= openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 00:30:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:41 executing program 5: ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (rerun: 32) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x9, 0x3, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={r3, r4, 0x0, 0xffffffff, 0x9, 0x3, 0x1, 0x82, 0x6, 0x1f, 0xfffffffe, 0x20}) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x9, 0x4, 0x8, 0x2}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000280)) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) (async, rerun: 32) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x2, 0x100000) (rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000640)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x2, 0x5}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:41 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:41 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:41 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001200)={0x5, 0x0, [{0x100000, 0x7a, &(0x7f0000000040)=""/122}, {0x0, 0x1000, &(0x7f00000000c0)=""/4096}, {0x6000, 0x30, &(0x7f00000010c0)=""/48}, {0x6000, 0xbe, &(0x7f0000001100)=""/190}, {0xd000, 0xd, &(0x7f00000012c0)=""/13}]}) socketpair(0x1, 0x80000, 0xc, &(0x7f0000001300)) 00:30:41 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1000, 0xfffffffc, 0x8, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r3 = socket(0x5, 0x2, 0x8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) 00:30:41 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:41 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 00:30:41 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001200)={0x5, 0x0, [{0x100000, 0x7a, &(0x7f0000000040)=""/122}, {0x0, 0x1000, &(0x7f00000000c0)=""/4096}, {0x6000, 0x30, &(0x7f00000010c0)=""/48}, {0x6000, 0xbe, &(0x7f0000001100)=""/190}, {0xd000, 0xd, &(0x7f00000012c0)=""/13}]}) socketpair(0x1, 0x80000, 0xc, &(0x7f0000001300)) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1000, 0xfffffffc, 0x8, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r3 = socket(0x5, 0x2, 0x8) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async, rerun: 32) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) (async, rerun: 32) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001200)={0x5, 0x0, [{0x100000, 0x7a, &(0x7f0000000040)=""/122}, {0x0, 0x1000, &(0x7f00000000c0)=""/4096}, {0x6000, 0x30, &(0x7f00000010c0)=""/48}, {0x6000, 0xbe, &(0x7f0000001100)=""/190}, {0xd000, 0xd, &(0x7f00000012c0)=""/13}]}) 00:30:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3}) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89a0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (rerun: 64) 00:30:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7fffffff}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:42 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89a0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) r0 = socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89a0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000080)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 00:30:42 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3}) 00:30:42 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7fffffff}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000180), 0x8) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1726.310589][T15927] can: request_module (can-proto-3) failed. 00:30:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 2: r0 = socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000100)) (async) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7fffffff}) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000180), 0x8) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:30:42 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x0, 0xfffffffe}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)) (async) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3}) [ 1726.457738][T15970] can: request_module (can-proto-3) failed. 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x2}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/145, 0x91, &(0x7f0000000100)=""/129, 0x1, 0x3}}, 0x48) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x0, 0xfffffffe}) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:42 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0xd000, 0xf, &(0x7f0000000100)=""/15}, {0x104004, 0x4f, &(0x7f0000000140)=""/79}]}) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x2}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 64) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/145, 0x91, &(0x7f0000000100)=""/129, 0x1, 0x3}}, 0x48) (rerun: 64) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x0, 0xfffffffe}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1726.625009][T16012] can: request_module (can-proto-3) failed. [ 1726.639844][T16010] can: request_module (can-proto-3) failed. 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0xd000, 0xf, &(0x7f0000000100)=""/15}, {0x104004, 0x4f, &(0x7f0000000140)=""/79}]}) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x2}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/145, 0x91, &(0x7f0000000100)=""/129, 0x1, 0x3}}, 0x48) 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) 00:30:42 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0xd000, 0xf, &(0x7f0000000100)=""/15}, {0x104004, 0x4f, &(0x7f0000000140)=""/79}]}) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000080)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, r2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20002000}) 00:30:42 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket(0x22, 0x3, 0x0) 00:30:42 executing program 2: r0 = socket(0x22, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) keyctl$session_to_parent(0x12) getuid() ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 00:30:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20002000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20002000}) (async) 00:30:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, r2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, r2) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:42 executing program 2: r0 = socket(0x22, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:42 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) socket(0x22, 0x3, 0x0) 00:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0xaf01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) (async) keyctl$session_to_parent(0x12) getuid() (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 00:30:43 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x22, 0x3, 0x0) 00:30:43 executing program 2: r0 = socket(0x22, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20002000}) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, r2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) keyctl$session_to_parent(0x12) (async) getuid() (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 00:30:43 executing program 2: socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="5c41a8", 0x3, r2) keyctl$reject(0x13, r1, 0x2, 0x1, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) getpid() ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 00:30:43 executing program 3: socket(0x22, 0x3, 0x0) 00:30:43 executing program 2: socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:43 executing program 3: socket(0x0, 0x3, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:43 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048841) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="5c41a8", 