, 0x7, 0xfe1b, 0x1995, 0xf232, 0x9, 0x7, 0x7, 0x6, 0x4, 0x0, 0x7fff, 0x9, 0x9, 0x1, 0x2, 0x2, 0x7, 0x9, 0xffffffffffff8000, 0x4, 0x6, 0x1, 0x41, 0x80, 0xfffffffffffffff8, 0x7, 0x619, 0x80000001, 0x6, 0x4e4bb944, 0x967, 0x7c, 0x3, 0x8, 0xfe, 0x8a16, 0x8000, 0x1, 0x400, 0xa0, 0x1, 0x8, 0x2c, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x3, 0x101, 0x3, 0x6, 0xffffffffffffff81, 0x1, 0x2, 0xa2, 0xd5, 0x0, 0xfffffffffffffffb, 0xd5f7, 0x7ab07a94, 0x3, 0x80000001, 0x1, 0x6, 0x10000, 0x40, 0x1, 0xfffffffffffffe00, 0x80, 0xffff, 0x1, 0x5, 0x3, 0x0, 0x8, 0x81, 0xae9, 0x3, 0x3ff, 0x401, 0x4, 0x400, 0x1f, 0x8, 0xb874, 0x3f, 0x3, 0x1, 0x800, 0x9, 0x80000000, 0x0, 0x1, 0x70862221, 0xd0, 0x1ff, 0x2, 0x401, 0x5, 0x9, 0x4, 0x101, 0xfffffffffffffffc, 0x4, 0x5, 0xaf, 0x7f, 0xc09, 0x31a778a2, 0x2, 0x3, 0x2cfbb397, 0xcb, 0x3, 0x9a49, 0x8, 0x2, 0xd607, 0x6, 0xffffffff, 0x1, 0x6, 0x1, 0x0, 0x4, 0x6, 0xb3f, 0x8, 0x8, 0x8001, 0x7ff, 0x6380000000000000, 0x8000, 0x32e, 0x4, 0x5, 0xffffffffffffffa9, 0x7, 0x4, 0xfffffffffffffff7, 0x401, 0x0, 0xb6f, 0x3, 0x8, 0x7, 0x2, 0x2, 0x3, 0x40, 0x4, 0x80000000, 0x4, 0x3, 0x9, 0x6, 0x1, 0x6, 0x3, 0x0, 0x1, 0x20, 0x28664699, 0x80000001, 0x7ff, 0x71, 0x3f, 0x8, 0x2, 0x3, 0x79, 0x2, 0x1f, 0x3, 0x81, 0x7ff, 0x100000001, 0x5, 0x86b4, 0xc0000000000000, 0x5, 0xa5f, 0x0, 0xec7, 0x3, 0x6, 0x8, 0x2, 0x5, 0x8, 0x7f, 0x800, 0x6ea1, 0x4, 0x1, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x6, 0xfffffffffffffffe, 0x6, 0x5, 0x7, 0x1576, 0x3f, 0x3, 0x2, 0x8, 0xfffffffffffffff8, 0x1, 0xfffffffffffffff9, 0x100, 0x101, 0xfffffffffffffff9, 0x5, 0x800, 0x3, 0xffffffff, 0x4, 0xbca2, 0x2, 0x0, 0x2, 0x1, 0x4, 0x1, 0x8, 0x2586, 0x6, 0x5, 0x9, 0x101, 0x8000, 0x797a, 0x48000000, 0xd2e, 0x0, 0xb077, 0x5, 0x8, 0x80, 0x1ff, 0x8, 0x8, 0x0, 0x6, 0x4, 0x2, 0x4, 0x8, 0x800, 0x1, 0x2, 0x1, 0x81, 0x4, 0x10001, 0x7, 0x0, 0x9, 0x5, 0x9, 0x1, 0x1f, 0x9, 0x3, 0xb4, 0x1, 0x3ff, 0x8, 0x5, 0xfffffffffffffff9, 0x6, 0x7, 0x7f, 0x1, 0x0, 0x101, 0x100000000, 0x1, 0x1, 0x80000001, 0x5, 0x529, 0x1, 0x100000000, 0x7b, 0x80, 0x8e, 0x9, 0x4, 0x4f1d53be, 0x1446, 0x100, 0x3, 0x9, 0x2, 0x9a6, 0x1000, 0x9, 0x3, 0x1, 0x9, 0x8, 0x400, 0x3, 0x67, 0x2, 0x1, 0xff, 0x8, 0xe88, 0x7fff, 0x5c, 0x5, 0xc08, 0x7ff, 0x3, 0x0, 0x4, 0x9, 0x80000000, 0x0, 0x4, 0x3, 0x2, 0x8001, 0xfffffffffffffffc, 0x800, 0x2, 0xe4, 0xfffffffffffffffa, 0x8001, 0x5, 0x2, 0xe4, 0x0, 0x4, 0x1, 0x9, 0x5, 0x7, 0x0, 0x6, 0x6, 0x8, 0x6b30397d, 0x7, 0x48fe, 0xffffffffffffffc0, 0x0, 0xfffffffffffff000, 0xbc16, 0x401, 0x0, 0x91, 0x7ff, 0x2, 0x8, 0x20, 0x0, 0xffffffffffffff81, 0x0, 0xfffffffffffffffe, 0x9, 0x8, 0x2, 0x80, 0x6, 0xfffffffffffffffd, 0x8, 0x4, 0x7, 0x80000001, 0x894, 0xf9, 0x1, 0x1f, 0x2, 0x0, 0x6, 0xffffffff00000001, 0x5, 0x975, 0x8000, 0x6, 0x7, 0x800, 0x8, 0x1000, 0x3f, 0x7fffffff, 0xa4, 0x80, 0x7, 0xffff, 0x3, 0x4, 0x3, 0x0, 0x9, 0x400, 0xa1, 0x4, 0x8, 0x9, 0x499c, 0x4d, 0x0, 0x7, 0x5, 0x3, 0x2, 0x8c4, 0x21a1, 0xffffffff, 0x8, 0x9, 0x4, 0x6, 0x9, 0x58, 0xe000000000, 0x2, 0x3bf842bd, 0x3, 0x6, 0x8, 0x35fa75d800000, 0x2, 0xd17, 0x1000, 0x5, 0x200, 0x8, 0x800, 0x8000, 0x336f1bb8, 0x3ff, 0xffff, 0x5, 0x1, 0x5, 0x10000, 0x2000000000000000, 0x200, 0x4, 0x3, 0x400, 0x1, 0x101, 0x5, 0x9ad, 0xa9, 0x794, 0x4, 0x9, 0x2, 0x3, 0x47, 0x3, 0x7, 0x1, 0x4, 0xffffffffffffffff, 0x100000001, 0x6, 0x100000000, 0x7, 0x800, 0x1, 0x6942, 0x3f, 0x252, 0x634a6600, 0x3f, 0x9, 0x7fffffff, 0x74, 0x6, 0x1, 0x24b3, 0x0, 0x81, 0x9, 0x4, 0x7ff, 0xbc, 0x10001, 0xfffffffffffffff9, 0x6, 0x4, 0x80000001, 0x1, 0x7, 0x5, 0xffff, 0xfffffffffffff001, 0x68d, 0x0, 0x1, 0x6, 0x7, 0x40, 0x3, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18000, 0x2, 0x7ff, 0x0, 0xfffffffffffffffe, 0x1000, 0x3, 0x12f289ba, 0x4, 0x101, 0x81, 0x4, 0x1f, 0x1814, 0x7, 0x100000000, 0x9, 0xfff, 0x4, 0x80, 0x61e, 0x1000, 0x1, 0x8, 0x6, 0x9, 0x100000001, 0xa31, 0x3, 0xfffffffffffffffc, 0xb8b, 0x23f, 0x9, 0x8, 0x400, 0x7, 0x10000, 0x44ae, 0x400, 0x6, 0x0, 0x2, 0x8, 0x6, 0x10001, 0x7, 0x3f, 0x5, 0x2, 0x5, 0x3, 0x9, 0x1, 0x1, 0x9, 0x744b, 0x0, 0x9, 0xfffffffffffffffa, 0x5, 0x6, 0x1, 0xff, 0x6, 0x400, 0x0, 0x8, 0xffff, 0x5, 0x101, 0x100000000, 0x3, 0x0, 0x1ff, 0x1, 0x6388, 0x4, 0x80000000, 0x5, 0x6, 0x5, 0xffffffffffffff7f, 0x2, 0x0, 0x100000000, 0x3, 0x18, 0x5, 0x9, 0x3, 0x8, 0x1, 0xd59, 0x401, 0x4, 0x40, 0x8, 0x3, 0xb42, 0x7, 0x4, 0x1ff, 0x8000, 0x5, 0x0, 0xc0, 0x100, 0x1, 0x3, 0xffffffffffffff53, 0x7, 0xfffffffffffffe00, 0x2000000000000, 0x2db, 0x8, 0x14000000, 0x0, 0x10001, 0x7fffffff, 0x80000001, 0x0, 0x3f, 0x9, 0x8, 0x8, 0x4, 0x3, 0x9, 0x8f, 0x6, 0x2085, 0xcb31, 0x3, 0x0, 0x8001, 0x7, 0x101, 0x8, 0x0, 0x1, 0x400, 0xfff, 0x800, 0x2, 0x2, 0x9, 0x8, 0x800, 0x0, 0x1, 0x0, 0x1f00000000000, 0x1, 0x3, 0x3, 0x4, 0x2a2, 0x6, 0x7f, 0x1, 0x10001, 0xff, 0x3, 0xab64, 0x13e0, 0x2, 0x6c2f, 0x9, 0xfff, 0xfff, 0x53, 0x7ff, 0xac1e, 0xd52f, 0x10000, 0xffffffff, 0x0, 0x1, 0xfffffffffffff16b, 0x2, 0x10001, 0x5, 0x1ff, 0x0, 0x7, 0x1, 0x6, 0x80, 0x3, 0x1, 0x7, 0x8, 0x1, 0x1, 0x2, 0x100, 0xffff, 0x8, 0x80, 0x81, 0xb792, 0x2, 0x5, 0x7fff, 0xfb8, 0xffffffffffff0000, 0x4, 0x100, 0x1, 0x1ff, 0x5, 0x100000001, 0x5, 0x3ff, 0x9, 0x0, 0x200, 0x101, 0x8001, 0x2f1, 0x5, 0x9, 0xa5, 0x4, 0x1, 0x2, 0x6, 0x305, 0xfffffffffffffc00, 0xfffffffffffffffc, 0xfff, 0x0, 0x0, 0x81, 0x1, 0x8f39, 0x1f, 0xf47, 0x7, 0x400, 0x2400000000000000, 0x10001, 0x401, 0x6, 0x3, 0x6, 0x6, 0x4, 0xfff, 0x20, 0x2, 0xb1, 0xffffffff, 0x6, 0x2, 0xa3a0, 0x1, 0x1, 0x680e, 0x9, 0x4, 0xe8e3, 0x80, 0x9, 0x3370, 0x5, 0xfffffffffffeffff, 0x5, 0x0, 0x1, 0x3, 0x64a4, 0x6, 0x2, 0x8, 0x400, 0x8, 0x2, 0x7, 0x400, 0xe4, 0x2, 0x4, 0x5, 0x7fff, 0x4, 0x35c7, 0x2, 0x9, 0x7, 0xfffffffffffffffe, 0xe476, 0x100000001, 0x6, 0x1, 0x7, 0xd5e4, 0x6, 0x2, 0x4, 0x80000000, 0x0, 0x6, 0x101, 0x5, 0x8, 0x0, 0x5, 0x9, 0x10b9e278, 0x8f, 0x1, 0x6, 0x2, 0x6, 0x91b, 0x8, 0x2, 0x6, 0x2, 0x5, 0x5, 0xb34d, 0x0, 0x7, 0x100000000, 0xffffffff, 0x2, 0x9a, 0x2, 0xf93, 0x8, 0x3, 0x401, 0x8, 0x3, 0x9013, 0x10001, 0xffffffff, 0x4, 0x0, 0x6, 0xc93, 0x8000, 0x6, 0x2, 0x401, 0x2, 0x0, 0x0, 0x5, 0x7fff, 0x5, 0x2, 0x0, 0x80000000, 0x1, 0x2, 0x682, 0x101, 0x7, 0xbf, 0xffff, 0x1, 0x9, 0x20, 0x0, 0x100000000, 0xfff, 0x2, 0x2, 0x5, 0x0, 0x4, 0x78, 0x1, 0x100000000, 0x8, 0x8, 0x5, 0x20, 0x7, 0x7, 0x7, 0x200, 0x80000001, 0x3, 0x10001, 0x8, 0x401, 0x3, 0x3, 0x1, 0x0, 0x80000000, 0xffffffffffffffff, 0xdab, 0x8, 0x6, 0x7, 0xffffffffffff0001, 0x1, 0xa6, 0x4, 0x7ff, 0x7f, 0x1000, 0x1ff, 0x9, 0x81, 0x100000000, 0x7, 0x4, 0x2, 0x2, 0x7, 0x9, 0x4, 0x20, 0x9, 0x0, 0x80000000, 0xd9d1, 0xffffffff, 0x1, 0x8, 0x80000001, 0x8, 0x6, 0x8, 0x7, 0x0, 0xffffffffffff8000, 0x0, 0x6af, 0x530, 0x80, 0x37, 0x3ff, 0x81, 0xaed6, 0x1ff, 0x5, 0x4, 0x8, 0x0, 0x5, 0xfffffffffffffffa, 0x2, 0x9, 0x6, 0x9, 0x2, 0x8, 0x6, 0x80000000, 0x1, 0x0, 0x1ff, 0xb8, 0x7ff, 0x80000000, 0x7, 0x7, 0x6, 0x8, 0x81, 0xcf6, 0xfffffffffffff001, 0x3, 0x6, 0x31f, 0x6, 0x5, 0x6, 0x3, 0x3, 0x9, 0x9, 0x3, 0x6, 0xffff, 0x1, 0x0, 0x2, 0x3, 0x4, 0x3, 0x7, 0xed18, 0x2, 0x1ff, 0x7fff, 0x9, 0x6, 0x1, 0x9, 0x3f, 0x5, 0x80000000, 0x1c7, 0xaf42, 0xf66, 0x4, 0x9c5b, 0x4, 0x50f6f2a9, 0x40, 0x1ff, 0x7, 0x9, 0x46f, 0x100000000, 0x5, 0x7, 0xfffffffffffffffa, 0x2, 0x3, 0x5, 0x0, 0x2, 0x40, 0x8, 0x8, 0x24ff, 0x514, 0x10000, 0xdc, 0x4, 0x8, 0x1ff, 0xff, 0x4, 0xffffffff00000000, 0x1ff, 0x6, 0xc7, 0x81, 0x5, 0x81, 0x100000001, 0x80000000, 0x3, 0x5, 0x39, 0x10000, 0x9, 0x1, 0x2, 0x8001, 0x40, 0x7, 0x6, 0x6, 0x1000, 0x10000, 0xf817, 0x76, 0x6, 0x3, 0x8, 0x7, 0x600000, 0x20, 0x1, 0x535, 0x6, 0x6, 0x1ff, 0x5, 0x401, 0xfff, 0x8, 0x81, 0x0, 0x8000, 0x3, 0x40, 0x8, 0x5, 0x1a3c, 0x6, 0x0, 0xf8, 0x1, 0x9, 0x5, 0x3ff, 0x8001, 0x2, 0x100000000, 0xfffffffffffffffa, 0x9, 0xa673, 0x9, 0xfe000000000, 0x7ff, 0x1b3f, 0x7fff, 0x303], "1ae9c0830982aa5a7128bdbdef447be8ec4bfe1f10f0020922a6ee08ef6cf1a6a0bcf8ae4d2189d9afe22917b2d7c79e97f18daf49826d58b010c3cca5bc08b2b112db83d32c086dfeb98095d767aec71458d0996b579707c6facc2dd541b9a840dbce603c9c59995641962d690c811d06fdc409e0936706efac88712ad5933d3cdd639426cb2f22d1be07109534767f15cea6bcdd0f43a628d5d5b9fb383d0232"}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319b") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.417166] input: syz1 as /devices/virtual/input/input2780 [ 491.452180] input: syz1 as /devices/virtual/input/input2781 [ 491.482051] input: syz1 as /devices/virtual/input/input2782 20:18:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.585179] input: syz1 as /devices/virtual/input/input2783 20:18:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.666059] input: syz1 as /devices/virtual/input/input2784 20:18:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.717084] input: syz1 as /devices/virtual/input/input2785 [ 491.725219] input: failed to attach handler leds to device input2783, error: -6 [ 491.762076] input: syz1 as /devices/virtual/input/input2786 [ 491.789481] input: syz1 as /devices/virtual/input/input2787 20:18:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) 20:18:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319b") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.820895] input: failed to attach handler leds to device input2785, error: -6 20:18:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.868000] input: syz1 as /devices/virtual/input/input2788 20:18:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.919358] input: syz1 as /devices/virtual/input/input2789 [ 491.920861] input: syz1 as /devices/virtual/input/input2790 20:18:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 491.976780] input: syz1 as /devices/virtual/input/input2791 20:18:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.017107] input: syz1 as /devices/virtual/input/input2792 [ 492.044657] input: failed to attach handler leds to device input2790, error: -6 [ 492.051654] input: syz1 as /devices/virtual/input/input2793 [ 492.068339] input: failed to attach handler leds to device input2791, error: -6 20:18:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319b") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.164752] input: syz1 as /devices/virtual/input/input2794 20:18:21 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x93) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x400, 0x5, 0x7df, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) [ 492.249096] input: syz1 as /devices/virtual/input/input2795 20:18:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) 20:18:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x204040, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0x200, 0x3, 0x3}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) mkdir(&(0x7f0000000080)='./control\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x3fff) r4 = gettid() fcntl$setown(r3, 0x8, r4) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x21) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000962) mkdir(&(0x7f0000000140)='./control/file0\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 492.323956] binder: 21798:21801 BC_FREE_BUFFER u0000000000000000 no match 20:18:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.376443] input: syz1 as /devices/virtual/input/input2796 [ 492.405394] input: syz1 as /devices/virtual/input/input2797 20:18:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 492.431032] binder_alloc: binder_alloc_mmap_handler: 21807 20001000-20002000 already mapped failed -16 [ 492.461427] input: syz1 as /devices/virtual/input/input2798 20:18:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd0") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.549273] input: syz1 as /devices/virtual/input/input2800 [ 492.550118] input: syz1 as /devices/virtual/input/input2799 20:18:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x10000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.608658] binder_alloc: binder_alloc_mmap_handler: 21820 20002000-20006000 already mapped failed -16 [ 492.621246] input: syz1 as /devices/virtual/input/input2801 [ 492.633193] binder_alloc: binder_alloc_mmap_handler: 21820 20001000-20002000 already mapped failed -16 20:18:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1=0xac1414aa}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 20:18:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21001008912, &(0x7f0000000040)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x5, 0xc481, 0x4, 0x7, 0x9, 0xffffffff}}) [ 492.669510] input: syz1 as /devices/virtual/input/input2802 [ 492.704732] input: syz1 as /devices/virtual/input/input2803 20:18:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.766106] input: syz1 as /devices/virtual/input/input2804 [ 492.801650] input: failed to attach handler leds to device input2803, error: -6 20:18:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd0") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.831315] binder_alloc: binder_alloc_mmap_handler: 21842 20002000-20006000 already mapped failed -16 [ 492.834139] input: syz1 as /devices/virtual/input/input2805 [ 492.853519] binder_alloc: binder_alloc_mmap_handler: 21842 20001000-20002000 already mapped failed -16 20:18:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) [ 492.890138] input: syz1 as /devices/virtual/input/input2806 20:18:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r2) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) shutdown(r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="5e20a9cfb5bbd13329626b57aa2dd2324d24c57ead72edae84b53296e637e79564f828d1ebb7876b55a864467d1029b198b5d8efc311070a0eb3bf6f15596972a77d1bf58241cee9f568719b47a4d92bb982c6b3379c27bf7d6f8a2a1a7155ead543d5539a07c606496ad98e0f878bbd28f64c9e34c54df9633092a6cbeaa109e31feb1c840ec54588", 0x89, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 492.941170] input: syz1 as /devices/virtual/input/input2807 [ 493.015374] binder_alloc: binder_alloc_mmap_handler: 21860 20002000-20006000 already mapped failed -16 [ 493.041125] binder_alloc: binder_alloc_mmap_handler: 21860 20001000-20002000 already mapped failed -16 [ 493.041685] input: syz1 as /devices/virtual/input/input2808 [ 493.057300] input: syz1 as /devices/virtual/input/input2810 20:18:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.067195] input: syz1 as /devices/virtual/input/input2809 20:18:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd0") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.121099] input: syz1 as /devices/virtual/input/input2811 [ 493.135675] input: syz1 as /devices/virtual/input/input2812 20:18:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.190769] input: syz1 as /devices/virtual/input/input2813 20:18:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x35, 0x1, 0x9, "1db796d2ed2a7f3d66863c1a898fead9", "8c478fe72c14897e98ec907e7bbd8f276f846e356a4020e80983dc9b037cb78e"}, 0x35, 0x1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.241574] input: syz1 as /devices/virtual/input/input2815 [ 493.248773] binder_alloc: binder_alloc_mmap_handler: 21881 20002000-20006000 already mapped failed -16 20:18:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r2, 0x0, 0x0) fallocate(r2, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) [ 493.297982] input: syz1 as /devices/virtual/input/input2817 20:18:22 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r1, 0x0, 0x0) fallocate(r1, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x11) 20:18:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.382881] input: syz1 as /devices/virtual/input/input2818 20:18:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x4800000000000, 0xfffffffffffffe00, 0x4738, 0x8}, 'syz1\x00', 0x56}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x1, 0x7, 0x0, 0xd263, 0x0, 0x5, 0x200, 0x4, 0x3, 0x2, 0xf5c, 0x9, 0xfffffffffffffffc, 0x941, 0x400, 0x6, 0x8001, 0x1, 0x9, 0x7, 0x6, 0xfe00, 0x41ed, 0x2, 0x5222, 0x6, 0x1, 0x81, 0x40, 0x404c78e2, 0x101, 0xffffffffffffe4d5, 0x7, 0xda4, 0xd359, 0x8, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x3, 0xf, 0xfffffffffffffffb, 0x5, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='/dev/uinput\x00', r1}, 0x10) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.482209] input: syz1 as /devices/virtual/input/input2819 [ 493.495984] input: syz1 as /devices/virtual/input/input2820 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r1, 0x0, 0x0) fallocate(r1, 0x1003, 0xfffffffffffffffa, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x100, 0x0) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 493.564352] input: syz1 as /devices/virtual/input/input2823 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hwclock_exec_t:s0\x00', 