0x3, r2) (async) keyctl$reject(0x13, r1, 0x2, 0x1, r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) (async) getpid() (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 00:30:43 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048841) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:43 executing program 2: socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="5c41a8", 0x3, r2) keyctl$reject(0x13, r1, 0x2, 0x1, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) getpid() (async) getpid() ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 00:30:43 executing program 2: r0 = socket(0x22, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 00:30:43 executing program 3: socket(0x0, 0x3, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048841) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:43 executing program 3: socket(0x0, 0x3, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000000)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048841) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20048841) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) (async) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:43 executing program 3: socket(0x22, 0x0, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="597dc636") ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="5c41a8", 0x3, r2) keyctl$reject(0x13, r1, 0x2, 0x1, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) getpid() ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 00:30:43 executing program 3: socket(0x22, 0x0, 0x0) 00:30:43 executing program 3: socket(0x22, 0x0, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="597dc636") (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (rerun: 32) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="5c41a8", 0x3, r2) keyctl$reject(0x13, r1, 0x2, 0x1, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r3) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) getpid() ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000040)="597dc636") ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1f, 0x101, 0xc9, 0x8}, 'syz0\x00', 0x4b}) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040028bd7000fedbdf25010000074f0000000000003200007400050004000100000005000400010000000900010073797a31000000006a43f82df78c1639feeb9d6fce4634b1f9b1b60b89bf9db85cbe26d2b8d0a7f6eda16cf961ed2f2602fc4e796c334759c81c23aece25c1bda64d424da5078976fee8eed7b5cf5b015fa8"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x80000000}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f00000000c0)) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async, rerun: 32) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1f, 0x101, 0xc9, 0x8}, 'syz0\x00', 0x4b}) (rerun: 32) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000000c0)={0x0, 0x7fffffff}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000180), 0x8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040028bd7000fedbdf25010000074f0000000000003200007400050004000100000005000400010000000900010073797a31000000006a43f82df78c1639feeb9d6fce4634b1f9b1b60b89bf9db85cbe26d2b8d0a7f6eda16cf961ed2f2602fc4e796c334759c81c23aece25c1bda64d424da5078976fee8eed7b5cf5b015fa8"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x80000000}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f00000000c0)) 00:30:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3}) 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_io_uring_setup(0x3435, &(0x7f0000000080)={0x0, 0x891b, 0x4, 0x0, 0x22a, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x5, 0x9005}) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1f, 0x101, 0xc9, 0x8}, 'syz0\x00', 0x4b}) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001200)={0x5, 0x0, [{0x100000, 0x7a, &(0x7f0000000040)=""/122}, {0x0, 0x1000, &(0x7f00000000c0)=""/4096}, {0x6000, 0x30, &(0x7f00000010c0)=""/48}, {0x6000, 0xbe, &(0x7f0000001100)=""/190}, {0xd000, 0xd, &(0x7f00000012c0)=""/13}]}) 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040028bd7000fedbdf25010000074f0000000000003200007400050004000100000005000400010000000900010073797a31000000006a43f82df78c1639feeb9d6fce4634b1f9b1b60b89bf9db85cbe26d2b8d0a7f6eda16cf961ed2f2602fc4e796c334759c81c23aece25c1bda64d424da5078976fee8eed7b5cf5b015fa8"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x80000000}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="040028bd7000fedbdf25010000074f0000000000003200007400050004000100000005000400010000000900010073797a31000000006a43f82df78c1639feeb9d6fce4634b1f9b1b60b89bf9db85cbe26d2b8d0a7f6eda16cf961ed2f2602fc4e796c334759c81c23aece25c1bda64d424da5078976fee8eed7b5cf5b015fa8"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x80000000}) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f00000000c0)) (async) 00:30:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (rerun: 64) syz_io_uring_setup(0x3435, &(0x7f0000000080)={0x0, 0x891b, 0x4, 0x0, 0x22a, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async, rerun: 32) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x5, 0x9005}) (rerun: 32) 00:30:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8202) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffff) 00:30:43 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x1d, 0x80001, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0x3}) [ 1727.791224][T16305] can: request_module (can-proto-3) failed. 00:30:43 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0xfe39, 0x1f}, 'syz0\x00', 0x14}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000080)) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000000c0)={0x1, 0x5, 0x9005}) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8202) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffff) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_io_uring_setup(0x3435, &(0x7f0000000080)={0x0, 0x891b, 0x4, 0x0, 0x22a, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000040)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0xfe39, 0x1f}, 'syz0\x00', 0x14}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0xfe39, 0x1f}, 'syz0\x00', 0x14}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8202) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8202) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0xffff) (async) [ 1727.939835][T16343] can: request_module (can-proto-3) failed. 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 4: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001100)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/129, 0x1, 0x2}}, 0x48) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000001180)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x200100, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@remote, @multicast1, 0x1, "57eaf28797ac05ecbae002f62f62371f73b078c7f34879c808d1a3b0649b0014", 0x2, 0x3ff, 0x9, 0x10000}, 0x3c) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0xfe39, 0x1f}, 'syz0\x00', 0x14}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:44 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/209) shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2000) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair(0x1a, 0x5, 0xcf, &(0x7f0000001340)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket(0x22, 0x3, 0x0) io_uring_setup(0x6df3, &(0x7f0000001380)={0x0, 0xf390, 0x10, 0x0, 0x22e}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000011c0)="17417cc40c3904b788d8ca54d6ef40f8c4e18e002d02") setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) 00:30:44 executing program 