0x24) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r1, 0x0, 0x0) fallocate(r1, 0x1003, 0xfffffffffffffffa, 0x1) [ 493.702745] input: syz1 as /devices/virtual/input/input2828 [ 493.716284] input: syz1 as /devices/virtual/input/input2830 [ 493.749841] input: syz1 as /devices/virtual/input/input2832 [ 493.817085] input: syz1 as /devices/virtual/input/input2833 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x440, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'veth1_to_bond\x00', 0x80000000}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) write$P9_RGETLOCK(r1, 0x0, 0x0) 20:18:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)={{0xcc, 0x9, 0x7ff, 0x38b, 0xb, 0xffffffffffff03d0, 0x8000000000378, 0x4}, "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 0: r0 = getgid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setresgid(r0, r1, r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r3, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) 20:18:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=@dstopts={0x33, 0x5, [], [@jumbo={0xc2, 0x4, 0x20}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x0, [0x4, 0xffff, 0x5]}}, @enc_lim={0x4, 0x1, 0xffffffff}]}, 0x38) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x0, 0x0, 0x0, 0x4}, 0x10, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="65418882ea7b3f8fe1584624534e2c945b4dfef1aa5c71ccf5ccd9d0b9dabf62a985e24870d5e902b41c2205f27cce4399f7e5a569999bfbf93eedf21209966300ba4d1775eb9aa17f450279bc2f5b502fb7b042bc9a97a740b2d78989bf1a70b28b219400d5c2c254e2ec74fe1c56d0c3406726e7568d278e9f2f2f4f8e84449d57a2453e6b95209b2d9417f164fa47d2d6d6be96a88232ca95f2b8c03ccf2b44bd2325df67510f65c97e09ced0d7a724b726ff79829f816c15b3f41d1794d32fe4fe4d25cecebdfcdded897599279e3a7e27f85caf430e277987341fd9f9d9645ec0b92e4dc840bf31110193eea8d648bef6a271ef9a29573c1647b8f36df4") [ 493.970375] input: syz1 as /devices/virtual/input/input2836 [ 494.013350] input: syz1 as /devices/virtual/input/input2835 [ 494.052495] input: syz1 as /devices/virtual/input/input2839 20:18:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.079635] input: syz1 as /devices/virtual/input/input2840 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000002540)={0x6, 0x0, 0x0, 0x1, 0xa, 0x11e5, 0x2, 0x2d7b, 0x0, 0x0, 0x0, 0x3}) 20:18:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0xffffffffffffff15]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.147163] input: syz1 as /devices/virtual/input/input2842 [ 494.182772] input: syz1 as /devices/virtual/input/input2841 20:18:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000000)=""/155, &(0x7f0000000100)=0x9b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='/dev/uinput\x00', r1}, 0xfffffffffffffd9c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x7, 0x6, 0x0, 0x7919}, 'syz0\x00', 0xc}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x9, 0x7ff, 0xfffffffffffffffc, 0x3}, 0x53, [0x9, 0x54, 0xffffffffffff9850, 0x6, 0x1, 0x0, 0x6, 0x2, 0x80000001, 0x7, 0xfffffffffffffff9, 0x81, 0x3b75, 0x9, 0x5, 0x80000000, 0x4, 0x622, 0x3, 0x7, 0x23c5, 0x3, 0xfff, 0x80000000, 0x8, 0x7, 0x3, 0xfffffffffffffffb, 0x7, 0x5, 0xffffffffffffffff, 0x1f, 0x8, 0x7ff, 0x3dacaec3, 0x308, 0x1, 0x1ce, 0x3, 0x9, 0x2, 0x9, 0x8, 0xd1c, 0xfff, 0x401, 0x6, 0x7, 0x3, 0x7, 0x2, 0x4, 0x7, 0x2b, 0x1, 0x7, 0xc000000000000000, 0xfffffffffffffffd, 0x33, 0x80, 0x1000, 0x5, 0x7fff], [0x100000000, 0x5983, 0x8000, 0x5, 0x7fff, 0x3, 0x7fff, 0x1f, 0x3, 0x7, 0x5, 0x422, 0x8, 0xff, 0x0, 0x40, 0x9, 0x3f, 0x4, 0x2, 0x100, 0x9, 0x4, 0xfffffffffffffffd, 0xabba, 0x9, 0xfe, 0x6, 0x400, 0xffffffff80000000, 0x0, 0xff, 0x5, 0x9, 0x7fff, 0xfffffffffffffff8, 0x2, 0x3, 0xa9a, 0x4, 0xffffffff, 0x2, 0x46f, 0x800, 0x7, 0x134, 0x5, 0x1, 0x0, 0x919, 0x8, 0xfffffffffffffffd, 0x3c2f32ef, 0x40, 0xffffffffbaba6dfa, 0x7, 0x6733, 0x4, 0x1, 0x7, 0x1, 0x7, 0x0, 0xb7ce], [0x1000, 0x0, 0xffffffff, 0xfffffffffffffffa, 0x100000000, 0x11d0, 0x1, 0x6, 0xb81, 0x78c, 0x80000001, 0x7f, 0x6, 0x728, 0x20, 0x2, 0x101, 0x40, 0x8, 0x1, 0x3f, 0x8, 0x101, 0x2, 0x1, 0x16c, 0x7, 0x10000, 0x0, 0x0, 0x2, 0x2df, 0x6, 0x1, 0x4, 0x2, 0x0, 0x400, 0xffff, 0x100000001, 0x1, 0x7ff, 0x6, 0x8000000, 0x100000001, 0x1, 0x2, 0x0, 0xffffffffffffb782, 0x7fff, 0x0, 0xe00, 0x3f, 0x8001, 0x0, 0x100000000, 0x6, 0xff, 0x9966, 0x7, 0xa0, 0x100, 0x80800000000, 0x80], [0x3, 0x0, 0x4, 0x101, 0x165b2ac3, 0x3ff, 0x2, 0x4, 0x9, 0x1f, 0x7f, 0x5, 0x1ff, 0x0, 0x100000001, 0xffffffffffff0001, 0x0, 0x0, 0xdd, 0x5, 0x401, 0x7fffffff, 0x81, 0xfff, 0x9c, 0x1, 0xfffffffeffffffff, 0x103, 0x7fffffff, 0x7, 0x5, 0x6, 0x8, 0x6f9b, 0x101, 0x1ff, 0x1e5, 0xfff, 0x401, 0x0, 0x4, 0x8001, 0x81, 0x843, 0x726f217, 0x8, 0x4eaf, 0x4, 0x1000, 0xff, 0x4, 0xfae6, 0x6, 0x9, 0x9, 0x4, 0x4, 0x7298f6af, 0x7, 0x100, 0x4, 0x0, 0x3, 0x100]}, 0x45c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='status\x00') ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000005c0)=0x1) [ 494.219803] input: syz1 as /devices/virtual/input/input2844 [ 494.232158] input: syz1 as /devices/virtual/input/input2845 [ 494.255062] input: syz1 as /devices/virtual/input/input2846 20:18:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/38) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x8001, 0x1000, 0x5}) [ 494.317183] input: syz1 as /devices/virtual/input/input2847 [ 494.354366] input: syz0 as /devices/virtual/input/input2848 20:18:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.382269] input: syz1 as /devices/virtual/input/input2849 [ 494.394029] input: syz1 as /devices/virtual/input/input2850 20:18:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.438214] input: syz1 as /devices/virtual/input/input2851 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) socket$inet(0x10, 0x3, 0x0) [ 494.498573] input: syz1 as /devices/virtual/input/input2853 [ 494.505617] input: syz1 as /devices/virtual/input/input2854 20:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r2 = epoll_create1(0x80000) epoll_wait(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x406, r0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) [ 494.576540] input: syz1 as /devices/virtual/input/input2855 [ 494.601161] input: syz1 as /devices/virtual/input/input2856 20:18:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.668295] input: syz1 as /devices/virtual/input/input2858 [ 494.691098] input: syz1 as /devices/virtual/input/input2857 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:18:23 executing program 1: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8}]}, 0x1c}}, 0x4000000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000880)="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") r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r3) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xb) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 494.727459] input: syz1 as /devices/virtual/input/input2859 20:18:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = fcntl$dupfd(r1, 0x0, r1) statx(r2, &(0x7f0000000040)='./file0\x00', 0x4800, 0x100, &(0x7f0000000180)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x0, {0x2, 0x4e20, @local}, 'nlmon0\x00'}) r4 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000280)=r4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000002c0)=0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.826434] input: syz1 as /devices/virtual/input/input2862 [ 494.845369] input: syz1 as /devices/virtual/input/input2863 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') lstat(0x0, 0x0) 20:18:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.868387] input: syz1 as /devices/virtual/input/input2864 20:18:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9, 0x80000001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') [ 494.947838] input: syz1 as /devices/virtual/input/input2865 20:18:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x16b, 0x0, "631b69e31ca27d7ce769cd3cdb18e714cfc39847c2897efe6931f3a2f97c237a4f8efaf8bd714ed93a61aded69044bf7d64a5f92baafeb63ea9c3a1e94c24e", 0x20}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x3f, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)=""/63}, &(0x7f00000001c0)=0x78) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1000008) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 494.993988] input: syz1 as /devices/virtual/input/input2866 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) 20:18:23 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 495.049647] input: syz1 as /devices/virtual/input/input2867 [ 495.064319] input: syz1 as /devices/virtual/input/input2868 20:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x20) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c810000", @ANYRES16=r3, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x24008090}, 0x8080) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x406, r1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x6, 0x30d, 0x6, 0x1}, 'syz0\x00', 0x4f}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x21c602, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.124673] input: syz1 as /devices/virtual/input/input2869 [ 495.145512] input: syz1 as /devices/virtual/input/input2870 [ 495.151335] input: failed to attach handler leds to device input2867, error: -6 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) 20:18:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt(r1, 0x1, 0x8, &(0x7f0000000100)=""/187, &(0x7f0000000040)=0xbb) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.241496] input: syz1 as /devices/virtual/input/input2872 [ 495.273573] input: syz0 as /devices/virtual/input/input2873 20:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) epoll_create(0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.289496] input: syz1 as /devices/virtual/input/input2874 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.355752] input: syz1 as /devices/virtual/input/input2876 [ 495.371256] input: syz1 as /devices/virtual/input/input2877 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) [ 495.401810] input: syz1 as /devices/virtual/input/input2878 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) 20:18:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) setfsuid(r3) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.557173] input: syz1 as /devices/virtual/input/input2881 [ 495.597084] input: syz1 as /devices/virtual/input/input2882 20:18:24 executing program 0: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='syz1\x00'], &(0x7f0000000280)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='/dev/uinput\x00', &(0x7f00000001c0)='keyringnodevvmnet0vmnet1^keyring\x00', &(0x7f0000000200)='syz1\x00', &(0x7f0000000240)='.\x00']) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_evm(r1, &(0x7f0000000500)='security.evm\x00', &(0x7f0000000540)=@v2={0x3, 0x2, 0x14, 0x8, 0x6f, "f9ad7c2b05117e23a8a4b2d206525e005c4ea081314083d986f0e748e2853cc4a0b9d80f77e527dc6e3dca9605da5494c37ff6a9eaa01ef931405fe21a46d31b6e1e913e72df11450054869cf4c2f60cd8974c247441afae5ff2356456ef359b2734f431dceacaf5768a470b52292f"}, 0x79, 0x0) ioctl(r1, 0x21000008915, &(0x7f0000000080)="0adc1f126215aefa9bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000300)='/dev/uinput\x00', &(0x7f0000000340)='#wlan0\x00', &(0x7f0000000380)='keyringnodevvmnet0vmnet1^keyring\x00', &(0x7f00000003c0)='/dev/uinput\x00', &(0x7f0000000400)='/dev/uinput\x00'], &(0x7f00000004c0)=[&(0x7f0000000480)='.\x00']) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) 20:18:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88010000", @ANYRES16=r2, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10408048}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0xb00, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x84) ptrace$getregset(0x4204, r3, 0x7, &(0x7f0000000880)={&(0x7f0000000380)=""/94, 0x5e}) 20:18:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) recvfrom(r1, &(0x7f0000000880)=""/4096, 0x1000, 0x1, 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) [ 495.635813] input: syz1 as /devices/virtual/input/input2883 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6, 0x3b6f]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) [ 495.749043] input: syz1 as /devices/virtual/input/input2886 [ 495.772301] input: syz1 as /devices/virtual/input/input2890 [ 495.784592] input: syz1 as /devices/virtual/input/input2885 20:18:24 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1b, 0x0, 0x9) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x394}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}}}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa377}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xba2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1595cc0a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20044041}, 0x40001) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3, {0x1ff, 0x1, 0x0, 0xe780000, 0x0, 0x1000}}) [ 495.798689] input: syz1 as /devices/virtual/input/input2888 20:18:24 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 495.880187] input: syz1 as /devices/virtual/input/input2891 20:18:24 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 20:18:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="0adc1ff43b353f3130396e542f45f47baec6ef719bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x81}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) 20:18:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 495.972681] input: syz1 as /devices/virtual/input/input2892 [ 495.980388] input: syz1 as /devices/virtual/input/input2893 20:18:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x1, 0x0, 0x2b0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='blacklist\x00', &(0x7f0000000100)=')}lo\x00') ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:24 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 20:18:25 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) [ 496.030208] input: syz1 as /devices/virtual/input/input2895 [ 496.051654] input: syz1 as /devices/virtual/input/input2894 20:18:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 496.118651] input: syz1 as /devices/virtual/input/input2896 [ 496.126531] input: syz1 as /devices/virtual/input/input2897 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 496.161724] input: syz1 as /devices/virtual/input/input2898 [ 496.217849] input: syz1 as /devices/virtual/input/input2899 [ 496.233454] input: syz1 as /devices/virtual/input/input2900 20:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="94") ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x0, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 20:18:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = socket(0x19, 0xfef229ced677e668, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4) 20:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa, 0x100]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x10000, 0x75}, {0x4, 0xfffffffffffff9bb}], r1}, 0x18, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 496.513489] input: syz1 as /devices/virtual/input/input2902 [ 496.525859] input: syz1 as /devices/virtual/input/input2905 20:18:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername(r1, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20, 0xfffffffffffffffa]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 496.559068] input: syz1 as /devices/virtual/input/input2904 [ 496.580963] input: syz1 as /devices/virtual/input/input2906 [ 496.607720] input: syz1 as /devices/virtual/input/input2907 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 20:18:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 496.632879] input: syz1 as /devices/virtual/input/input2908 [ 496.655310] input: syz1 as /devices/virtual/input/input2909 [ 496.732151] input: syz1 as /devices/virtual/input/input2910 20:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000040)=0x6, 0x12) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000140)="19dc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x1, 0x1, 0x2}, 0x571d}}, 0x18) 20:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff, 0x20]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xfff, &(0x7f0000000100)="f9ffdcffb19d4cd2ffffff7126dd0128e1ac7b122a00545e65a671fda6ecd7dcb63b1ffbd830aa3dcc927299bf901eaf6a02b17147ad7d81158a1a58ee13135ee39a7bac2cba1ce317725f8b2478048ebb0b19a88668fdf8ed809195421004b78a930292516ae0b8cb755b4849600fd74ce26ed26e95cd2ec4cf99043acc9a") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a0000000000000]}, 0x45c) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/224) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x6, 0x5, 0x1, 0xfffffffeffffffff}, 'syz0\x00', 0x48}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4f, 0x400, 0x6, 0x4}]}) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r2, 0x0, 0xe9f4c0b7aed9ca72, 0x45, 0x0, 0xffffffffffffffcf) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='syz1\x00'}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 496.854433] input: syz1 as /devices/virtual/input/input2913 [ 496.873877] input: syz1 as /devices/virtual/input/input2912 [ 496.908240] input: syz1 as /devices/virtual/input/input2915 20:18:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername(r1, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000100)=0x80) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={0x9}, 0x0, 0x8) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 496.985601] input: syz1 as /devices/virtual/input/input2918 [ 497.015280] input: syz1 as /devices/virtual/input/input2919 20:18:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.056271] input: syz1 as /devices/virtual/input/input2920 [ 497.143209] input: syz1 as /devices/virtual/input/input2921 [ 497.179712] input: syz1 as /devices/virtual/input/input2924 20:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) [ 497.191077] input: syz1 as /devices/virtual/input/input2923 20:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xfff, &(0x7f0000000100)="f9ffdcffb19d4cd2ffffff7126dd0128e1ac7b122a00545e65a671fda6ecd7dcb63b1ffbd830aa3dcc927299bf901eaf6a02b17147ad7d81158a1a58ee13135ee39a7bac2cba1ce317725f8b2478048ebb0b19a88668fdf8ed809195421004b78a930292516ae0b8cb755b4849600fd74ce26ed26e95cd2ec4cf99043acc9a") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a0000000000000]}, 0x45c) fcntl$setstatus(r0, 0x4, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/224) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.220146] input: syz1 as /devices/virtual/input/input2922 [ 497.229569] input: syz1 as /devices/virtual/input/input2925 20:18:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x420803, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xe701, 0x1f1]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 497.263351] input: syz1 as /devices/virtual/input/input2926 [ 497.299240] input: syz1 as /devices/virtual/input/input2928 20:18:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.346043] input: syz1 as /devices/virtual/input/input2929 [ 497.364749] input: syz1 as /devices/virtual/input/input2930 20:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000000080)={0x9}, 0x0, 0x8) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x9) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2, &(0x7f0000000040)="0a8de0dc1f123c123f31b3") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000525bd7000fcdbdf250a00000040000100080006006f7666000800050002000000080009000c00000008000b007369700014000300fe880000000000000000000000000101080001000a000000080006001f0000000c000300080008000800000008000400050000000800060001000000"], 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) [ 497.422001] input: syz1 as /devices/virtual/input/input2931 [ 497.441913] input: syz1 as /devices/virtual/input/input2932 [ 497.462736] input: syz1 as /devices/virtual/input/input2933 20:18:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000880)="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", 0x1000, 0xfffffffffffffff9) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', r1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.512575] input: syz1 as /devices/virtual/input/input2936 [ 497.575083] selinux_nlmsg_perm: 6 callbacks suppressed [ 497.575093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2502 sclass=netlink_tcpdiag_socket pig=22410 comm=syz-executor.0 [ 497.585922] input: syz1 as /devices/virtual/input/input2938 20:18:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.657317] input: syz1 as /devices/virtual/input/input2939 [ 497.687135] input: syz1 as /devices/virtual/input/input2940 20:18:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.757503] input: syz1 as /devices/virtual/input/input2941 20:18:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000240)=[{{r1, r2/1000+10000}, 0x5, 0x0, 0x5}, {{}, 0x13, 0x7f, 0x5ca2}], 0x30) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1100, 0x8) ioctl$RTC_VL_CLR(r3, 0x7014) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/35, 0x23, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r4, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0xa000, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x5) ioctl$TCXONC(r5, 0x540a, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) [ 497.830929] input: syz1 as /devices/virtual/input/input2942 [ 497.852518] input: syz1 as /devices/virtual/input/input2943 20:18:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r1, &(0x7f0000000100)=""/245, 0xf5) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x1) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.875555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2502 sclass=netlink_tcpdiag_socket pig=22433 comm=syz-executor.0 20:18:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 497.922519] input: syz1 as /devices/virtual/input/input2944 [ 497.935675] input: syz1 as /devices/virtual/input/input2945 [ 497.959502] input: syz1 as /devices/virtual/input/input2946 20:18:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='syz1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x420803, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xe701, 0x1f1]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 497.984800] input: syz1 as /devices/virtual/input/input2947 20:18:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.052277] input: syz1 as /devices/virtual/input/input2948 [ 498.059665] input: syz1 as /devices/virtual/input/input2949 20:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.095834] input: syz1 as /devices/virtual/input/input2950 [ 498.125825] input: syz1 as /devices/virtual/input/input2951 [ 498.136475] input: syz1 as /devices/virtual/input/input2952 20:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bpq0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@empty, r3}, 0x14) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000002c0)) write(r0, &(0x7f0000000100)="257a7c0db691977d168a9188fa1eb4c42bf780e83125ebfac372c0ae6af44dfb745beae21a4636ad89a75128fb56b7fe0c521f84440f0cb75cf12374aa88f5b871a0982ec2fd1f946cf885abb8bf2d053e350bf8ab1abcf53387f2e804584aa31ae12a15a400caee11dbc590f56852d141dd979022af1c63ee1e1a76b87d573273f0fdb91f3b27a57b5a5e8a3150d136e810527e63a5918f815e2cacd0af84878a82e3c8071032f2e860f632845f", 0xae) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x444000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) memfd_create(&(0x7f0000000300)='/dev/uinput\x00', 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) [ 498.187267] input: syz1 as /devices/virtual/input/input2953 20:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x5, 0x2, 0x2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, 0x0, 0xffffffffffffff40, 0x400000000, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.293176] input: syz1 as /devices/virtual/input/input2956 [ 498.294527] input: syz1 as /devices/virtual/input/input2957 20:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff, 0x140000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x420803, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0xe701, 0x1f1]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 498.375673] input: syz1 as /devices/virtual/input/input2959 [ 498.387916] input: syz1 as /devices/virtual/input/input2960 [ 498.434134] input: syz1 as /devices/virtual/input/input2961 20:18:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x5) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.534500] input: syz1 as /devices/virtual/input/input2962 20:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0xc05, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.581514] input: syz1 as /devices/virtual/input/input2963 [ 498.586380] input: syz1 as /devices/virtual/input/input2964 20:18:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1, 0x7ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.622597] input: syz1 as /devices/virtual/input/input2966 [ 498.650226] input: syz1 as /devices/virtual/input/input2967 [ 498.673030] input: syz1 as /devices/virtual/input/input2968 20:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) flistxattr(r1, &(0x7f0000000100)=""/245, 0xf5) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.769615] input: syz1 as /devices/virtual/input/input2969 20:18:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x540, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00090025bd6643a4b0608a324ff9056bc87816487cdf6a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.856348] input: syz1 as /devices/virtual/input/input2970 [ 498.876835] input: syz1 as /devices/virtual/input/input2971 20:18:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000040)={0x0, 0xb6}) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) delete_module(&(0x7f00000001c0)='\x00\x93&Y\f', 0x9ff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x6}}}, 0x18) [ 498.913953] input: syz1 as /devices/virtual/input/input2972 [ 498.942209] input: syz1 as /devices/virtual/input/input2973 20:18:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 498.966729] input: syz1 as /devices/virtual/input/input2974 20:18:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.028778] input: syz1 as /devices/virtual/input/input2975 [ 499.067362] input: syz1 as /devices/virtual/input/input2978 20:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.131174] input: syz1 as /devices/virtual/input/input2980 [ 499.147209] input: syz1 as /devices/virtual/input/input2982 [ 499.150511] input: syz1 as /devices/virtual/input/input2981 20:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x7, 0x4}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) prctl$PR_SET_FPEXC(0xc, 0x90002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) fsetxattr(r0, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)='/dev/uinput\x00', 0xc, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.184270] input: syz1 as /devices/virtual/input/input2983 20:18:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84, 0xd8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.252155] input: syz1 as /devices/virtual/input/input2984 [ 499.265388] input: syz1 as /devices/virtual/input/input2985 [ 499.273955] input: syz1 as /devices/virtual/input/input2986 20:18:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000040)=""/82, 0x52}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x5, 0x0) recvfrom(r1, &(0x7f0000001880)=""/4096, 0x1000, 0x40000000, &(0x7f00000002c0)=@ipx={0x4, 0x1000, 0x100, "6702840e4a8b", 0xff}, 0x80) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x540, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00090025bd6643a4b0608a324ff9056bc87816487cdf6a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.360830] input: syz1 as /devices/virtual/input/input2988 [ 499.367168] input: syz1 as /devices/virtual/input/input2989 [ 499.385949] input: syz1 as /devices/virtual/input/input2987 20:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0xffffffffffff8000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) waitid(0x3, r2, 0x0, 0x8, &(0x7f0000000100)) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.436187] input: syz1 as /devices/virtual/input/input2990 20:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x1, [@loopback]}, 0x14) 20:18:28 executing program 0: ioctl(0xffffffffffffffff, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x311c, 0x4, 0x9, 0x0, 0x80000000}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.508421] input: syz1 as /devices/virtual/input/input2993 [ 499.546580] input: syz1 as /devices/virtual/input/input2994 20:18:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4, 0x84]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0x8000, 0x8}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getrandom(&(0x7f0000000100)=""/26, 0x1a, 0x1) 20:18:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfaf2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000040)=@rc={0x1f, {0x4, 0x1, 0x8, 0xffffffff, 0x4, 0x80000000}, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="ff66bc71cc9dbc9a3c6df7f2c65662", 0xf}], 0x1}, 0xff}, {{&(0x7f0000000180)=@l2={0x1f, 0xfffffffffffffffc, {0x6, 0x10001, 0x8, 0x4, 0x3f, 0x7fff}, 0x101, 0x4c65aad1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="fd572d7ad6ad6aa1a4d7791366dd39c9aba5ed5a15dbdf0ab39cfcab7e237af0c76aca069aed91edc8560962075bffab3cb4852ec575e3835a16b209bcd04605906fe08517af1d04a8ab5ecced75103dde8ee454764ed2a11bf76af996ac6be568d35ec825fc94d35c0cb7b27ddb3d70eea26928c665e5c9154d237f99621ba0d805eaa721d3be8c4fcd0e178e0fb162faee64f2c34f9e2e67ee1ed77c", 0x9d}, {&(0x7f00000002c0)="df1389984a4de0ef4f955f2baf93bd8c37a3839e5f0841390b4b56e15411d616c34fb5dd7fdca7d0ec465f0244f137a637be47c49dcb2e6e8e0802205717a6158018e2c7c61e4d5084e9882390aba62dbe1af6ca4426a4c677b1a1715bdfe80c83264be514b7ec1820df06cfb98b8e9ddf56c751fbb35f67ba150e4fb71d", 0x7e}], 0x2, &(0x7f0000000880)=[{0x48, 0xff, 0xffffffffffff9983, "8aaacad44259bf9bfd6c83c1fa7a3ad4e0fde2797fcf52bd2f67a0a6bee25d1bdbfb9c9abc78bfaaf15225c262ff98ae1199dbf1"}, {0x70, 0x10d, 0xffffffffffffff01, "020cd83a614d34471f09abcf46cda3f885ef51dba4640841dddfb9ad4b5173fed06f973aea9db85c7b10069e23cb2841e1af07d5f5429cb15e7872d2569fa56e972df3c6df070ed4e996c456d8a87a0337332800949e6a388e1450c8"}, {0x30, 0x18d, 0x1, "94babed02f027b6fc8e62f65e9ecdaaa3d1b27cb60032cc1d4da15"}, {0x108, 0x11e, 0x4, "c45a95d1853aaf5d7ee6c17ce1dbb3fb14d8bdf70beae3bcb1b27387558ed7f9960fed6ce4d001d9f1197b67699e3fcf2ea7ae4876d21333d7a8f4126f480b5a2ed044014018c8d1222906937ca491eee2ef5c94d363f856136cc699b626aef3f084fb183329167069e2614ec8cc39283f39615ab6863506b1b83fd7263b45c96a301e246dd6dfd44fdf210f76120dd7a2cd4e34397580a119478b9bf391c26a1c97798e3f4f1d5299babc04276ed38b99dc65206f945c4c43153ecc55e36c68030b8ad76b8cbbecdb9be130f64d77d3b3e6eaf1da9c51c6fa84344ddc37cf62bf774d483b116b53949fa8e388cce7be122cd2c2d59457"}, {0xc0, 0x84, 0xfffffffffffffffd, "3140b3ee9fe79636b7818b4fcbed508b82e6cc7409d90e66bf20ccc837bd080ceaee8146c1c7639959825fceb5901beacdb5252b2b949ea41f870a6f6cbf97e6d4bc2f61599ad95225f879fbf86c9c06d4fe021b36e20cf7c6ef7e441e15eccecbfbe0bb1e490c0d0085e778bdf5677f7f22da6ffb7a1223c94a1b64d71bf1455497e1e1490f8134f4325865bc1f1b7a9fbac8ee41183894eadc8e93380d881177ad4c17b3f54ff4d677f33c9950a5c7"}], 0x2b0}, 0x6}, {{&(0x7f0000000380)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x200, 0x5, "bbebdbc5944477ac6bda42b541b6ce3b6113068a8321d5bd47bcdf76fb080cf01ab8ea26f0b2e6540e81c9aa8a9a49ecd65217db9c41831ec96da6b47eeea5", 0x2a}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b40)="f5749d78789e4e351c909419b57c2115457981a87f2e134030fe", 0x1a}, {&(0x7f0000000b80)="b2b4e58a14176f49e23aaed5d06feb59baaed27eae42726b8ede643c9bef30f69ba5843dca9460f3b843d059f81929c48bc206ca9fdbfbbe8188da7550b68c776ceb06aa70d46c2b9f30b4baa4a64a98f49d0eb4f47de62a2906a2a170164debbea0fbe1b6123a619b7d59322427f0776e0c80af0f0909bbba702e19ea8c4129c250a69e414a74777292", 0x8a}, {&(0x7f0000000c40)="11100b86a2a48531671beec13fc5b9ac699552b3837a6d8e7a3de8423232fee89c3712c5e1a54fc2575afd5ad754a4c9f49fb84f4c860cfcc995c3c9f54127bdb28a8f4c747d1625f7ceaf88b92c3683449f4d0ef534f962a1598a873b9866c778577c", 0x63}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="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", 0x1000}], 0x5, &(0x7f0000001d80)=[{0x108, 0x10f, 0x3f, "86ee5daf058063a1c137d80db594381639dafe256e751dad5f04c34c157f938ff7008cefdbbdeaf56c466e5fb8ad15c0c0955996f24162218334c5b2d0efbce747b376b08da550745dc09595cb67a5cb338cf0d3b40d10e3001a5550c37ac36cf287930abb8b1d66f775e9756aa432d2e33d4b192f95b50fc8bc4444bf9caf19ee7459f2b85d561e544806210d42341e37693c659d1b38001049ba66a79d7a0f49e65df3dbe5700401d4f51eba71904ff90f4726c60946de7eddb5e94727a5d3e1d5080c49b36ec33613e1b504682d5a33e175ab06a80692961ad2866148f4a885244d981b32b568edd5c724e552e01163f55335049a1d"}, {0x18, 0x10a, 0x3, "d8"}, {0xc0, 0x107, 