4: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001100)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/129, 0x1, 0x2}}, 0x48) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000001180)) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x200100, 0x0) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:44 executing program 4: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001100)={0x2, 0x0, {&(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000001040)=""/129, 0x1, 0x2}}, 0x48) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000001180)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x200100, 0x0) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9180, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000180)={0x0, 0x4}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r3, &(0x7f0000000440)={0x60000000}) write$vhost_msg_v2(r10, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000200)=""/134, 0x86, &(0x7f00000002c0), 0x3, 0x4}}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = getpid() r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r13, 0x4004556a, 0x0) kcmp$KCMP_EPOLL_TFD(r12, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r7, r13, 0x7f}) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r11, &(0x7f0000000700)) ioctl$IOMMU_VFIO_IOAS$GET(r14, 0x3b88, &(0x7f0000000100)={0xc}) 00:30:44 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/209) (async, rerun: 64) shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) (async, rerun: 64) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2000) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0], 0x2, r4}) 00:30:44 executing program 4: getgid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/235, 0xeb}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getgid() ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x9}) 00:30:44 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r0 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000340)=""/209) (async) shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) (async) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2000) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9180, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000180)={0x0, 0x4}) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r3, &(0x7f0000000440)={0x60000000}) (async) write$vhost_msg_v2(r10, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000200)=""/134, 0x86, &(0x7f00000002c0), 0x3, 0x4}}, 0x48) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = getpid() r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r13, 0x4004556a, 0x0) kcmp$KCMP_EPOLL_TFD(r12, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r7, r13, 0x7f}) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r11, &(0x7f0000000700)) (async, rerun: 64) ioctl$IOMMU_VFIO_IOAS$GET(r14, 0x3b88, &(0x7f0000000100)={0xc}) (rerun: 64) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 4: getgid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/235, 0xeb}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getgid() (async) getgid() ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x9}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x9}) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x0, 0xfffffffe}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000000c0)='syz1\x00') ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x3}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000440)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/164, 0xa4}) ioctl$SNDCTL_TMR_SELECT(r4, 0x40045408) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0x79, 0x1f, &(0x7f0000000180)=""/31, 0x41000, 0x5, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x3fd, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x90) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x45ad, 0x80}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 4: getgid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/235, 0xeb}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getgid() ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x9}) getgid() (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/235, 0xeb}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) getgid() (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r2) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r5}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x9}) (async) 00:30:44 executing program 0: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x45ad, 0x80}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x45ad, 0x80}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) (async) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9180, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000180)={0x0, 0x4}) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000700)) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r3, &(0x7f0000000440)={0x60000000}) write$vhost_msg_v2(r10, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000200)=""/134, 0x86, &(0x7f00000002c0), 0x3, 0x4}}, 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = getpid() (async, rerun: 64) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r13, 0x4004556a, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r12, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r7, r13, 0x7f}) (async) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r11, &(0x7f0000000700)) ioctl$IOMMU_VFIO_IOAS$GET(r14, 0x3b88, &(0x7f0000000100)={0xc}) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000011c0)={0x3, 0x0, [{0x5000, 0x86, &(0x7f0000000080)=""/134}, {0x4, 0x1000, &(0x7f0000000140)=""/4096}, {0x2, 0x7b, &(0x7f0000001140)=""/123}]}) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 0: shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) (async) r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x45ad, 0x80}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) (async) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3f}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:44 executing program 2: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xe, 0x45ad, 0x80}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xc) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000011c0)={0x3, 0x0, [{0x5000, 0x86, &(0x7f0000000080)=""/134}, {0x4, 0x1000, &(0x7f0000000140)=""/4096}, {0x2, 0x7b, &(0x7f0000001140)=""/123}]}) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="3ff4e8fd53317473889d21d49f0a1e32ce1ed06ec93087aad19c325fc2c40a83047ce6b185533023e0ba121b84fae97c98c9dfc52277dcd6f442dd134614f34dfa427ca450ab7b57462a02995ce4e37a8cf284dc3a8757081c", 0x59, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000011c0)={0x3, 0x0, [{0x5000, 0x86, &(0x7f0000000080)=""/134}, {0x4, 0x1000, &(0x7f0000000140)=""/4096}, {0x2, 0x7b, &(0x7f0000001140)=""/123}]}) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3f}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="3ff4e8fd53317473889d21d49f0a1e32ce1ed06ec93087aad19c325fc2c40a83047ce6b185533023e0ba121b84fae97c98c9dfc52277dcd6f442dd134614f34dfa427ca450ab7b57462a02995ce4e37a8cf284dc3a8757081c", 0x59, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, r4, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000002c0)={0x3, 0x0, 0xfffffe00}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3f}) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)="3ff4e8fd53317473889d21d49f0a1e32ce1ed06ec93087aad19c325fc2c40a83047ce6b185533023e0ba121b84fae97c98c9dfc52277dcd6f442dd134614f34dfa427ca450ab7b57462a02995ce4e37a8cf284dc3a8757081c", 