0x2, "a00980c4dcc4e6c0117b51c58cfe515d3cd16ebeb2a5e4b6d8ef990a6533f8050f6a1ad1657b46ec19def65239e9e0f003ec22d3ad3758e31aca9cb8ebd3f24b7281fbb6a7240464633467002f53769d9060cadc04940d6b2bfb4b335efc06e57a07c6bae0efe318f62a13f382da1e73937735f43927924b7f26f3d65ccecb1f3737883fc442e0002c335df7cd152a05760dd92ad693de1cbf4cbbec29d5e29dc414f87cfea07a794e5806"}], 0x1e0}, 0x6}], 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.614347] input: syz1 as /devices/virtual/input/input2995 [ 499.641453] input: syz1 as /devices/virtual/input/input2996 [ 499.648999] input: syz1 as /devices/virtual/input/input2997 20:18:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fsync(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.715836] input: syz1 as /devices/virtual/input/input3000 20:18:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RLERRORu(r2, &(0x7f0000000000)={0x12, 0x7, 0x1, {{0x5, 'syz1\x00'}, 0x5}}, 0x12) [ 499.768147] input: syz1 as /devices/virtual/input/input3001 [ 499.784981] input: syz1 as /devices/virtual/input/input3002 20:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000000000803, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19) [ 499.817256] input: syz1 as /devices/virtual/input/input3003 [ 499.846854] input: syz1 as /devices/virtual/input/input3004 20:18:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.895205] input: syz1 as /devices/virtual/input/input3007 [ 499.924259] input: syz1 as /devices/virtual/input/input3008 20:18:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x7, 0x4}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.960905] input: syz1 as /devices/virtual/input/input3009 [ 500.000983] input: syz1 as /devices/virtual/input/input3010 20:18:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) finit_module(r1, &(0x7f0000000000)='@]\x00', 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = creat(&(0x7f0000000040)='./file0\x00', 0x110) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0xf0f8454ee519b732, 0x70bd28, 0x3, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.130335] input: syz1 as /devices/virtual/input/input3012 [ 500.142970] input: syz1 as /devices/virtual/input/input3013 20:18:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.173835] input: syz1 as /devices/virtual/input/input3014 [ 500.202050] input: syz1 as /devices/virtual/input/input3015 20:18:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.253886] input: syz1 as /devices/virtual/input/input3016 20:18:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r1, 0x0, 0xffffffffffffff09, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="94") ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.328339] input: syz1 as /devices/virtual/input/input3017 [ 500.342268] input: syz1 as /devices/virtual/input/input3018 20:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000140)={0x4, 0xb291, [0xb46, 0x100000000, 0x5, 0xb9a4, 0x1], 0x587}) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") readahead(r0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="03000000a8a1007fde3839c33b1458b264cd0c5bea3bb08ba89332c8be6667c06014e1891d61134347e45ebf2519aef0940787098ff4602956f2d8b81ce7b82d6d1aaf00be153df1889a93b478eddbb40a7cf1aeb9e93e9afb15707cff663fd567f20cabec8c741480790c55ed6c2c07b4b24f00cb33d993a0aedebef62648817f1a21085cf05eb596b94db0b4aebf9dd3bc0a5d5c1b9a48295798230456d40a386b468164c27bdfd2cc8415a908967e070000000000005a974bbadaf280ffff00000400000081000000"]}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.392691] input: syz1 as /devices/virtual/input/input3019 [ 500.416629] input: syz1 as /devices/virtual/input/input3020 20:18:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815, 0x2af3000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.483577] input: syz1 as /devices/virtual/input/input3021 [ 500.497931] input: syz1 as /devices/virtual/input/input3022 20:18:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.537839] input: syz1 as /devices/virtual/input/input3023 [ 500.588460] input: syz1 as /devices/virtual/input/input3025 [ 500.593927] input: syz1 as /devices/virtual/input/input3024 [ 500.619132] input: syz1 as /devices/virtual/input/input3026 20:18:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = dup2(r2, r2) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0xfffffffffffffff9, 0x2, 0xd, 0x9, 0x12, 0x2, 0x80000001, 0x3, 0x1, 0x2}) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x240, 0x180, 0x0, 0x318, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f00000008c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0xcd, 0x1}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, 0xff000000, 0xffffffff, 'vcan0\x00', 'lapb0\x00', {}, {0xff}, 0x16, 0x2, 0x11}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@ip={@rand_addr=0x7, @empty, 0x0, 0xffffffff, 'bond_slave_0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x7f, 0x3}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x26}, @local, 0xffffffff, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x1d, 0x3, 0x2}, 0x0, 0x98, 0xd8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x6, @ipv4=@empty, 0x4e24}}}, {{@ip={@local, @rand_addr=0x65c, 0xff, 0xffffffff, 'rose0\x00', '\x00', {0xff}, {}, 0xc, 0x2, 0x8}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_read_part_table(0x81, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="794f855ce22ae20a7bf2a2afe1c9a4d21cfeb433b557cdbc4a44f4a1e0cb590418783f0588f63f1c18df78ca8dce1c13a07fe880c954220fb7d83f6f8d415ae9a697bba8c3aac0ac555237ad85516dfb84e4d75b01bc7e0c2eebc63ea81f62352fbf87e4190b0555270bc3e21b6d0d63c4f52892e67ec8ca2c1d6e1817c81ca1b11f37712c08d0a7643bcedd3c1c4adb5f270eaa4c9f40bc2fed9ab0e9d372c22f8b32bfca13f15deec06fe6d56b8a98c821be1f4cf901ba8fa0853f114cd5d6ea3c11496491dc4f4db72e4c31dd9a5966216a2aed6bfb62f2588d6f45c59b74abeb9d6bb294411e52629fbe6d81ec1e06edb1ed61", 0xf5, 0x800}, {&(0x7f0000000240)="b178aa3bc55d226a8c98f2c3e9dfeba959492d9a88769bc496a15f9006857dc3bdd28539119aeec30f14e42e019d9be061e655676d754deb7e0bac9ed5a5623e39e6a380eeec1dfd7536d02871d31513d7f61db6d2cc43cb8e33ea0b639ef4535dc0f4cfe2f09fee5ba7c6c717531356e69c3f7fa6b92debcfc4722a582cf0dffd15aca02dd373fada1c7bf3d0a2e91755bbb4cb8e047d6a288ce3e13dc47e0b338f341a63a68e8a4e9bedcc05260db7190c9c1a12971ce0db32fdb12af3dd51cbf744a56798b2", 0xc7, 0xc8b3}, {&(0x7f0000000340)="218fa7a3e010bb6870c3e62e65f8f7a16d3907c6c6fa3a5ecb5393dec38b3e92dc74bcacf2470beb45bc59a007773b0526a171c3e396", 0x36, 0x48a}]) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/177, 0x4}) 20:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="94") ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.704218] input: syz1 as /devices/virtual/input/input3028 20:18:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [], [0x6815]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x2, r2}) [ 500.749420] input: syz1 as /devices/virtual/input/input3029 [ 500.773231] input: syz1 as /devices/virtual/input/input3030 20:18:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0x20, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 'bridge_slave_0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xf) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 500.839122] input: syz1 as /devices/virtual/input/input3031 [ 500.867495] input: syz1 as /devices/virtual/input/input3032 [ 500.879309] input: syz1 as /devices/virtual/input/input3033 20:18:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) getdents64(r2, &(0x7f0000000100)=""/180, 0xb4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 500.935755] input: syz1 as /devices/virtual/input/input3034 [ 500.976227] input: syz1 as /devices/virtual/input/input3036 [ 500.988184] input: syz1 as /devices/virtual/input/input3035 [ 500.998822] input: syz1 as /devices/virtual/input/input3037 20:18:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.074862] input: syz1 as /devices/virtual/input/input3038 [ 501.105293] input: syz1 as /devices/virtual/input/input3039 20:18:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.129220] input: syz1 as /devices/virtual/input/input3040 20:18:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r2 = dup(r1) syz_open_pts(r2, 0x8000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.180370] input: syz1 as /devices/virtual/input/input3041 [ 501.204078] input: syz1 as /devices/virtual/input/input3042 20:18:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) write$smack_current(r1, &(0x7f0000000000)='\x00', 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.247517] input: syz1 as /devices/virtual/input/input3043 [ 501.260201] input: syz1 as /devices/virtual/input/input3044 [ 501.284896] input: syz1 as /devices/virtual/input/input3045 20:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r1, 0x0, 0xffffffffffffff09, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.325375] input: syz1 as /devices/virtual/input/input3047 20:18:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.381607] input: syz1 as /devices/virtual/input/input3048 [ 501.420975] input: syz1 as /devices/virtual/input/input3049 20:18:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) fcntl$getown(r0, 0x9) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) read(r1, &(0x7f0000000000)=""/79, 0x4f) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r2, 0x3ff, r3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.447762] input: syz1 as /devices/virtual/input/input3050 [ 501.486075] input: syz1 as /devices/virtual/input/input3052 [ 501.521325] input: syz1 as /devices/virtual/input/input3054 20:18:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8001, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:crypt_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x7}, 0x5e) 20:18:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.625426] input: syz1 as /devices/virtual/input/input3056 [ 501.669734] input: syz1 as /devices/virtual/input/input3057 20:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.746177] input: syz1 as /devices/virtual/input/input3058 [ 501.785961] input: syz1 as /devices/virtual/input/input3059 20:18:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_user(r1, &(0x7f0000000000)={'system_u:object_r:nvram_device_t:s0', 0x20, 'user_u\x00'}, 0x2b) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.896014] input: syz1 as /devices/virtual/input/input3061 [ 501.911884] input: syz1 as /devices/virtual/input/input3062 20:18:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) syz_execute_func(&(0x7f0000000200)="b13091cd806969ef69dc00d9d0d0c44139fd5bf91cc1c7c7e4c653fb0fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000001c0)={0x3, 0x0, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000180), 0xe264b94d9d1e4521) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x84) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000100)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x0, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 501.969606] input: syz1 as /devices/virtual/input/input3063 [ 502.003546] input: syz1 as /devices/virtual/input/input3064 20:18:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/96) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = dup(r0) write$smack_current(r1, &(0x7f0000000000)='\x00', 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.053809] input: syz1 as /devices/virtual/input/input3065 [ 502.084832] input: syz1 as /devices/virtual/input/input3066 20:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.114614] input: syz1 as /devices/virtual/input/input3067 [ 502.154651] input: syz1 as /devices/virtual/input/input3068 20:18:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r1, &(0x7f0000000bc0)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x2200}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)="c5d5ea2923bf3c5c59884397295dbcdc12ab53575663d60dbea2f7275e8e40e1", 0x20}, {&(0x7f0000000100)="d1411a5303be9beb87c2bb56e77545f813963e1339d8d0a84c4b010a273d4ccd9426c3bc4c1c4c6cb7e3", 0x2a}, {&(0x7f0000000140)="3e5e4324802188ec6fe528e21bb295654378798b048f436dcef0a9c6ac04b5a96b332a8b1f5528bac6e30f83bf09bb458b7b782f0902369223f4b64b65dc89244603360d309b869e5e0cf6ccea4bf2c60e43d3caaed1727b7c69d322c2f4394fcade60a31822ccfa3a103849e062aa596fe0cfce7be10c0a4077a3cbcd6ee4385dfca9a5f7b401b54cc1dd26dd689d5f49fa423a170790496ab8429645a9d4248bb99ea29100e669d2efbdc93f42842e435155f5f8c89eb09fc3ca8735d3827d0d7b918a9e9f3c60a7b234e484e30fb8b39cab1ebbc2adc4703b4080f589ba091e13cbb26d98dee9b877a221e7568e23d7f6961004ebb1a274", 0xf9}, {&(0x7f0000000240)="1e8a10daa9391458ef0d723fe7ade33358ede33404a10c22d640470fb2e1dbc94d3623913d34a730e8b518dabe38aceb26e47b076cadc8908bebd42f30704ce939b9e4", 0x43}, {&(0x7f00000002c0)="99bb28795a9b3fc95cbb70d11c96092eb2e9d76b65871068380e57eb5a713a8ade483cb6241c382937e18533768c8a521193f826b25726a305a64c3b1b33872c68d64e67e0fc5c28a71754c16171d1dacc7a50927f003fecb0dde54579da4d99a14cf1b3941604965023dc139993119b5b8b7a521464569ca92c9d3ce399de", 0x7f}, {&(0x7f0000000340)="c23ec634533e5cdb74a11c54213c656c607d581e220e43e095ba58275d299fba32058cea8db828e30b97a9058dcc2104341837c947777688d4259f4b39ef1cbb0bca48317b638f2f1504aad6b0946338172c69ccc72b450d9114c9f6df57f86286ad4e05b1aa093a578e18b8736706e94a3bb9d676aabf6fa67cccf14d64c15fce9f25ac00d8bc98ea43e021fc3613bf7ee5c577e8ab8040135bca5bf54d52320b5f58d46d394b53c0ec519ee9b3", 0xae}], 0x6, &(0x7f0000000900)=[{0xf0, 0x11, 0xfffffffffffffffa, "e1c0b5dd31e921e1793b3626c5af0781a6aeff5c71d984f904f112740cf4dde5a87407e8fd16d630dd0c35b89b28d70b871e20634f1e642f1080d7b9131716636471713f74ae474d4e758fe6898f47965379aea8118fce4807abf6092a4958d97a51cbe25d216233a4df003420483319a2219f63b7c2c24ff6a2cf4f6e8cdfbc35bf2c6fb3051a810ab90440b6cb5954e39d8ee51483a97be7f445eac5039881b751411e01d8538d117efb0fc9f1a0cd7d928b75b3243371be41f22bfec3129736cb3e1a74812925724e18cba7c635a0a3e7e375c54a804299299e1c"}, {0x40, 0x1bf, 0xfffffffffffffffb, "f68fcefc016f2972536e0ab648029989e37e8fd391e4fe98ef5ae22bb9cd16c86242488f8945691dbd5011e98820"}, {0x48, 0x100, 0x20, "2039cd4ecee5de1074efd626f1bf697b5e414644440f8683494612fc68a00642806739b7b93e468da2edb68304389a609e74f2"}, {0xf8, 0x0, 0x6, "84f67870cba52f530e5eebabc9ab551e4632efa062729190dd1a66c10d663bc3ec556a56d9538df3f32b822672cdd01ab8ea06197fd8a66231def2aef232bd333da7534adece2551205f6720eda3f3b6ae7f7f3172af1fc1dba58349c72aa73245a8b9b01efe766ad536966c172503ed424e8cb9f36ce9c5a1a0cd6681d993049f809092b1bdfcb9ce32e0cdd1cf1ebe49a72f36bcebd96ada70edf8ed6f26f563f5d6c15920b4bf825a27a19cf1f6d97a2f3951c6d18ceb28739394538fad50e81409426a50e9a6200ba45fb6b32039073969b1ab08e44d8ee140a86c693c2958"}, {0x48, 0x111, 0x20, "fa27df40202a358d49299b9f7a236e62a294b5ed597bdadaab1940e53a4551291cdc535e7b7274bcb7a460023bd1543eb23d1b"}], 0x2b8}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.232717] input: syz1 as /devices/virtual/input/input3069 20:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003e40)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000003e80)=@fragment={0x0, 0x0, 0x95, 0x4685, 0x0, 0x2, 0x68}, 0x8) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") sync() ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r3, 0x5441, 0x101) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fcntl$setflags(r3, 0x2, 0x1) [ 502.286644] input: syz1 as /devices/virtual/input/input3071 [ 502.321397] input: syz1 as /devices/virtual/input/input3072 20:18:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x0, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0xffff) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.432884] input: syz1 as /devices/virtual/input/input3076 [ 502.468789] input: syz1 as /devices/virtual/input/input3079 20:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x135) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc4) r3 = dup(r1) creat(&(0x7f0000000040)='./file0\x00', 0xa) r4 = syz_open_pts(r2, 0x40000) ioctl$GIO_SCRNMAP(r4, 0x4b40, 0x0) recvfrom(r1, 0x0, 0xfffffc4c, 0x0, 0x0, 0xffffff93) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.497545] input: syz1 as /devices/virtual/input/input3080 20:18:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x0, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.543529] input: syz1 as /devices/virtual/input/input3082 20:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.584673] input: syz1 as /devices/virtual/input/input3081 [ 502.587281] input: syz1 as /devices/virtual/input/input3083 [ 502.613834] input: syz1 as /devices/virtual/input/input3084 20:18:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="879f130aba9966592a46070a41e58be43e108e66315368f4688cecc12588016be06545cd759c518ac52f7b6a", 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1800, 0x1) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x100, 0x6) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.701317] input: syz1 as /devices/virtual/input/input3085 [ 502.714489] input: syz1 as /devices/virtual/input/input3087 [ 502.725066] input: syz1 as /devices/virtual/input/input3086 20:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) chroot(&(0x7f0000000040)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x840, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe(&(0x7f0000004440)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000044c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000004600)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004500)={0xa4, r3, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x90, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb1f9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) [ 502.793012] input: syz1 as /devices/virtual/input/input3091 [ 502.801242] input: syz1 as /devices/virtual/input/input3090 20:18:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.897879] input: syz1 as /devices/virtual/input/input3092 [ 502.907612] input: syz1 as /devices/virtual/input/input3093 20:18:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 502.941805] input: syz1 as /devices/virtual/input/input3094 [ 502.975133] input: syz1 as /devices/virtual/input/input3095 20:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x847fc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc875}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe82}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2bc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xa2ea, 0x7ff, 0x94, 0x40, 0x8d}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) r2 = accept$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000340)=""/59, &(0x7f0000000380)=0x3b) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r2, 0xa, 0x38) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x7, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8800100}, 0xc, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="600200001300010025f88a8e0000000000000000b657d84685059242a4e9c70c1cd1830f223c58bbe8da89e9a97eddada777cc316b424529554069c9da31a435d23b739c9ada8136d38db03ec42ce9793adfa1a9b3d0b6f3acacee8b9cd53d5e72fafbc0ef528b6e401bae60555ac7d6e3f08a757c3657eb6618771d6b456c354a51aa31a50b5c8024eb52b0553877a992801410a059892602c58b9f121dc20f652d5afae923f6ea7af90b05276e", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1400030073797a6b616c6c657230000000000000"], 0x260}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) [ 503.047353] input: syz1 as /devices/virtual/input/input3097 20:18:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/174) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x381082, 0x102) 20:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 503.171425] input: syz1 as /devices/virtual/input/input3103 20:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) chroot(&(0x7f0000000040)='./file0\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x840, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe(&(0x7f0000004440)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000044c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000004600)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004500)={0xa4, r3, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x90, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb1f9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) [ 503.215212] input: syz1 as /devices/virtual/input/input3106 [ 503.222197] input: syz1 as /devices/virtual/input/input3105 [ 503.251521] input: syz1 as /devices/virtual/input/input3107 [ 503.257699] input: syz1 as /devices/virtual/input/input3109 20:18:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.349456] input: syz1 as /devices/virtual/input/input3111 [ 503.365117] input: syz1 as /devices/virtual/input/input3110 [ 503.381305] input: syz1 as /devices/virtual/input/input3112 20:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x3, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.410340] input: syz1 as /devices/virtual/input/input3113 20:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.457506] input: syz1 as /devices/virtual/input/input3115 [ 503.465128] input: syz1 as /devices/virtual/input/input3114 20:18:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0xd, 0x0, 0x7, &(0x7f0000001c00)={0xffffffffffffffff}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) connect$packet(r2, &(0x7f0000000140)={0x11, 0x1e, r3, 0x1, 0x7ff, 0x6, @local}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r0, 0xc, 0x8, 0x8001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 503.533648] input: syz1 as /devices/virtual/input/input3117 [ 503.552044] input: syz1 as /devices/virtual/input/input3116 20:18:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r3 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r2, r3, r4}, 0xc) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/174) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x381082, 0x102) 20:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.634467] input: syz1 as /devices/virtual/input/input3118 [ 503.641893] input: syz1 as /devices/virtual/input/input3121 20:18:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) finit_module(r1, &(0x7f0000000000)='@]\x00', 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.702331] input: syz1 as /devices/virtual/input/input3124 [ 503.704659] input: syz1 as /devices/virtual/input/input3125 20:18:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, 0x0, 0xb9571cd8d6325b9b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) renameat(r0, &(0x7f00000008c0)='./file0\x00', r0, &(0x7f0000000900)='./file0\x00') r3 = fcntl$getown(r0, 0x9) ptrace$cont(0x20, r3, 0x100000000, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000200)="7632163c98683bbb7153ee49ba06772ffd9b111f63868e38b0fd9fe58d0338c415989b67463c8c3c123e65c9de8389", 0x2f}, {&(0x7f0000000240)="ad728b9b869771a641f849c1aaa4207f57d705bceb547b1980d6261601673aac9328a6bb9bc549000d231259b367c19b0385e76be547dddb394b0c4e99c9b7d10de3e57d5a3010b5f303e6ff6c63101e6ca79f4a73e78895640e3d142be27e35b4761eb9724baea2c990d22fe579aa385e1637b12023c8530e5fa2c10f01731f462bb835", 0x84}, {&(0x7f0000000300)="ded9521cb145f2d16f56dbc32e82b2f7d7dcba475309defc219809de0989c44c8fbaed167e5f05f971ad9070f5d79b01034f80cd6997bccbea61b6d62b99a67b694dc8da56e196ae119560fd3b47c5d9e5b18e219e429f06f5df14657efbdc281565037ee5156bbac835a00ffe2eab796f6814d5ec40f78c251e0541a154a9a3dcdb9dab3960c77c3cd2d72913f736f0740aa1b7e2c7d39fb3b4b1f728ae4c740611cb4bc433a5c20137d331d9da57c045c6044004ec3de0ec8a842849f53a0328dc0f2c1469ec0be7167f153c853896d65a7edc4fac4f200ea2f2bf66144ea332d201d6c6ad2dc1d625", 0xea}], 0x3) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="720ce18ee2d9792144078e6ee6a68fc5be5a84377567d911ec8f62a41d4862a61c65bcfc2a217301497bb13c0d40683496e1f38738239cf01471538a6219117abee4e8d02858", 0x46, 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 503.800668] input: syz1 as /devices/virtual/input/input3126 [ 503.828133] input: syz1 as /devices/virtual/input/input3127 20:18:32 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20200, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.863061] input: syz1 as /devices/virtual/input/input3128 [ 503.893395] input: syz1 as /devices/virtual/input/input3129 20:18:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20015) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00', 0x1}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 503.937072] input: syz1 as /devices/virtual/input/input3131 [ 503.964968] input: syz1 as /devices/virtual/input/input3132 20:18:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1b, 0x0, 0x9) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x394}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}}}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa377}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xba2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1595cc0a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20044041}, 0x40001) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3, {0x1ff, 0x1, 0x0, 0xe780000, 0x0, 0x1000}}) 20:18:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="6c63ce9e7aecb2733699b22581f24796f3d94b259ea56382fadeba078d22f8138735da180b15eaa64c8d9debe2224758ab865b3eca2868e05de12f38e9697e999960d99da4dd6425b48052b90e9280e2d3b9d4111fe5725f6b08cf932bbd29d423be4593ca857418fcbadd476a6e69b29bff113d05b5ef4c1933e3209f634fccd2c3f33040d4209b5abf128b545f2b530878c902d67c53d0c1b586077968f2bb92b5935271b859a21b9bd3f7dfd7cfa44087f4cdcf78e5a7afabba90682408f917d82ee7d954fecb3801fd5de7ca20891d85a7b65d91637bc8a0") ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.083770] input: syz1 as /devices/virtual/input/input3133 20:18:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x13) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) [ 504.187270] input: syz1 as /devices/virtual/input/input3135 20:18:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) finit_module(r1, &(0x7f0000000000)='@]\x00', 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40400, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0xc2a1, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.311365] input: syz1 as /devices/virtual/input/input3144 [ 504.347545] input: syz1 as /devices/virtual/input/input3145 20:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.364844] input: syz1 as /devices/virtual/input/input3146 [ 504.368310] input: syz1 as /devices/virtual/input/input3147 [ 504.413133] input: syz1 as /devices/virtual/input/input3148 20:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) recvfrom(r1, &(0x7f0000000880)=""/4096, 0x1000, 0x1, 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) 20:18:33 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) 20:18:33 executing program 4: syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x4c00) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) 20:18:33 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.584541] input: syz1 as /devices/virtual/input/input3151 [ 504.589039] input: syz1 as /devices/virtual/input/input3152 20:18:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3, 0x0, 0x969, 0x7b}, 'syz0\x00', 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000140000002c00000000000000a3a5c54609d94dbd386110d89207d00e566c0b0000373bae3414b5c5409d5ecea1288da9ad81c598d853c3856c5dce400d60c9f74c9a4b6e8ad3f8544d194ed4fc071515fa766982d61e1f2fa64fb17810cbef3da3908f9967cae77f19fe53bda11b462834dd574bf25689aa6eb2830830604482c84bc9ac83ff70074775d51d31a2a4a2aa7373b083f9f6bdc8c2009d867abccc3340146c5e8380718ffa98729507be939fcf728efe278df8754fee8f9cf229bf1bbcdfe5675500c0b0280047ae6ae00815bcdd492ba6545b3750f6b9c7e879f83cd856f8f1829d4976435736ceb13fed0cc0cc8f03c395fca4439031512953215f206e7a44cf2b443b390756ca710c43bf6183de44139cee9b6e1c3d66bf8d0c36f2df5d3307318fc13c64069152f1a9e97debc5dde108416bfeee4d3a594d0e7854b5563f9a5ee884aaa589f1a813"], &(0x7f0000000240)=""/196, 0xa7, 0xc4}, 0x20) r3 = dup3(r2, 0xffffffffffffff9c, 0x80000) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fchdir(r1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) [ 504.696905] input: syz1 as /devices/virtual/input/input3154 20:18:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/38) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.772897] input: syz1 as /devices/virtual/input/input3155 [ 504.802112] input: syz1 as /devices/virtual/input/input3156 20:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvfrom(r1, &(0x7f0000000000)=""/166, 0xa6, 0x2, &(0x7f0000000100)=@caif=@dgm={0x25, 0x6, 0x100000000}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.873295] input: syz1 as /devices/virtual/input/input3157 [ 504.884333] input: syz1 as /devices/virtual/input/input3158 20:18:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0x25, 0x3, 0x0, 0x6}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.949385] input: syz1 as /devices/virtual/input/input3160 [ 504.987975] input: syz1 as /devices/virtual/input/input3161 20:18:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040a000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008081) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 505.063808] input: syz1 as /devices/virtual/input/input3163 [ 505.094931] input: syz1 as /devices/virtual/input/input3164 20:18:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0xc00, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="d7ad39d3b3c6c74d41ad9d1aafcee407"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040050}, 0x20040000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000380)=""/105) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x10, 0x70bd2a, 0x5, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000005) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3, 0x0, 0x969, 0x7b}, 'syz0\x00', 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/196, 0xa7, 0xc4}, 0x20) r3 = dup3(r2, 0xffffffffffffff9c, 0x80000) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fchdir(r1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) [ 505.176414] input: syz1 as /devices/virtual/input/input3165 20:18:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x4800000000000, 0xfffffffffffffe00, 0x4738, 0x8}, 'syz1\x00', 0x56}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x1, 0x7, 0x0, 0xd263, 0x0, 0x5, 0x200, 0x4, 0x3, 0x2, 0xf5c, 0x9, 0xfffffffffffffffc, 0x941, 0x400, 0x6, 0x8001, 0x1, 0x9, 0x7, 0x6, 0xfe00, 0x41ed, 0x2, 0x5222, 0x6, 0x1, 0x81, 0x40, 0x404c78e2, 0x101, 0xffffffffffffe4d5, 0x7, 0xda4, 0xd359, 0x8, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x3, 0xf, 0xfffffffffffffffb, 0x5, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='/dev/uinput\x00', r1}, 0x10) [ 505.221938] input: syz1 as /devices/virtual/input/input3166 [ 505.236210] input: syz1 as /devices/virtual/input/input3167 20:18:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x11, 0x7ffd, 0x8000) 20:18:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) 20:18:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = memfd_create(&(0x7f0000000040)='proc}GPLeth0^wlan0#:\x00', 0x4) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) tkill(r1, 0x20) 20:18:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x56, 0x0, r0, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 20:18:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 20:18:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) 20:18:34 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\t@'], 0x3) close(r0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 20:18:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") nanosleep(&(0x7f0000000000), &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x3, {0x2, 0x4c, 0x10001, 0x7, 0x3ec9, 0x7}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 505.410678] binder: 23230:23232 transaction failed 29189/-22, size 0-0 line 3118 [ 505.418721] binder: 23230:23232 ioctl c0306201 20007000 returned -14 [ 505.420013] input: syz1 as /devices/virtual/input/input3169 [ 505.427036] binder: undelivered TRANSACTION_ERROR: 29189 20:18:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) 20:18:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x3, 0x0, 0x969, 0x7b}, 'syz0\x00', 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/196, 0xa7, 0xc4}, 0x20) r3 = dup3(r2, 0xffffffffffffff9c, 0x80000) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fchdir(r1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) [ 505.499447] input: syz1 as /devices/virtual/input/input3171 20:18:34 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) 20:18:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 505.573487] input: syz1 as /devices/virtual/input/input3172 [ 505.575059] input: syz1 as /devices/virtual/input/input3173 20:18:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 505.772111] input: syz1 as /devices/virtual/input/input3175 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:37 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)) 20:18:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 20:18:37 executing program 3: socket$inet(0x2, 