0x59, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, r4, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x24) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x24) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) 00:30:44 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, r4, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000100)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, r4, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) (async) 00:30:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x40000) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1ff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000180)={0x1}) 00:30:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x24) 00:30:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) (async) 00:30:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:45 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0x691, 0x402) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000080)={r4, r5, 0x2}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$NBD_DO_IT(r3, 0xab03) 00:30:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) 00:30:45 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0x691, 0x402) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000080)={r4, r5, 0x2}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$NBD_DO_IT(r3, 0xab03) 00:30:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x448001, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x0, 0xe3d4}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = getpid() (rerun: 32) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async, rerun: 32) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0x691, 0x402) (rerun: 32) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000080)={r4, r5, 0x2}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (rerun: 64) 00:30:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x448001, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x0, 0xe3d4}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x448001, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x0, 0xe3d4}) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$NBD_DO_IT(r3, 0xab03) 00:30:45 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) epoll_create(0x3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) geteuid() r5 = syz_open_dev$rtc(&(0x7f0000000180), 0x9, 0x26001) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f00000001c0)={r4, r5, 0x7f}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x5000, 0x95, &(0x7f0000000080)=""/149}]}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:45 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) (async) epoll_create(0x3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:45 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 64) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x448001, 0x0) (rerun: 64) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x0, 0xe3d4}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async, rerun: 32) geteuid() (async, rerun: 32) r5 = syz_open_dev$rtc(&(0x7f0000000180), 0x9, 0x26001) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f00000001c0)={r4, r5, 0x7f}) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x5000, 0x95, &(0x7f0000000080)=""/149}]}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) [ 1729.848501][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.855111][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x400100) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x8, 0x5, {0x56, 0x3, 0x0, {0x5, 0x6}, {0x6}, @const={0x5a, {0x5, 0x5, 0x6, 0xfffd}}}, {0x55, 0x4, 0x80, {0x85, 0x4}, {0x1, 0x3ff}, @ramp={0x1020, 0x7, {0x100, 0x5, 0x401, 0x4}}}}) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) geteuid() r5 = syz_open_dev$rtc(&(0x7f0000000180), 0x9, 0x26001) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f00000001c0)={r4, r5, 0x7f}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x5000, 0x95, &(0x7f0000000080)=""/149}]}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) getpid() (async) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) geteuid() (async) syz_open_dev$rtc(&(0x7f0000000180), 0x9, 0x26001) (async) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r1, &(0x7f00000001c0)={r4, r5, 0x7f}) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x5000, 0x95, &(0x7f0000000080)=""/149}]}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x0) (async) ioctl$UI_DEV_DESTROY(r6, 0x5502) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$NBD_DO_IT(r3, 0xab03) 00:30:46 executing program 3: r0 = syz_open_dev$dri(0x0, 0x1f, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f00000000c0)) epoll_create(0x3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair(0x27, 0x4, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20440f1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x400100) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x8, 0x5, {0x56, 0x3, 0x0, {0x5, 0x6}, {0x6}, @const={0x5a, {0x5, 0x5, 0x6, 0xfffd}}}, {0x55, 0x4, 0x80, {0x85, 0x4}, {0x1, 0x3ff}, @ramp={0x1020, 0x7, {0x100, 0x5, 0x401, 0x4}}}}) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) r1 = request_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)={0x4, 0x0, [{0x100000, 0x69, &(0x7f0000000180)=""/105}, {0x3000, 0x5d, &(0x7f0000000200)=""/93}, {0x1000, 0x67, &(0x7f0000000280)=""/103}, {0x3000, 0xc7, &(0x7f0000000300)=""/199}]}) geteuid() r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000005c0)=r5) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='logon\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000600)=0x100c0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x400100) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x8, 0x5, {0x56, 0x3, 0x0, {0x5, 0x6}, {0x6}, @const={0x5a, {0x5, 0x5, 0x6, 0xfffd}}}, {0x55, 0x4, 0x80, {0x85, 0x4}, {0x1, 0x3ff}, @ramp={0x1020, 0x7, {0x100, 0x5, 0x401, 0x4}}}}) 00:30:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x2, 0x0, 0x1, 0x7fff, 0x7}], &(0x7f0000000080)='GPL\x00', 0x7d, 0x52, &(0x7f00000000c0)=""/82, 0x40f00, 0x64, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x5, 0x7, 0x5}, 0x10, 0xffffffffffffffff, r2, 0x6, &(0x7f0000000200)=[r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x3, 0x2, 0xf, 0x1}, {0x3, 0x5, 0x10, 0x9}, {0x5, 0x1, 0xc, 0x6}, {0x4, 0x4, 0xf, 0xc}, {0x0, 0x1, 0xa, 0x3}, {0x1, 0x1, 0xd, 0xa}], 0x10, 0x2181}, 0x90) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x16, 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xda3f889, 0x2ea, 0xcb70, 0x7, 0x4, 0x4, 0x5}, &(0x7f0000000100)={0x1000000000000, 0x51, 0x4, 0x4, 0x9, 0x1, 0x4b2de76a, 0x5}, &(0x7f0000000140)={0x3, 0x0, 0x7fffffff, 0x0, 0x2e, 0x9, 0xd, 0x8a97}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1f]}, 0x8}) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:46 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x1, 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x10000000}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r1, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x7}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000140), 0x8) socketpair(0x15, 0x6, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) clock_gettime(0x5, &(0x7f0000000100)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa140, 0x0) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1f) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x16, 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xda3f889, 0x2ea, 0xcb70, 0x7, 0x4, 0x4, 0x5}, &(0x7f0000000100)={0x1000000000000, 0x51, 0x4, 0x4, 0x9, 0x1, 0x4b2de76a, 0x5}, &(0x7f0000000140)={0x3, 0x0, 0x7fffffff, 0x0, 0x2e, 0x9, 0xd, 0x8a97}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1f]}, 