0xa, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open$dir(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000003c0)="f3410fbdc5cd8080000c6969ef69dc00d98a20d0d00fd1b02db5d900000070e4c653fb0f450fbd27a95ff965be3c3b6446ddcb01ef8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f576161787896c401fe5ff6a9c1460000e1b1c482010804f445e22c892a0f0000009f") 20:18:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x301400, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x6, 0x5, 0x4, 0x3, 0x0, 0xb2, 0x8221, 0x7, 0x7, 0x6, 0x9260000000000, 0x3f, 0x7, 0x80000001, 0xffffffff, 0x101, 0x7fff, 0x2, 0x0, 0x20, 0x9, 0x6, 0xffff, 0x49a2f7e8, 0x7ff, 0x1ff, 0x8, 0x3, 0x16d, 0xd302, 0x3f, 0x7, 0x100, 0x3f, 0x401, 0x788, 0x0, 0x1f, 0x3, @perf_config_ext={0x9, 0x1}, 0x8000, 0x100000000, 0x7, 0x4, 0x7fffffff, 0xe, 0x9}, r3, 0x5, r1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) 20:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) fcntl$setlease(r0, 0x400, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) 20:18:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') read$eventfd(r0, &(0x7f00000000c0), 0x2c3) 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 508.368794] VFS: Warning: syz-executor.3 using old stat() call. Recompile your binary. [ 508.372056] input: syz1 as /devices/virtual/input/input3178 20:18:37 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:18:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) recvfrom(r0, &(0x7f00000003c0)=""/183, 0xb7, 0x0, 0x0, 0x0) close(r0) 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) socketpair(0x4, 0x4, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 508.459238] VFS: Warning: syz-executor.3 using old stat() call. Recompile your binary. [ 508.499413] input: syz1 as /devices/virtual/input/input3179 20:18:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r3) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x5, 0x8001, 0x1d73, 0x1, 0x9, 0x6, 0x7, 0xfffffffffffffffd, 0x10001, 0x575165b2, 0xff, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x323}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/183) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:37 executing program 3: memfd_create(0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) tkill(r0, 0x20) 20:18:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fremovexattr(r1, &(0x7f0000000140)=@random={'security.', 'bdevselinux\\\x00'}) 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 508.626467] input: syz1 as /devices/virtual/input/input3182 20:18:37 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 508.687504] input: syz1 as /devices/virtual/input/input3184 [ 508.697706] input: syz1 as /devices/virtual/input/input3183 20:18:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x2007ffffffe) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:18:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:37 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r3 = open(&(0x7f0000000000)='./file0\x00', 0x26000, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) fcntl$dupfd(r2, 0x406, r2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 20:18:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socketpair(0x0, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x1000, {{0x2, 0x4e24, @remote}}}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:37 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 20:18:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 509.102504] input: syz1 as /devices/virtual/input/input3187 20:18:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 509.172017] input: syz1 as /devices/virtual/input/input3189 [ 509.183428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.195090] input: syz1 as /devices/virtual/input/input3188 [ 509.239212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.257711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2626 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.324563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24933 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.338534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8307 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.359040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31337 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.378796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24420 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 [ 509.393586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25970 sclass=netlink_route_socket pig=23380 comm=syz-executor.1 20:18:40 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00J\xbaK,\vLcT\xf7\x87p\xa6a\xdfYf\xfe\xf9_\xd9\x1d\xf5\xdek/\xf4\x80\xf0\x90\x168\x9b4\x14\x89DY\xe8\xf7\xd55\xab\xfc\x8f\xcb\x1a\xe3z\x85\xbb\xc1\x8b\x8c\xb1IqK\xed=Noa\xfc\x0f\x17\xd3\xc3C\xae\xcd\xae@\x19d\v\x1eE\x18d>j!\xe1L,\xb5\xc2\xf1-\xe4\x1dLv~_\xc6\xe6QCGR\x80`\xd2O\\\xe8\x8df/ \xe6>_\x10\xf8\x17ix\x8fA,\x86\xb0\xeeL\xa6:\x8bz\xaci?x\x988CrF\x12\xae\v\xaa\xbe\xae\x8f=\x88\x9f\xa1\xea^\x9a\x02\x01\x7f\xbc\xf0^]\xe4\xcf\xcb\xe6 ,I\xef\xfc+n7\xac\xcc\x9a,v\rs\b\a|0@\xbc\xeb;A\xc3\xdd\x8a\xed\xc8\x16]\xd0\x9dU\xd4\xcdH\xd1}\n\x00\x8d\xd8\xd3C\xcb\x03\xc3,\x9b\xb0~\x19p\xc9t\xcd\xc9D\xcc\xb9\xcd\vE\x8e\xd6zo\x03[[\xb2\xcdJ\xa2\x9f\xb5\xc7-5-\x1a\xc1\xe1'}, 0x48) 20:18:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xc000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x7, 0x2, 0x1000, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$binfmt_aout(r2, &(0x7f0000000100)={{0x108, 0x3, 0xff, 0x1a8, 0x7f, 0x1f, 0x1e4, 0x1}, "6d8c473bbc7931c432bb6ccbd1526de70f816d38be01585a9cc6e70fb106e8a8574f0dfb7ba2ccdfe8fd12dfeb848533a833a2eff2b09d3c29ca05dbdf512ec6e355dab8d41f081cdc97201a6a3e25c5cc8543c71db6f2e30ddc12ca25acd89e98542e7a8ec186b22942343520afc467d18b2d66042b3a087ac9a2e2b2720703dfc2ac6c5a8f4280007224d60a8895"}, 0xaf) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:40 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x2d, 0x3, 0x4}}, 0x14) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 20:18:40 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 20:18:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x2007ffffffe) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:18:40 executing program 3: syz_execute_func(0x0) syz_execute_func(&(0x7f0000000680)="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") 20:18:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 511.642712] input: syz1 as /devices/virtual/input/input3191 [ 511.654934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=23409 comm=syz-executor.1 [ 511.685665] input: syz1 as /devices/virtual/input/input3192 20:18:40 executing program 3: syz_execute_func(&(0x7f0000000480)="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") fsync(0xffffffffffffffff) 20:18:40 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 511.736703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=23409 comm=syz-executor.1 [ 511.744137] input: syz1 as /devices/virtual/input/input3193 20:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") prctl$PR_SET_FP_MODE(0x2d, 0x2) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) restart_syscall() fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', 'syz1\x00'}) 20:18:40 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0xfffffffffffeffff, 0x2, 0x2, 0x81, 0x7fffffff, 0x8}) 20:18:40 executing program 1: r0 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x6) [ 511.844253] input: syz1 as /devices/virtual/input/input3194 20:18:40 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:40 executing program 1: syz_execute_func(&(0x7f0000000880)="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") [ 511.937372] input: syz1 as /devices/virtual/input/input3196 [ 511.976044] input: syz1 as /devices/virtual/input/input3197 20:18:40 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 20:18:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 512.066005] warning: process `syz-executor.1' used the deprecated sysctl system call with [ 512.076453] input: syz1 as /devices/virtual/input/input3198 [ 512.142824] input: syz1 as /devices/virtual/input/input3199 20:18:41 executing program 3: syz_execute_func(&(0x7f0000000000)="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") 20:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='ipddp0\x00'}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 20:18:41 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) 20:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 512.634183] input: syz1 as /devices/virtual/input/input3201 [ 512.672849] input: syz1 as /devices/virtual/input/input3202 20:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 512.778146] input: syz1 as /devices/virtual/input/input3203 20:18:41 executing program 1: pause() syz_execute_func(&(0x7f0000000c80)="0f873fc000004a2be94535c7000000980f053ef3aec4a37bf0c50341e2e906660f3a0a3999c4a27d19f8c4810b5ca971000000660f115846410f9e61071266430f5671f3b1e6172525000e81660f54d880008080e2c441dfc7c462b99e3d1ce647ed69e08fc40095b6999932f60f613fc21d9053c7ab86c4213e5377000043d97e51f20f7cb40b20570000438f34b267f36eb40f68803000002e0fe0fc05ba16f2ae66410ffe3a64260fb61a286c6c0ff2f0458733c4027d2106366465f20f38f0d138e4a2b300b1500909660f3153098f49609a567be4a14081d7020000000df2436f310f362ec7c100000000e490c421c5fa4d00bc0f38de8e85e1f326c483e56f3f5c7d0f12e4f241e100260fe88c42000000000ff4c3bb3cbb3c02c421a9fda2e5000000000067d11175bb5000263666440f5530d800f0819e4c71000009000000c4a1025deec3662fd9d277cbc4a17d288700003e00c4c17b2c9100088041c4a17c1002970606260f38c9bb0f00000044e9010000004674fb0e077b7b450f14150300010028f247acedc4e3957f3a008fa9d094e821b66bd182ebf0f3e320afe3604391c1045c0b47cc47cc66430f38f6de389f9f060f0f2ef246e16d4363d0d8fbc9250d0d000000c2df") 20:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 512.823455] input: syz1 as /devices/virtual/input/input3204 20:18:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 512.951844] input: syz1 as /devices/virtual/input/input3206 [ 512.963995] input: syz1 as /devices/virtual/input/input3205 [ 513.049265] input: syz1 as /devices/virtual/input/input3207 [ 513.113303] input: syz1 as /devices/virtual/input/input3208 20:18:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rename(&(0x7f000012aff8)='./file0\x00', &(0x7f0000000040)='./control\x00') 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = dup3(r0, r0, 0x80000) write$selinux_access(r1, &(0x7f0000000040)={'system_u:object_r:sendmail_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x4}, 0x68) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x6, &(0x7f0000000000)="0adc1f123f319bba70") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) write$tun(r1, &(0x7f0000000100)={@void, @void, @ipv4={{0x3a, 0x4, 0x6, 0x0, 0x125, 0x64, 0x1, 0x4, 0x5c, 0x0, @broadcast, @local, {[@end, @rr={0x7, 0x7, 0x200, [@remote]}, @cipso={0x86, 0x34, 0x100000000, [{0x7, 0x6, "b2b37ffb"}, {0x5, 0x12, "f7a3f0b54298874033d4c9a07e5151cc"}, {0x0, 0x4, "7f4b"}, {0x7, 0x4, "e450"}, {0x5, 0x2}, {0x6, 0x7, "acd7417bcf"}, {0x5, 0x5, "bb8dad"}]}, @lsrr={0x83, 0x1b, 0x8, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x8, @dev={0xac, 0x14, 0x14, 0x13}, @remote]}, @generic={0x44, 0xf, "9a0bdc47ce9cac85eb8628f672"}, @ssrr={0x89, 0x23, 0x1, [@loopback, @rand_addr=0x400, @local, @loopback, @multicast2, @loopback, @multicast1, @loopback]}, @cipso={0x86, 0x4a, 0x6, [{0x0, 0xc, "86ee2413bbebb886593b"}, {0x2, 0x8, "d0f979c4fbaf"}, {0x1, 0xb, "9b12d56fa4335e031d"}, {0x2, 0x2}, {0x7, 0xd, "78e23f2f1aab242b2e724b"}, {0x0, 0x11, "152ed48437068846e30445ef6fdede"}, {0x7, 0x5, "fdb716"}]}]}}, @igmp={0x37, 0x101, 0x0, @loopback, "f248953a29fcedc98d57802ab18c7dba1a17d3bbdbb36a8dc230dfc9f6937c28280ce68a0a8d37d41709b2c73e0272a3adfaaf43bf"}}}, 0x125) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 3: clone(0x100700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000000)="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") [ 513.467753] input: syz1 as /devices/virtual/input/input3210 [ 513.487713] input: syz1 as /devices/virtual/input/input3209 [ 513.541152] input: failed to attach handler leds to device input3209, error: -6 20:18:42 executing program 1: syz_execute_func(&(0x7f0000000880)="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") accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_pts(0xffffffffffffff9c, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:42 executing program 3: syz_execute_func(&(0x7f0000000540)="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") 20:18:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) fcntl$addseals(r0, 0x409, 0x0) 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) fcntl$addseals(r0, 0x409, 0x0) [ 513.753158] input: syz1 as /devices/virtual/input/input3213 [ 513.785802] input: syz1 as /devices/virtual/input/input3214 20:18:42 executing program 1: syz_execute_func(&(0x7f0000000880)="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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 20:18:42 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) fcntl$addseals(r0, 0x409, 0x0) 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) INIT: Id "2" respawning too fast: disabled for 5 minutes [ 513.869600] input: syz1 as /devices/virtual/input/input3215 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 20:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x400805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8100048}, 0xc) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fcntl$addseals(r2, 0x409, 0x2) [ 513.957281] input: syz1 as /devices/virtual/input/input3216 [ 514.016955] audit: type=1400 audit(1556741922.390:54): avc: denied { audit_read } for pid=23619 comm="syz-executor.0" capability=37 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 20:18:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffffe3, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 20:18:42 executing program 4: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 20:18:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/138, 0x1a1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 514.625675] input: syz1 as /devices/virtual/input/input3217 [ 514.633204] input: syz1 as /devices/virtual/input/input3218 [ 514.647555] binder: 23632:23636 ioctl c0306201 20007000 returned -14 [ 514.658822] binder: 23632:23636 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer [ 514.673897] binder: 23632:23636 ioctl c0306201 0 returned -14 [ 514.681385] binder: BINDER_SET_CONTEXT_MGR already set [ 514.686816] binder: 23632:23641 ioctl 40046207 0 returned -16 [ 514.686909] binder_alloc: 23632: binder_alloc_buf, no vma [ 514.698784] binder: 23632:23642 transaction failed 29189/-3, size 0-0 line 3255 [ 514.708568] binder: 23632:23642 ioctl c0306201 20007000 returned -14 20:18:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:43 executing program 4: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:43 executing program 1: pause() syz_execute_func(&(0x7f0000000480)="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") 20:18:43 executing program 3: pause() syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c366440f56c9c4617b12e5c441dfd04b00c442019dcc0f11d44202910956d34f") syz_execute_func(&(0x7f0000000480)="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") 20:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 514.726119] binder: 23632:23641 BC_FREE_BUFFER u0000000020001000 no match [ 514.726421] binder: release 23632:23636 transaction 62 out, still active [ 514.745889] binder: undelivered TRANSACTION_COMPLETE [ 514.759566] binder: send failed reply for transaction 62, target dead 20:18:43 executing program 4: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 514.793499] input: syz1 as /devices/virtual/input/input3220 [ 514.803360] binder: undelivered TRANSACTION_ERROR: 29189 [ 514.827745] input: syz1 as /devices/virtual/input/input3221 20:18:43 executing program 4: r0 = memfd_create(0x0, 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$selinux_user(r1, &(0x7f0000000040)={'system_u:object_r:memory_device_t:s0', 0x20, 'unconfined_u\x00'}, 0x32) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1a, 0x0, 0x638, 0x8000, 0x1000, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r1, &(0x7f0000000140)={'syz1\x00', {0x7cb, 0x6, 0x0, 0x3}, 0x17, [0x43, 0x8, 0xfffffffffffffffe, 0x101, 0x5, 0x2, 0x3ff, 0x7, 0xfff, 0x2, 0x1, 0x0, 0x3, 0x1, 0x4ada9e27, 0x52a, 0x3, 0x9, 0x3, 0x1, 0xffff, 0x4, 0x8, 0x0, 0x100000000, 0x3e, 0x7, 0x9, 0x9, 0x1, 0x8, 0x7, 0x7ff, 0x7, 0xb9, 0x1, 0x48, 0x3ff, 0x40, 0x5420, 0x19, 