0x8}) 00:30:46 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4004af07, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1f) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x16, 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xda3f889, 0x2ea, 0xcb70, 0x7, 0x4, 0x4, 0x5}, &(0x7f0000000100)={0x1000000000000, 0x51, 0x4, 0x4, 0x9, 0x1, 0x4b2de76a, 0x5}, &(0x7f0000000140)={0x3, 0x0, 0x7fffffff, 0x0, 0x2e, 0x9, 0xd, 0x8a97}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1f]}, 0x8}) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) 00:30:46 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4004af07, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) (async) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4004af07, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) (async) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000240)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)="9614c33e1b5c80ea348a021d3b67863968c0d116420a6d81c44ef7e2090fdeafe843f4fd7a637ee75cca250fcaa9f211a325bcc2bf78c28ee30d38f1a25711a9d2037b340a0e865f17aecd934f6a7ac5520738bc471d77bcb51f189b173a5dd7051911e6d0b308c5ebedd247f93e9d33c18026b37235d851085d5c3609a1b094a6807c79e6fb28595e9d9ed5fed9bec40643cbbe34959b8c6da67b795feec30422bfd5b550ff2d", 0xa7, 0xfffffffffffffffa) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1f) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 00:30:46 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x9}) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000240)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)="9614c33e1b5c80ea348a021d3b67863968c0d116420a6d81c44ef7e2090fdeafe843f4fd7a637ee75cca250fcaa9f211a325bcc2bf78c28ee30d38f1a25711a9d2037b340a0e865f17aecd934f6a7ac5520738bc471d77bcb51f189b173a5dd7051911e6d0b308c5ebedd247f93e9d33c18026b37235d851085d5c3609a1b094a6807c79e6fb28595e9d9ed5fed9bec40643cbbe34959b8c6da67b795feec30422bfd5b550ff2d", 0xa7, 0xfffffffffffffffa) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000240)) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)="9614c33e1b5c80ea348a021d3b67863968c0d116420a6d81c44ef7e2090fdeafe843f4fd7a637ee75cca250fcaa9f211a325bcc2bf78c28ee30d38f1a25711a9d2037b340a0e865f17aecd934f6a7ac5520738bc471d77bcb51f189b173a5dd7051911e6d0b308c5ebedd247f93e9d33c18026b37235d851085d5c3609a1b094a6807c79e6fb28595e9d9ed5fed9bec40643cbbe34959b8c6da67b795feec30422bfd5b550ff2d", 0xa7, 0xfffffffffffffffa) 00:30:46 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r4) 00:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0xb8, 0xea, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x2, 0x0, 0x6, 0x8}, @btf_id={0x18, 0x9b64c976ed4df941, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x7ff, 0xd8, &(0x7f0000000180)=""/216, 0x40f00, 0x1, '\x00', 0x0, 0x3, r5, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x5, 0x3, 0xe}, {0x1, 0x2, 0x6, 0x1}, {0x1, 0x2, 0xa, 0x9}, {0x3, 0x1, 0x2, 0x5}], 0x10, 0x6}, 0x90) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 00:30:46 executing program 5: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000000c0)=@keyring) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40c0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r2) keyctl$negate(0xd, r2, 0x2, r1) 00:30:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202c80) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:46 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r4) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0xb8, 0xea, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x2, 0x0, 0x6, 0x8}, @btf_id={0x18, 0x9b64c976ed4df941, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x7ff, 0xd8, &(0x7f0000000180)=""/216, 0x40f00, 0x1, '\x00', 0x0, 0x3, r5, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x5, 0x3, 0xe}, {0x1, 0x2, 0x6, 0x1}, {0x1, 0x2, 0xa, 0x9}, {0x3, 0x1, 0x2, 0x5}], 0x10, 0x6}, 0x90) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:30:46 executing program 5: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000000c0)=@keyring) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40c0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r2) (async) keyctl$negate(0xd, r2, 0x2, r1) 00:30:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202c80) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0xe4ffffff00000000) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0xb8, 0xea, 0x100, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_val={0x18, 0x6, 0x2, 0x0, r3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x2, 0x0, 0x6, 0x8}, @btf_id={0x18, 0x9b64c976ed4df941, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x7ff, 0xd8, &(0x7f0000000180)=""/216, 0x40f00, 0x1, '\x00', 0x0, 0x3, r5, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=[0x1, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x5, 0x3, 0xe}, {0x1, 0x2, 0x6, 0x1}, {0x1, 0x2, 0xa, 0x9}, {0x3, 0x1, 0x2, 0x5}], 0x10, 0x6}, 0x90) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:46 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:46 executing program 5: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000000c0)=@keyring) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 64) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40c0, 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r2) (async) keyctl$negate(0xd, r2, 0x2, r1) 00:30:46 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r4) 00:30:46 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x3000, 0x2e, &(0x7f0000000080)=""/46}, {0xf000, 0xbb, &(0x7f00000000c0)=""/187}, {0x0, 0xe8, &(0x7f0000000180)=""/232}, {0x1000, 0x3f, &(0x7f0000000280)=""/63}, {0xf000, 0xc1, &(0x7f0000000300)=""/193}, {0x4, 0xc0, &(0x7f0000000400)=""/192}, {0x0, 0x2c, &(0x7f00000004c0)=""/44}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:46 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x0, 0x4, 0x3, 0x4}}, 0x26) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:46 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:46 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x202c80) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) (rerun: 32) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x5, 0x1}) 00:30:47 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x3000, 0x2e, &(0x7f0000000080)=""/46}, {0xf000, 0xbb, &(0x7f00000000c0)=""/187}, {0x0, 0xe8, &(0x7f0000000180)=""/232}, {0x1000, 0x3f, &(0x7f0000000280)=""/63}, {0xf000, 0xc1, &(0x7f0000000300)=""/193}, {0x4, 0xc0, &(0x7f0000000400)=""/192}, {0x0, 0x2c, &(0x7f00000004c0)=""/44}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x0, 0x4, 0x3, 0x4}}, 0x26) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x5, 0x1}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x0, 0x4, 0x3, 0x4}}, 0x26) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)={0x7, 0x0, [{0x3000, 0x2e, &(0x7f0000000080)=""/46}, {0xf000, 0xbb, &(0x7f00000000c0)=""/187}, {0x0, 0xe8, &(0x7f0000000180)=""/232}, {0x1000, 0x3f, &(0x7f0000000280)=""/63}, {0xf000, 0xc1, &(0x7f0000000300)=""/193}, {0x4, 0xc0, &(0x7f0000000400)=""/192}, {0x0, 0x2c, &(0x7f00000004c0)=""/44}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x0, 0x5, 0x1}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x10001) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x36f5, 0x1, 0x7ff, 0x5, 0xfffffffd}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x10001) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x3, 0x2, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x36f5, 0x1, 0x7ff, 0x5, 0xfffffffd}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x10001) 00:30:47 