0x3f, 0x1, 0x3, 0x0, 0x0, 0x4, 0x4, 0x400, 0x3, 0x8, 0x9, 0x7, 0x4, 0x3, 0xff, 0x3, 0x1, 0x8, 0x80000000000000, 0x100000001, 0xfffffffffffffffc, 0x3ff, 0x1], [0x2, 0x3, 0x7f, 0x5, 0x9, 0x9, 0x3, 0x6, 0x924, 0x6, 0x8, 0xffffffffffff7fff, 0x5, 0x7ff, 0x3, 0xb4, 0x8ba, 0x9, 0x1a, 0x100000000, 0x200000, 0x7, 0xffffffffffffffac, 0x8, 0xfff, 0x0, 0x3, 0x6, 0x0, 0x7e0, 0xb4e0000000000000, 0x8928, 0x0, 0x1, 0xff, 0xad4dbb4, 0x4, 0x53, 0x9, 0x5, 0xb8, 0xfff, 0x60b1, 0x800, 0x40, 0xc3, 0x5, 0x40, 0x7, 0x2, 0x58d, 0x6, 0xfffffffffffff46c, 0x6b1, 0x5, 0x9, 0x1d, 0x200, 0xff, 0x7, 0xdd1, 0x65, 0xffffffffffff8001, 0x8000], [0x10000, 0x3, 0x7, 0xfff, 0x8ba, 0x9, 0xaf, 0xfffffffffffffff8, 0xdf60, 0x5, 0x1, 0x100000000, 0x3, 0x970, 0x7, 0x6, 0x100000000, 0x8, 0x7f, 0x0, 0xfffffffffffff000, 0x5, 0x100000000, 0x1000, 0x7ff, 0x50d, 0x319, 0x1, 0xb79, 0x80000000, 0x300000000, 0x3f, 0x800, 0x7, 0x4, 0x1, 0x3c3, 0x2, 0x9, 0x8000, 0x7, 0x4, 0x7, 0x101, 0x5, 0xffff, 0xc21, 0x1, 0x6d24, 0x5, 0x4, 0x0, 0xd, 0xa1b, 0xb0c, 0xee, 0x8, 0x200, 0x1, 0x101, 0x1, 0xfffffffffffffe00, 0x2, 0x7], [0x6, 0x7, 0x1, 0x1, 0x0, 0x8001, 0x8001, 0x414000000000000, 0x0, 0x8, 0x100000000, 0x1ff, 0x11, 0x100, 0x200, 0x9, 0x8, 0x9, 0x194d, 0x4, 0x8000, 0x6eaeaec4, 0x8, 0x6, 0x9, 0x0, 0x4, 0x5, 0x1f, 0x9, 0x6, 0x4, 0x8000000000000000, 0x40, 0x80, 0x6, 0x5a, 0x2, 0x3, 0x3, 0x3, 0xfffffffffffffffc, 0x80000000, 0x9, 0x5448, 0x5, 0x401, 0x1000, 0x10001, 0x0, 0xff, 0x6, 0xfff, 0x10000000000000, 0x0, 0x0, 0x3, 0x8b, 0x7fffffff, 0x6, 0xd3, 0x7ff, 0x1, 0xff]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:43 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1c9, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 514.974620] input: syz1 as /devices/virtual/input/input3224 [ 515.013272] input: syz1 as /devices/virtual/input/input3225 20:18:44 executing program 1: syz_execute_func(&(0x7f0000000a40)="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") syz_execute_func(&(0x7f0000000c40)="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") 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 20:18:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'syz_tun\x00', 0xfffffffffffffe01}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:44 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:44 executing program 3: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 515.677426] input: syz1 as /devices/virtual/input/input3229 [ 515.686627] input: syz1 as /devices/virtual/input/input3228 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") readv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:44 executing program 0: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x4, 0x7, 0x7, 0x80}) 20:18:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) 20:18:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2) [ 515.855364] input: syz1 as /devices/virtual/input/input3232 [ 515.871064] input: syz1 as /devices/virtual/input/input3231 [ 515.930772] input: syz1 as /devices/virtual/input/input3233 20:18:44 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/51, 0x33, 0x100, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x110, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x415}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a}]}, 0x40}}, 0xfb96375ffd17d660) 20:18:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20402102001fde, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, 0x0, 0x0) 20:18:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 20:18:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008915, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {0x2, 0x9, 0x5, 0x400}, 0x28, [0x2, 0x3e1c, 0x8, 0xffffffffffffffc1, 0x45a, 0x2, 0x1000, 0x400000, 0x8, 0x80000001, 0x3, 0x5, 0x1, 0x40, 0x4, 0x2, 0x8, 0x822b4d, 0x16d15a2b, 0x0, 0x5, 0x1f6, 0x7, 0xff, 0xc47, 0x1530, 0x100000000, 0xb3, 0x2, 0x5, 0x7, 0x1ff, 0x3ff, 0x5, 0x9, 0xffffffff, 0x5, 0x4, 0x8, 0x3, 0x2, 0x100000001, 0x1, 0x2ad3, 0x0, 0x100000000, 0x3, 0x6, 0x21d8, 0x8000, 0x0, 0x4, 0xfffffffffffff000, 0x4, 0xba, 0x4, 0x7fff, 0x9, 0x200, 0x1000, 0xec0, 0x2, 0x7, 0x9], [0x0, 0x6, 0x4d5c, 0xfffffffffffffff7, 0x200, 0x0, 0x8, 0xffffffffffffffc1, 0x908, 0x9, 0x2, 0x6, 0x8, 0x4, 0x8, 0x0, 0x4c6fa7a, 0x7, 0x8001, 0xffff, 0x3f, 0x9, 0x1, 0xfffffffffffffffe, 0x6, 0x7, 0x100000001, 0x3c00, 0xffffffff80000000, 0x2, 0x200, 0x1, 0x1f, 0xcc, 0x0, 0x81, 0x3, 0x5, 0x3, 0x5, 0x0, 0x1, 0x5, 0x0, 0x9, 0x3, 0x9, 0x8, 0x2, 0x0, 0x6, 0x8, 0x2, 0x81, 0x6, 0x1, 0x5, 0x69d17646, 0x6, 0x800000000000, 0x1, 0x0, 0x7f, 0xfffffffffffffffe], [0x5, 0x80000001, 0xad, 0xfff, 0x8, 0x1, 0x3, 0x1, 0x5, 0x7, 0x420e14a2, 0x9, 0x7, 0x6, 0x80000001, 0x9f3, 0x5, 0x0, 0x3, 0x24, 0x0, 0x3, 0x1f, 0x0, 0xf2, 0x0, 0x8, 0x3, 0x2, 0x80000001, 0x5, 0x6, 0x7, 0x7fffffff, 0x0, 0x0, 0x10000, 0x61f, 0x1, 0x40, 0x179780000000, 0x2, 0x7, 0xfffffffffffffff7, 0x2, 0x40, 0x7, 0x3, 0x0, 0x0, 0x100, 0x20, 0x9, 0x3, 0x3, 0x80, 0x1000, 0x8001, 0xfffffffffffffffd, 0x1, 0xfae, 0x7fff, 0xf4, 0x2], [0xff, 0x4, 0x7, 0x8, 0x1, 0xd8, 0x800, 0xfffffffffffffff9, 0x7ff, 0x3, 0x7, 0x10000, 0x3, 0x6, 0x5, 0x8, 0xd9, 0x8, 0x20, 0x5, 0x3, 0xfffffffffffff800, 0x0, 0x633, 0xba, 0x6, 0x800000010, 0x2, 0x2, 0x2, 0xffffffff, 0x5, 0x8, 0x5, 0x100000000, 0xfcb9, 0x10000, 0x5, 0x8, 0x6, 0x0, 0x9, 0xed4, 0x0, 0x401, 0x80, 0x80000000, 0x6, 0x4, 0x2d86, 0xfff, 0x7, 0x9, 0x25, 0x401, 0x6, 0x1, 0xfff, 0x800, 0x95b4a10, 0x9, 0x8, 0x5a]}, 0x45c) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/fib_triestat\x00') write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, 0x0, 0x0) 20:18:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, 0x0, 0x0) 20:18:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='syz1\x00'}, 0x30) syz_open_procfs(r1, &(0x7f0000000100)='net/ip_mr_vif\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 516.535254] input: syz1 as /devices/virtual/input/input3236 20:18:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000012, 0x0, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}], 0x1) 20:18:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x7, r2) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 516.634044] input: syz1 as /devices/virtual/input/input3237 [ 516.713207] input: syz1 as /devices/virtual/input/input3239 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 20:18:45 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300021b000000000000000000050005000600000000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c1aa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d0000a43084dc1840039649673b733890eb3d6e22981196f1a0bfc0498dda87000000000200010000000000000005000500000000000a000000def7bd3e10e2e6e0000000003f000000000000003692daa992ee1466000000000000"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}], 0x1) 20:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) 20:18:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) shutdown(r1, 0x1) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}], 0x1) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)='X', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1}, 0x0, 0x0, 0x0) [ 516.807568] input: syz1 as /devices/virtual/input/input3241 20:18:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000500)="400feeec4a2ae92c66b64c0f05bf16000000c4a37bf0c50141e2e9c422e9babb3c0000004a0fc7a4ea70db0000451a3f0f383a9e02000000110f9a4e5b5ba265aa104b26660f38b01e2fdee51bc4ad047f4607c421dd589fc4e10bf8c426f2f045f61964620f42848a1c000000c4c1a9ecf1262e2e66450f7d64c608c4a3bddc4c77f86262f20f7cd8c8a1a12ad764d3cf355353af6766f2ab440fec3f67ddea660f79ce768ac3f08340c24a00000000000f2d8f0b000000c2a0c10b00cca27a0e0f414e53d2c40f0f9f3c6436b2aa66450fc4650000f08004923bddcdcda2660f38346800c481c5f89780000000c4c1045ccc7d75420fa534900f5fd2f2af450f91f3f30f5ea5a9a500006cffbedc4e61c95d45e445e47ace7ace00a2f1fbfb3b62") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2) 20:18:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0xe8) [ 516.908022] input: syz1 as /devices/virtual/input/input3242 [ 516.927140] input: syz1 as /devices/virtual/input/input3243 20:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2) 20:18:45 executing program 3: syz_genetlink_get_family_id$ipvs(0x0) [ 517.031738] input: syz1 as /devices/virtual/input/input3244 [ 517.074997] input: syz1 as /devices/virtual/input/input3245 20:18:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) recvfrom$packet(r3, &(0x7f0000000100)=""/252, 0xfc, 0x2000, &(0x7f0000000080)={0x11, 0x19, r4, 0x1, 0xc612}, 0x14) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/232, 0xe8}, {0x0}], 0x2, &(0x7f0000000740)=""/241, 0xf1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{0x0}, {0x0}], 0x2) 20:18:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000010, 0x0, 0x600) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000032, 0x0, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 517.202912] input: syz1 as /devices/virtual/input/input3247 20:18:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x100000000000000, 0x30000000010, 0x0, 0x0) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) 20:18:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040126bd7000fddbdf25080000004800020008000200020000000800010004000000080002007207000008000100090000000800020003000000040004000800020006000000080002000080000008000200e64b00000c0006000400020004000200"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x100000000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) 20:18:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/232, 0xe8}, {0x0}], 0x2, &(0x7f0000000740)=""/241, 0xf1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 20:18:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c) signalfd(r0, &(0x7f0000000000), 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") readv(r0, &(0x7f00000008c0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) 20:18:45 executing program 3: [ 517.428581] input: syz1 as /devices/virtual/input/input3250 20:18:45 executing program 3: 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[], 0x0) fcntl$addseals(r0, 0x409, 0x0) 20:18:45 executing program 3: [ 517.473372] input: syz1 as /devices/virtual/input/input3251 20:18:45 executing program 2: 20:18:45 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 20:18:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:46 executing program 3: 20:18:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/232, 0xe8}, {0x0}], 0x2, &(0x7f0000000740)=""/241, 0xf1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 20:18:46 executing program 2: 20:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x20000) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = dup(r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) getresuid(0x0, &(0x7f0000000780), &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) fstat(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000840)=0x0) r15 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002500)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000002600)=0xe8) r17 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002640)='/selinux/member\x00', 0x2, 0x0) r18 = fcntl$getown(r0, 0x9) stat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = getegid() fcntl$getownex(r2, 0x10, &(0x7f0000002840)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002880)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002980)=0xe8) lstat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002a80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002ac0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000002bc0)=0xe8) r26 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002c00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002c40)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002d40)=0xe8) lstat(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = accept4(r1, &(0x7f0000002e40)=@generic, &(0x7f0000002ec0)=0x80, 0x80800) r31 = gettid() lstat(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000002fc0)=[0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) sendmsg$netlink(r3, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000003140)=ANY=[@ANYBLOB="680600001d00000225bd7000fbdbdf250c00010008005900", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08007d007f00000108000400", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="000000d800580008000f00", @ANYRES32=r2, @ANYBLOB="69da2b132f40df3fed7b4d98bdbcbdaa513300d7a3063e3e2bf6c0f390ef0b36bd5f4f38929b5e33e034b63fe6566e0ff83884cee563290b117338bce71379f44cc6636cf2abaa9c91aab0ebfb4c99d4e00f2feee7c89382af3b90bd38103e1f660b0423229e5203bc37e3bdc24aed18ce4d1832ef91563f70eb463a24ddf2623d3dcb0738f1b909e7d7d8ce2fac88c747372011a990ffd55720e849b5ee302b20a7c3e1c87f5d41672eb531b03e793014f564e9e0d214c8bf066a9d3afc4dc11580c0647a67d02190b14473d40be2629e288a9b590000003c002c00737bd45c1cc91f16a29fbd3f82e992f0a34c85fa4332961427ca65e5daaa64d9231a633bc19799957e700f9aeb114ba8ce88a393b79bc1c0b00058008a263715d137beaf0b711480aecc55a21b0d2ec25f6431d32f850aa4f158244ce8406f94500c88ba41d30fca2a34390e3e89a91147b8fac9c23082353eae0a0509acb1036ec2c76eb7731d91b23b24e70a96656cd04de34da550f33f1de8cc0848be23d6d5588e30008d3095175eff375b13fbeb426aa4dbd3ce992750f0281cee9d076cdf517e4198fd56f576f489840805cff9a463acfabee41c9af7028cc0f37729ee08000d00", @ANYRES32=r6, @ANYBLOB="ec01260008005b00", @ANYRES32=r7, @ANYBLOB="08001300", @ANYRES32=r8, @ANYBLOB="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"], 0x668}, {&(0x7f0000000540)={0xd4, 0x19, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="844df1062a42f26a38fd855edc63bd5931967fcbda234934f336e10e1ca28c6a676307f689bac7e3b16ddc25d6b8f26133da41cbe3bcad831a71268ecef44589bd44c25e16a63f07520909f90f3b40850069d39d4a59f77c96ec03bdf11ce7edecf4f7674b9bc3a7fedaa92cce5dda935498519a96dc5006d5f4e00411135ee58491aea6137e59fb8cb219b848b5e091c10dbeab9717074ca1ff754bb821ee1a2d3dbf824d655d221b48afec16c19ef9c48e71d12f", @typed={0x4, 0x3b}, @typed={0x8, 0x43, @u32=0x1000}]}, 0xd4}, {&(0x7f0000001380)=ANY=[@ANYBLOB="bc0100003f0008002bbd7000fedbdf2510002c002f6465762f75696e707574009c017d0008005200", @ANYRES32=r9, @ANYBLOB="cc004a005734823fcb7116d0a8e51a0ea87a1c4c67572aaee396c70cbb6b40e24974aefaf38a76f47560edd4e47fa7934b74b4dcace38da25548c673e51d9069652894fdb4ca629b05f3bd80b73d1d4e4c5c4a67ea04a00c9dc5778d5b0a8707789d850cdcd838091cc7e4f3c0368e30dec527dbdc1ef5a1cdc5784e9c90aa480000000000000005c713d863776541b319d89aed5bc5f6658193a2d68833babebfa3601b8db1d1a55b640c67bb7751f3254fd301871b17156395db33a7fb8986cb67b502d6973edfeecf1c002bb0119396e4618346a47f9bc0750f94952cdcb4362df5b763c3bb92867691d3c8931fe7811125de4203f2423ab97b5df3ee525706af43392edd56361b03baf846beb7691079734437ae131f1e98bcb2fbc3fc001738c2b077d768fb9fa2df3e1c7d2df127d87135dd7a0c6d30d49c651477cef67be95bff11b3bc6c0fa7d954717781cb21681c2e69918fae846414001c0000000000000000000000ffffac1414bb04008300fb68336d24fb123f9729ee016860dc"], 0x1bc}, {&(0x7f00000016c0)={0x7f0, 0x39, 0x800, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1d0, 0x1a, [@typed={0x8, 0x14, @uid=r10}, @typed={0x8, 0x11, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @generic="34dd2512b776afcade3411c972d50925184a1b3dec957be08ec74b9f3d3df9481cda47397afa5816d56649977ec6aa9753e960703a930b58225c84fb2a390dee5db055257e005b545a43b0848f9e403239a6469d9b", @typed={0x8, 0x5, @uid=r11}, @typed={0x4, 0x8a}, @generic="55eb5cfadba75f56697e785274906e7c94f3cbc1779e8d3d905158c521444186550c", @generic="550752a3a3a68a0cddcaad4cee7ede12048b058d5b9ce1d69b38436a52085bb1a99366d928c38b462a4e207920bcfb0e77a5cbfd6465a03847de9297391b5f472f62a39bf1780830d44ae0d388eaf69b39494a732a91447189860a05", @generic="1139a0abdfb860f1b43615b0fad38b944b18865312efcf88153624b2ca1cc09950a1e39c05183fc58c11fbcf37f15c9c10d68bbdd0f0cf63e67bac6eea283f5f0aaf60e9b288340cbdd0f14fe1f7faa519c0d063eed8dd6143d46e27f0090a582d56c288ec8da8bb00428b2476aa457e2cd16efba87331ba5fea34155bf14e65ac0aacee5a9d984e427005bc668d996f1af9401cc8419e7d5edd95", @generic="83fc1a43b44038534d59dd5a06f1fe2c748a32fe35466e21d098b2e44f008ac6faec0e7e1433dee2cd1363a1bca15f98bc99eb5f2ef7cf832237ae5b6617", @generic="937c"]}, @nested={0x250, 