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x3, 0x2, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) socketpair(0x3, 0x2, 0x7ff, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x36f5, 0x1, 0x7ff, 0x5, 0xfffffffd}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x36f5, 0x1, 0x7ff, 0x5, 0xfffffffd}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socketpair(0x3, 0x2, 0x7ff, &(0x7f0000000080)) (async) socketpair(0x3, 0x2, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x1) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:47 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x3, 0x6}) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x3, 0x6}) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x6}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) (rerun: 64) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x3, 0x6}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x6}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x6}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x400) r5 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'cpuacct'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x19) ioctl$NBD_DO_IT(r4, 0xab03) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000040)={@private=0x7fff, @empty, 0xffffffffffffffff, "85c7911c5c70b7187f81661d8690bbe6b95ed4f1cecf4c28ffd4c6e0672f714d", 0xdd6, 0x1, 0x8, 0x3ff}, 0x3c) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738cd387a93e39fdfbcc3aa98393a3b3c3d3e3f40"], 0x48, r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x1c) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0xb) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000700)) ioctl$NBD_DO_IT(r8, 0xab03) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0x6}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="5a513b425d643d2fdc7116693a4d9d6007bc8278a3f80fb598b2ba8f3a5e8d996855233a075692f1a7e48a922043cba2324ba6c129d007e9ac8dcbd2fbf7a8194f87518b5b62b10f51ff19a287ef4bf0fb6490b2adbcde1437e8d9ca5a4cf067f9f3172b3ae426c576e0bda3f0e0d7cd3e1618cf0967a9027e682d51a60e4f649f0b79c529159df7a44109ac2c26cfb19b65db11036da46fbb812fe3d9d40b2a2bef9bddee934fe16669828bd099655decb896541515b89f7d39277a2f17e8a9ba25e4a686a1579e45ac3d49b06416cce909603c0d695a7303083110e49c409271674f3d07e5b5ece77a52c4b0ddba133312736c2e", 0xf5, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xffffffffffffffff) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:47 executing program 4: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="5a513b425d643d2fdc7116693a4d9d6007bc8278a3f80fb598b2ba8f3a5e8d996855233a075692f1a7e48a922043cba2324ba6c129d007e9ac8dcbd2fbf7a8194f87518b5b62b10f51ff19a287ef4bf0fb6490b2adbcde1437e8d9ca5a4cf067f9f3172b3ae426c576e0bda3f0e0d7cd3e1618cf0967a9027e682d51a60e4f649f0b79c529159df7a44109ac2c26cfb19b65db11036da46fbb812fe3d9d40b2a2bef9bddee934fe16669828bd099655decb896541515b89f7d39277a2f17e8a9ba25e4a686a1579e45ac3d49b06416cce909603c0d695a7303083110e49c409271674f3d07e5b5ece77a52c4b0ddba133312736c2e", 0xf5, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xffffffffffffffff) (async) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xc) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x400) r5 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'cpuacct'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x19) (async) ioctl$NBD_DO_IT(r4, 0xab03) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000040)={@private=0x7fff, @empty, 0xffffffffffffffff, "85c7911c5c70b7187f81661d8690bbe6b95ed4f1cecf4c28ffd4c6e0672f714d", 0xdd6, 0x1, 0x8, 0x3ff}, 0x3c) (async) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738cd387a93e39fdfbcc3aa98393a3b3c3d3e3f40"], 0x48, r1) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x1c) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0xb) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000700)) ioctl$NBD_DO_IT(r8, 0xab03) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/127, 0x7f, &(0x7f00000000c0)=""/51, 0x1, 0x4}}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x3, 0x18}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 4: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="5a513b425d643d2fdc7116693a4d9d6007bc8278a3f80fb598b2ba8f3a5e8d996855233a075692f1a7e48a922043cba2324ba6c129d007e9ac8dcbd2fbf7a8194f87518b5b62b10f51ff19a287ef4bf0fb6490b2adbcde1437e8d9ca5a4cf067f9f3172b3ae426c576e0bda3f0e0d7cd3e1618cf0967a9027e682d51a60e4f649f0b79c529159df7a44109ac2c26cfb19b65db11036da46fbb812fe3d9d40b2a2bef9bddee934fe16669828bd099655decb896541515b89f7d39277a2f17e8a9ba25e4a686a1579e45ac3d49b06416cce909603c0d695a7303083110e49c409271674f3d07e5b5ece77a52c4b0ddba133312736c2e", 0xf5, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0xffffffffffffffff) (async) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xc) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/127, 0x7f, &(0x7f00000000c0)=""/51, 0x1, 0x4}}, 0x48) (async, rerun: 32) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x3, 0x18}) (rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (rerun: 64) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x400) r5 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)={[{0x2b, 'cpuacct'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x19) ioctl$NBD_DO_IT(r4, 0xab03) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000040)={@private=0x7fff, @empty, 0xffffffffffffffff, "85c7911c5c70b7187f81661d8690bbe6b95ed4f1cecf4c28ffd4c6e0672f714d", 0xdd6, 0x1, 0x8, 0x3ff}, 0x3c) (async) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738cd387a93e39fdfbcc3aa98393a3b3c3d3e3f40"], 0x48, r1) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(r7, 0xab01, 0x1c) (async) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0xb) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f0000000700)) ioctl$NBD_DO_IT(r8, 0xab03) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x315e) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0xb0b0b0b0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000000)={0x0, 0xffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x10000000}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:47 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x1000, &(0x7f0000000300)=""/4096}]}) 00:30:47 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0x8, 0x1f, {0x57, 0x1000, 0xfff, {0x2, 0xfffc}, {0x59c3, 0x200}, @rumble={0x8}}, {0x56, 0x8, 0x800, {0x3ff, 0x1}, {0x6, 0x3}, @const={0x1f, {0x1, 0x3, 0x1000, 0x4000}}}}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0xfbff, 0x1e3, 0x7fff, 0x5}, 'syz1\x00', 0x45}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$RTC_PIE_ON(r2, 0x7005) 00:30:47 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/127, 0x7f, &(0x7f00000000c0)=""/51, 0x1, 0x4}}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x3, 0x18}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000040)=""/127, 0x7f, &(0x7f00000000c0)=""/51, 0x1, 0x4}}, 0x48) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000200)={0x3, 0x18}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) (async) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x315e) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0xb0b0b0b0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000000)={0x0, 0xffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x10000000}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x315e) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0xb0b0b0b0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000000)={0x0, 0xffff}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x10000000}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x23) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80800) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r5) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0x8, 0x1f, {0x57, 0x1000, 0xfff, {0x2, 0xfffc}, {0x59c3, 0x200}, @rumble={0x8}}, {0x56, 0x8, 0x800, {0x3ff, 0x1}, {0x6, 0x3}, @const={0x1f, {0x1, 0x3, 0x1000, 0x4000}}}}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0xfbff, 0x1e3, 0x7fff, 0x5}, 'syz1\x00', 0x45}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$RTC_PIE_ON(r2, 0x7005) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0x8, 0x1f, {0x57, 0x1000, 0xfff, {0x2, 0xfffc}, {0x59c3, 0x200}, @rumble={0x8}}, {0x56, 0x8, 0x800, {0x3ff, 0x1}, {0x6, 0x3}, @const={0x1f, {0x1, 0x3, 0x1000, 0x4000}}}}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) (async) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0xfbff, 0x1e3, 0x7fff, 0x5}, 'syz1\x00', 0x45}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$RTC_PIE_ON(r2, 0x7005) (async) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x315e) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000000c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0xc, 0x0, 0xb0b0b0b0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000000)={0x0, 0xffff}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)={0x10000000}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x23) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80800) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r5) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x23) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000700)) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80800) (async) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r5) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0x8, 0x1f, {0x57, 0x1000, 0xfff, {0x2, 0xfffc}, {0x59c3, 0x200}, @rumble={0x8}}, {0x56, 0x8, 0x800, {0x3ff, 0x1}, {0x6, 0x3}, @const={0x1f, {0x1, 0x3, 0x1000, 0x4000}}}}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) (async) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0xfbff, 0x1e3, 0x7fff, 0x5}, 'syz1\x00', 0x45}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$RTC_PIE_ON(r2, 0x7005) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x23) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000700)) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1}) (rerun: 32) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80800) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r5) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async, rerun: 64) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (rerun: 64) 00:30:48 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x7, 0x2, 0x8001, 0x32}, 'syz0\x00', 0x33}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7b) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0xd) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x8, 0xf385, {0x56, 0x3, 0xab, {0x8, 0x8}, {0x800, 0x5}, @rumble={0x8, 0x9}}, {0x54, 0x40, 0x7cd2, {0xff, 0x400}, {0xb870, 0x7}, @rumble={0x2, 0x7}}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x7, 0x2, 0x8001, 0x32}, 'syz0\x00', 0x33}) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7b) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0xd) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x7, 0x2, 0x8001, 0x32}, 'syz0\x00', 0x33}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7b) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0xd) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) (async) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x8, 0xf385, {0x56, 0x3, 0xab, {0x8, 0x8}, {0x800, 0x5}, @rumble={0x8, 0x9}}, {0x54, 0x40, 0x7cd2, {0xff, 0x400}, {0xb870, 0x7}, @rumble={0x2, 0x7}}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x3}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x8, 0xf385, {0x56, 0x3, 0xab, {0x8, 0x8}, {0x800, 0x5}, @rumble={0x8, 0x9}}, {0x54, 0x40, 0x7cd2, {0xff, 0x400}, {0xb870, 0x7}, @rumble={0x2, 0x7}}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x8, 0xf385, {0x56, 0x3, 0xab, {0x8, 0x8}, {0x800, 0x5}, @rumble={0x8, 0x9}}, {0x54, 0x40, 0x7cd2, {0xff, 0x400}, {0xb870, 0x7}, @rumble={0x2, 0x7}}}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) (async) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x3}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = getuid() keyctl$get_persistent(0x16, r2, r1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffe, 0xb0edc2798a935e7d) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000001180)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/4096, 0x1000}) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 4: ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000040)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x3, 0x3}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:48 executing program 1: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) r2 = getuid() (rerun: 32) keyctl$get_persistent(0x16, r2, r1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffe, 0xb0edc2798a935e7d) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000001180)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/4096, 0x1000}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)={0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={@any, 0x9}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x2, 0x7fff}) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r2 = getuid() keyctl$get_persistent(0x16, r2, r1) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) (async) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffe, 0xb0edc2798a935e7d) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000001180)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/4096, 0x1000}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0xc75e}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x5, 0xe073, 0x220, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0xc9f, 0xa}, 0x48) r3 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r3, r0, 0xd7}) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x2, 0x7fff}) (rerun: 32) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x18000, 0x20001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000001c0)) ioctl$RTC_PIE_ON(r2, 0x7005) 00:30:48 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)={0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={@any, 0x9}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0xc75e}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x5, 0xe073, 0x220, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0xc9f, 0xa}, 0x48) r3 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r3, r0, 0xd7}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0xc75e}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) (async) getpid() (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x5, 0xe073, 0x220, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0xc9f, 0xa}, 0x48) (async) epoll_create(0x4) (async) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r3, r0, 0xd7}) (async) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)={0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={@any, 0x9}) (async) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) (async) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x18000, 0x20001) (async, rerun: 32) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (rerun: 32) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000001c0)) (async, rerun: 64) ioctl$RTC_PIE_ON(r2, 0x7005) (rerun: 64) 00:30:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x2, 0x7fff}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0xc75e}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x5, 