0x7e, [@generic="348492b5535eb6db89a2f6313cabbd5b51290fbaa9147df0d8977eff2876775ba275aec0d5ab211fa240d9e9ab9661581b8aadbb0b63b13a8a925accf425c50d9c0c08330746e42f83eb3491c68e1961c71d97bdb90b06cbefa1e76f1fc972be26a09c3f29d7958b63d0341304ce75f3af7055e49f0574b74bb26a68ecb9422ef69fd30ee589d48ccae6b5495f666caf2440d642a6d54540f2f764f73e1e75cc2ce271042d087255c7d25b31cdb6128c0b99cb6e", @generic="4cd13cbe90163ba04cd95349115b7856d46d0ed3dcf16e3382150b3eb24ab488d629b41c840713719a3ce99542df6b0e74bb2c9facc3118cbb9398414bb6977647d697c81cd7fb0b0a197a320ace2d079a3e334127516781bb4791d99a07f7015c66957fc1de89993c39632e9bbf367019d2ae32b74392c97fb7541f4126afd4e5abe86a280a24b71d532a01528608c817dac3d9385f8c5ee16de43b6ad7a2375d37b3c07e72991703586256e0082d36970f602a6d7a24adfb5a38da3ceb088ff67d17074ac4ffa20088fa88", @typed={0x8, 0x26, @u32=0xff}, @generic="aaeba2135156f8b0199758c94c351661ff76c514a4d87310652946b52b3791d1ede090a66185a24c81aead0c3225599bd2425ca9ad14102cb70745aba506aa0c9a4705ff906e515f016819780041dcadaef228ba90899f519a6205c0ffe8f441303a08a7c3fe9ca5692a9f252bae9281677ed915c534755d7787398f0734bde64a078054f41b8e48184f94f64679900ee07618d1f5197acfc16950932847e242ce9e193d2d3650ef58a22b8619a2b34d39f632f71c5943", @typed={0xc, 0x8b, @str='syz1\x00'}]}, @typed={0x8, 0x3e, @u32=0x8}, @generic="ff2ee4fd2a2ff4692d671dfff4851e0e2f8e5f52e4f17f507108f8b0e70c2731365601b2e02557be8b35b5933feaec80d69b2cdeb4e1c4720fcf7a48fd8e1a25fe86e8be3e32f81fe6e3f3d06d0642b4b58b4892dad7e76d56c876bba9836bf4779698a71bf6a25c7c8709f8a147faa75c187dfde6fa353b4a78148f966ed4d0e545b7b0c56d173eb9d6848283f3331ab2f580dd6f102f31a271ed214aa38fcf791e306a5b7bb6aabff61ce60433cbaa5184c58b9917d313e25045195fa1dcee", @generic="80b64cd1a902852bdac3694d4285119e81e233038c7dbe8ac1aedd13d56acde21401e55ebf1e5aed6ae5af3e088ee4761bcc4c539633e4da88cb0f63c00e55e8e0542f4888243e9aa286caeae4567eefc386c36b2ecd5c02dc36659ff0bc6245a2e5ad7136a4914a1f5fbbf2d219a17f0cd79742abe88d883c9c0801c644b0d48b6a12c232574b3a51eb35ec52d8bf055a58563650813dc4fbfea39d5115dff9c2b687d342a5310461c43879e80b7ee05ca7bef72a57056241aa978b3b0845a799b5bbfefc828b30bf7a38812527def6d1471d366473d03883f94808d7f32506e606b6c55b683442db01db4af1541c6bb1180987e9cf1891", @nested={0x200, 0x53, [@typed={0x8, 0x4c, @u32=0x81}, @typed={0x10, 0x6, @str='/dev/uinput\x00'}, @generic="cc256338e4e7f302757100bafcb684d6d307724c3ea00a896db0db54e8bfc5043d0342eda206db5acaf1ca25904c6457dc9d9d012fe8268e01b54d7a189f9bdffdd14eb12cd6579476af9fd17b50a3cc260d519e4511348ad958de831592b20e2c5d73c0555451f47ca32b90051ee31687d29c8118aba62732f1da03df69f5eb80bdbc2f894dbf64b89e3db9811cb1ccdf7432ddb436d8444b9ee1ec6eeb69b03f0d31c181ff7c83600d99a22b961761d734235b7a7a2e0eccfdd32d4e955d80ac0f9d3403403c1c4866a0a5893bfdbd633bb7e0beee231b23dff0eb5e6d", @typed={0x8, 0x6b, @ipv4=@rand_addr=0x1}, @typed={0x8, 0x5e, @uid=r12}, @generic="67000e7ea96f61b5ce0006d5d34c02d2491319967363934a5d8b86fef40471cec7f54bc97f8a97e088b4691688038fdc047519beab100a2ac76c3ac71fd41d544d019228132d8f11e465e121f19c5230e52f63d45300714daf8e250d9909215283a4d053e4c6c2c433549b41f3a278400ca8eb85d8562cf6a068def26b70b3f0b16033ca66cc9361cdca4e4c6a6f8042f3f57b8cc0ba7b741e200d6e2f2517188b256d7cd595bd41a860be8352bf190859c4aa6510e84935aa2d5d5b12abc08d6e3cac855a064fbe623ae7363fb169f58b3a90be5a0c629e49278d139d5cfe6e689130c94c2740b424d855", @typed={0x8, 0x2c, @ipv4=@empty}]}]}, 0x7f0}, {&(0x7f0000001ec0)={0x118, 0x2f, 0x900, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x94, @pid=r13}, @generic="b63e9526a77ddb1a5fb58ad84fde1be21178c041652c2879398022bcc8ee334b08f06b8f67d8977c45ce062412d37d0645075dfd0844ae4655d43618d931d94653ba6d043364f9140c555ff28e2d3e04c01bab83f858d845368f1a47e703b676a37cbc4204c0ba8f0972e2d9d7ee347fb447ac0168aa4c1db821ac194a8af13b5f8cf6c4c1ed347b80c45d29bfaf46d4b419d2d45a6feae0c67f6e5daab826083c794e538d43e52eae2cd9381464de7735092e28582567f4fce1f3424a9e495d97c5e3bbfaf46d87cf3a", @nested={0x2c, 0x27, [@typed={0x8, 0x59, @ipv4=@loopback}, @typed={0x8, 0x81, @pid=r14}, @typed={0x10, 0xb, @str='/dev/uinput\x00'}, @typed={0x8, 0x6c, @fd=r0}]}, @typed={0x8, 0x2d, @pid=r15}]}, 0x118}, {&(0x7f0000002000)={0x358, 0x3c, 0x808, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0x7c, @ipv6=@empty}, @generic="281e4a316fa53cd99e18f98a3158fd86da1d553d58adc89ba0a35fed0fe0dbd412949060a6afc680cd44287dccdf8fad5dbfe46bff01610fc52b12e38a9ce870e906db7d1fddf1ac", @nested={0x10c, 0x5f, [@generic="12940d97794c276f9c628c58078c174830907d343219b73280af56e19fdd396bdfcaaa0b96d6f976a48fd7743ed4e9bed75e03d80ce303c86823939fe8c5d812bdac112470bb105e10db540279838f1526342e15d82074b03d35e20630028c3b06df97ea2cb17715c090b9d5f768247e0314b84a8dd1a5230f319733202383287678b9a16fc67558d1a96e114a2bfe2bfc5e220fb00e70445a1df53aee236fb0756f025000280ffb225333918f3ad36ab4df5ee1c2f9ac36fdd8f12e52b12db8b33a5c7b6ec4c076664cb8b210b26d34593abe415be2088c1688195cf7ce5c7e94f1b8b7ec5dab001448255eb382d2b7e90547696cc2335691d0", @typed={0xc, 0x4a, @u64=0x9}]}, @nested={0x1e0, 0x1d, [@generic="16552842fd457f48e1981c734e741bfea634faf0751e77ed0fb8c8c478b427a05e7ef1b7973fa3c2c247f921581f73af12bd90cfd0a4f1fd", @generic="fd1185885892612af744167f49f1a1d471d72d473c2f70a7632cadb7966be40fdf6916f0197d15a119540a9c7db48c9ac93ab3c2c760ac7e2d49cb99909701d1e6c46459a4dea6cd510f54feedb91a98dcb5ed2171c701", @generic="f0947b9f", @generic="7da4f54110dd518d2eb260028e54117b7d808e179ccee65f58f63f71328bac1f495e584a14f5fe1871ba2a7c2e2b9f1156f1c1834d2f02f0402ba6497b61e955e2a6325ff65ab4f68c22998cc02a5794b9b46334d76d423fcac6116e8c1919dbf1334fb29340cfc5133ba041df6a6eb151022edc00b1f5cba2ea546023b6abb003ae1acac527023e18f2ea", @generic="1587a8e4b429026e441dca7ac93faa3231fffcd53e51a1bf6acc54ba73783b80769fff0b971c6529da761eb4b3e2d649a86188205dd8ba63a2c11b5e2e66ec4d84ec18d5f6bbc389ab7712cbaf2b5429cb6eb2f88a21cb39b961311134bd2337e997bed72205b5021789626e65d942bc941b6ccb1455a0dcd9b8cab42dc95da5f08c17b8abd5d9fb0a03044372f0bb644c799ffc84a3d0e65cb7047b06710966abd0a271d5d104b664c58dc98bd3ea4076cb0f81ed1fa65de011608486"]}]}, 0x358}, {&(0x7f0000002380)={0x138, 0x3b, 0x621, 0x70bd27, 0x25dfdbff, "", [@generic="09aae7890e0faf94868aa1ecfa927b211e865b699a410dd7d32e00dc7980ad7a0d82430c827c135fea1907337cdb70985a5fcdb9706cda0651210c9a3167d933df0a2ca5824ed91b3b3d9c570ccf7d3b762e43ae728d6cd7bc9efc957bf2bdf6d5a31e040db55318e0924b3d1eb411fda13f75553ab54043b7b68d71734e4a238e26a89ddf5c088906220f18617b34fa1c462fb466dffa5ca0e1b7567b162d6b49b40843c648400566824b99ae6c8459a308d129ea7a145e0da1c0277d562e862c62c3e4504e13a5839e0b", @typed={0x8, 0x8, @ipv4=@local}, @typed={0x8, 0x23, @u32=0xfff}, @typed={0x14, 0x2e, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x18, 0x62, @str='user(mime_type),\x00'}, @generic="4eb006d01899a3d112e009a9999d314d037a787b3e63d590203fe139673772a0"]}, 0x138}, {&(0x7f00000024c0)={0x18, 0x27, 0x0, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x5, @fd=r2}]}, 0x18}, {&(0x7f0000002680)={0x38, 0x41, 0x510, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x4, 0x67}, @nested={0x24, 0x54, [@typed={0x8, 0x63, @uid=r16}, @typed={0x8, 0xd, @fd=r17}, @typed={0x8, 0x31, @u32=0x5}, @typed={0x8, 0x5f, @str='\x00'}]}]}, 0x38}], 0x9, &(0x7f0000003000)=[@cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x18, 0x1, 0x1, [r30, r1]}, @cred={0x20, 0x1, 0x2, r31, r32, r33}], 0xd0, 0x10}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:46 executing program 3: [ 517.683289] input: syz1 as /devices/virtual/input/input3254 20:18:46 executing program 3: 20:18:46 executing program 2: 20:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl(0xffffffffffffffff, 0x4000000000000009, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8440, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x60400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140), 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000002c0)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 20:18:46 executing program 3: 20:18:46 executing program 2: 20:18:46 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 20:18:46 executing program 3: 20:18:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x83) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:46 executing program 2: 20:18:46 executing program 1: 20:18:46 executing program 3: 20:18:46 executing program 1: 20:18:46 executing program 2: [ 517.943988] input: syz1 as /devices/virtual/input/input3259 [ 517.956997] input: syz1 as /devices/virtual/input/input3260 20:18:46 executing program 2: 20:18:46 executing program 3: 20:18:46 executing program 1: [ 518.097820] input: syz1 as /devices/virtual/input/input3262 20:18:46 executing program 4: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 20:18:46 executing program 3: 20:18:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x35) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) 20:18:46 executing program 1: 20:18:46 executing program 2: 20:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") close(r1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) 20:18:46 executing program 3: 20:18:46 executing program 2: r0 = socket$inet6(0xa, 0x400000003, 0x800000200000003a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 20:18:46 executing program 1: 20:18:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 518.215782] input: syz1 as /devices/virtual/input/input3263 20:18:46 executing program 3: 20:18:46 executing program 1: [ 518.317413] input: syz1 as /devices/virtual/input/input3266 [ 518.352939] input: syz1 as /devices/virtual/input/input3267 20:18:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x101) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 20:18:46 executing program 2: 20:18:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x806cb1}, 0x8) close(r0) 20:18:46 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r2, r1, 0x0, 0x4) sendfile(r0, r2, &(0x7f0000000080), 0x84) 20:18:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x802102009ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000040)="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") ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x9, 0x14005, 0x2, 0x5e8b, 0xae, 0x72cf4dd2, 0x8, 0x4d43, 0x8, 0xcd, 0x7, 0xff, 0x100000000, 0xfffffffffffffffb, 0x7, 0x8000, 0x2, 0x7, 0x1, 0x3, 0x1, 0x3, 0x2, 0xffffffff, 0x1f, 0x4, 0xffffffff, 0x7ff, 0xff, 0x4, 0x3, 0x0, 0x21bf, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8, 0x2478, 0x89, 0x0, 0x4a, 0x1, 0x10001}, r1, 0x10, 0xffffffffffffffff, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 20:18:46 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) symlink(&(0x7f0000000140)='..', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 20:18:46 executing program 3: [ 518.491792] syz-executor.1 (24055): /proc/24055/oom_adj is deprecated, please use /proc/24055/oom_score_adj instead. [ 518.531619] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 20:18:46 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) [ 518.599737] audit: type=1326 audit(1556741926.968:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24056 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0xffff0000 20:18:47 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="5a6095e4e5d9a9fa3ee162fc19acac9e0dce70da70776662b07f0f4922f3498ecee56f6fba4b10acfdd167a4283d4b09b8d48ff3729deae6d053d3af8d7a29e9e4d5abb5ed872fbd8e14dbb4ec31449cb409936bd0c03a3bea461413307da9979c112dcd2d06d460a93bb9ef171849ec9eb33d1a3909c0cabf611f024f03442a6344fa9151bedf348b937807e711791fb600ac2a81a756a1a7a58b2f34c21381083750a8d21ed43f24396539b337cf1d12c3f009a6ce1ecaa28124382aebc340cab08806148ab54eba83b473c185c1ac8f3bd5e8b5c058055174e4b219262070d1", 0xe1}, {&(0x7f0000000200)="4fe2faf6b3fcbab61c194237dbaab2f9cc05d22d360360cecbd26faaa8cd08963856f821778850f4a68d824ef0306fec8d77eb2337f18c2db76f99ee402c40e5092b954baa679ffd0380a5d0607ea7f1e2146d66a466315dfa76e028bc5388c5d9c014b8728b6373256b9bec026b99a7e2c1c6de27d84bb5aba1658f1a7eeaa71edf70bb9a2def59caecc1504eda3e0943b7c8c485cca0e1c2f809ac16780f762dd02314781198aa9393", 0xaa}, {&(0x7f00000002c0)="c5126b749afe3c4370ebc3b20bcdb9391293cfc567f78d0f3667c9ac8e9d3736356cb6ccf0df1207b3100ea51ac385f58a912d3358df6f11c032a2582883ed13bb846eb8f6f0d5cc2b346088455bf0b0a0a66aadf31d9bbb5e5d8fb3e3226f81f9b58b31355c89c175b5709b4a7c3420f859511cba026452233a71e82ee5f0f24c4625f77fea2774fd2143ffeb57ed672edbd9b64051539f3f5ac752dca80495da4d35f8c2df80b884afb9e23b7786168ffadecaadf4ea4b49f51b092a91855db625c9452d40211f0b32df42b84df64c97507e808cbc04c08ad564625840735d8b595b1e85", 0xe5}, {&(0x7f0000000000)="aa76114c137a8f35bd4af8545463c595ed70c91e0d01c281a56b821418b6f3684cc12625bc7d3aa2917b00f2a4588c511f25d7f5f7a781c3cd7e", 0x3a}], 0x4, 0x0) ioctl(r2, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000000400)='./file0\x00', 0x24, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) 20:18:47 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000000), 0x8) 20:18:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f], [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x101040, 0x17) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3f) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, [], [{0x1000, 0xffff, 0x6, 0x6, 0x1, 0xffffffffffffffcf}, {0x1000, 0x0, 0x1, 0xffffffffffffffa6, 0xff, 0x3}], [[], [], [], [], []]}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 518.652553] audit: type=1326 audit(1556741927.028:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24070 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0xffff0000 20:18:47 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) setpriority(0x0, 0x0, 0x0) [ 518.722665] input: syz1 as /devices/virtual/input/input3271 [ 518.742730] audit: type=1326 audit(1556741927.118:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=24084 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0xffff0000 20:18:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 518.780178] input: syz1 as /devices/virtual/input/input3272 [ 518.859397] ------------[ cut here ]------------ [ 518.865045] WARNING: CPU: 0 PID: 24094 at fs/kernfs/dir.c:494 kernfs_get+0x52/0x60 [ 518.872764] Kernel panic - not syncing: panic_on_warn set ... [ 518.872764] [ 518.880138] CPU: 0 PID: 24094 Comm: syz-executor.5 Not tainted 4.14.114+ #63 [ 518.887328] Call Trace: [ 518.889927] dump_stack+0xb9/0x10e [ 518.893484] panic+0x1d9/0x3c2 [ 518.896683] ? add_taint.cold+0x16/0x16 [ 518.900667] ? kernfs_get+0x52/0x60 [ 518.904299] ? __probe_kernel_read+0x163/0x1c0 [ 518.908894] ? kernfs_get+0x52/0x60 [ 518.912522] __warn.cold+0x2f/0x3b [ 518.916067] ? kernfs_get+0x52/0x60 [ 518.919703] ? report_bug+0x20a/0x248 [ 518.923515] ? do_error_trap+0x1bf/0x2d0 [ 518.927584] ? math_error+0x2d0/0x2d0 [ 518.931384] ? __schedule+0x924/0x1f30 [ 518.935276] ? __fprop_inc_percpu_max+0x1f0/0x1f0 [ 518.940124] ? __sched_text_start+0x8/0x8 [ 518.944292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 518.949153] ? invalid_op+0x18/0x40 [ 518.952792] ? kernfs_get+0x52/0x60 [ 518.956419] ? kernfs_new_node+0x90/0xe0 [ 518.960484] ? kernfs_create_dir_ns+0x3c/0x130 [ 518.965070] ? sysfs_create_dir_ns+0xb7/0x1d0 [ 518.969569] ? kobject_add_internal+0x27f/0x830 [ 518.974257] ? kobject_add+0x135/0x1a0 [ 518.978149] ? kset_create_and_add+0x190/0x190 [ 518.982737] ? __lockdep_init_map+0x100/0x4a0 [ 518.987232] ? refcount_inc_not_zero+0x81/0xe0 [ 518.991834] ? device_add+0x333/0x13a0 [ 518.995736] ? kasan_unpoison_shadow+0x30/0x40 [ 519.000324] ? device_private_init+0x180/0x180 [ 519.004914] ? __kmalloc+0x143/0x340 [ 519.008633] ? input_register_device+0x605/0xb20 [ 519.013403] ? uinput_ioctl_handler.isra.0+0xd9f/0x1800 [ 519.018783] ? uinput_request_submit.part.0+0x280/0x280 [ 519.024158] ? retint_kernel+0x2d/0x2d [ 519.028052] ? trace_hardirqs_on_caller+0x37b/0x540 [ 519.033075] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 519.037839] ? retint_kernel+0x2d/0x2d [ 519.041746] ? uinput_compat_ioctl+0x80/0x80 [ 519.046160] ? do_vfs_ioctl+0xabe/0x1040 [ 519.050220] ? selinux_file_ioctl+0x426/0x590 [ 519.054719] ? selinux_file_ioctl+0x116/0x590 20:18:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x10}, 0x45c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) [ 519.059220] ? ioctl_preallocate+0x1e0/0x1e0 [ 519.063635] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 519.069260] ? __fget+0x1ff/0x360 [ 519.072723] ? lock_downgrade+0x5d0/0x5d0 [ 519.076879] ? lock_acquire+0x10f/0x380 [ 519.080859] ? __fget+0x44/0x360 [ 519.084237] ? check_preemption_disabled+0x35/0x1f0 [ 519.085340] input: syz1 as /devices/virtual/input/input3275 [ 519.089271] ? security_file_ioctl+0x7c/0xb0 [ 519.089288] ? SyS_ioctl+0x7f/0xb0 [ 519.089297] ? do_vfs_ioctl+0x1040/0x1040 [ 519.089311] ? do_syscall_64+0x19b/0x4b0 [ 519.089332] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 519.095501] Kernel Offset: 0xd200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 519.127844] Rebooting in 86400 seconds..