0xe073, 0x220, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0xc9f, 0xa}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x5, 0xe073, 0x220, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0xc9f, 0xa}, 0x48) r3 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r2, &(0x7f0000000100)={r3, r0, 0xd7}) 00:30:48 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) 00:30:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0xa, &(0x7f00000000c0)=""/10}, {0x6000, 0xf3, &(0x7f0000000100)=""/243}, {0xb315bd9bfcb1ba4b, 0x67, &(0x7f0000000200)=""/103}, {0x1000, 0xf4, &(0x7f0000000300)=""/244}, {0xf000, 0xcb, &(0x7f0000000400)=""/203}, {0x4000, 0x75, &(0x7f0000000500)=""/117}]}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2}) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:48 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}]}) 00:30:48 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) (async) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000180)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) (async) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) syz_open_dev$rtc(&(0x7f0000000100), 0x18000, 0x20001) (async) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x18000, 0x20001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f00000001c0)) ioctl$RTC_PIE_ON(r2, 0x7005) 00:30:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0xa, &(0x7f00000000c0)=""/10}, {0x6000, 0xf3, &(0x7f0000000100)=""/243}, {0xb315bd9bfcb1ba4b, 0x67, &(0x7f0000000200)=""/103}, {0x1000, 0xf4, &(0x7f0000000300)=""/244}, {0xf000, 0xcb, &(0x7f0000000400)=""/203}, {0x4000, 0x75, &(0x7f0000000500)=""/117}]}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0xa, &(0x7f00000000c0)=""/10}, {0x6000, 0xf3, &(0x7f0000000100)=""/243}, {0xb315bd9bfcb1ba4b, 0x67, &(0x7f0000000200)=""/103}, {0x1000, 0xf4, &(0x7f0000000300)=""/244}, {0xf000, 0xcb, &(0x7f0000000400)=""/203}, {0x4000, 0x75, &(0x7f0000000500)=""/117}]}) (async) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) (async) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2}) (async) 00:30:49 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x6, 0x6}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000002c0)={r2, r5, 0x1, 0xfc, 0x5}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000400)={0x38, 0x6, r8}) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000340)) 00:30:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0xa, &(0x7f00000000c0)=""/10}, {0x6000, 0xf3, &(0x7f0000000100)=""/243}, {0xb315bd9bfcb1ba4b, 0x67, &(0x7f0000000200)=""/103}, {0x1000, 0xf4, &(0x7f0000000300)=""/244}, {0xf000, 0xcb, &(0x7f0000000400)=""/203}, {0x4000, 0x75, &(0x7f0000000500)=""/117}]}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000008}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x1, 0xa, &(0x7f00000000c0)=""/10}, {0x6000, 0xf3, &(0x7f0000000100)=""/243}, {0xb315bd9bfcb1ba4b, 0x67, &(0x7f0000000200)=""/103}, {0x1000, 0xf4, &(0x7f0000000300)=""/244}, {0xf000, 0xcb, &(0x7f0000000400)=""/203}, {0x4000, 0x75, &(0x7f0000000500)=""/117}]}) (async) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) (async) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2}) (async) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x26, 0x1, 0x134, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xd}) 00:30:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x6, 0x6}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000002c0)={r2, r5, 0x1, 0xfc, 0x5}) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000400)={0x38, 0x6, r8}) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000340)) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socketpair(0x26, 0x1, 0x134, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xd}) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x6, 0x6}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f00000002c0)={r2, r5, 0x1, 0xfc, 0x5}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000400)={0x38, 0x6, r8}) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r6, 0x8002af76, &(0x7f0000000340)) 00:30:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r0}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1080010) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000380)={0x0, 0x1}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x0, 0xe2, 0x10000000003e6c, 0xffffffff, 0xa, 0x7f, 0x1, 0x3}, &(0x7f0000000180)={0xcfd4, 0x0, 0x0, 0x3, 0x36c, 0x80, 0x9, 0x72d6}, &(0x7f00000001c0)={0x3, 0x5, 0x4000000ffffffff, 0x8, 0x9, 0x400000000000003, 0x5, 0x3f}, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x26, 0x1, 0x134, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xd}) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x8c, &(0x7f0000000080)=""/140}]}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x8]}, 0x8) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 0: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000080)=@chain={'key_or_keyring:', r0}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000200)={0x3, 0x8, 0x4, 0x20, 0x8, {r2, r3/1000+60000}, {0x3, 0x0, 0x1, 0x4, 0x1, 0x7, "94afe143"}, 0x7, 0x4, {}, 0x0, 0x0, r4}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x8c, &(0x7f0000000080)=""/140}]}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x8]}, 0x8) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1080010) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000380)={0x0, 0x1}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x0, 0xe2, 0x10000000003e6c, 0xffffffff, 0xa, 0x7f, 0x1, 0x3}, &(0x7f0000000180)={0xcfd4, 0x0, 0x0, 0x3, 0x36c, 0x80, 0x9, 0x72d6}, &(0x7f00000001c0)={0x3, 0x5, 0x4000000ffffffff, 0x8, 0x9, 0x400000000000003, 0x5, 0x3f}, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1080010) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000380)={0x0, 0x1}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) clock_gettime(0x0, &(0x7f0000000340)) (async) pselect6(0x40, &(0x7f0000000300)={0x0, 0xe2, 0x10000000003e6c, 0xffffffff, 0xa, 0x7f, 0x1, 0x3}, &(0x7f0000000180)={0xcfd4, 0x0, 0x0, 0x3, 0x36c, 0x80, 0x9, 0x72d6}, &(0x7f00000001c0)={0x3, 0x5, 0x4000000ffffffff, 0x8, 0x9, 0x400000000000003, 0x5, 0x3f}, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) (async) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x2, 0x8c, &(0x7f0000000080)=""/140}]}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(r2, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000200)={r3, r4+60000000}, &(0x7f0000000240)={[0x8]}, 0x8) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000200)={0x3, 0x8, 0x4, 0x20, 0x8, {r2, r3/1000+60000}, {0x3, 0x0, 0x1, 0x4, 0x1, 0x7, "94afe143"}, 0x7, 0x4, {}, 0x0, 0x0, r4}) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1080010) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x1080010) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000380)={0x0, 0x1}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x0, 0xe2, 0x10000000003e6c, 0xffffffff, 0xa, 0x7f, 0x1, 0x3}, &(0x7f0000000180)={0xcfd4, 0x0, 0x0, 0x3, 0x36c, 0x80, 0x9, 0x72d6}, &(0x7f00000001c0)={0x3, 0x5, 0x4000000ffffffff, 0x8, 0x9, 0x400000000000003, 0x5, 0x3f}, &(0x7f0000000200)={r3, r4+10000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 00:30:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0xcbd}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={@none, 0x13e8, 0x1, 0x0, 0x3, 0x8, "b57376f8b064720903a2dd562bb2e05744664ee361355780a008418ec505f4083f368c232d8ecc7426d2013dfdf77d7db904884957dd00ce0e3ec39621467670fbbc276dbac5c826c64436ac53ff5d16b182c716ff1cc701512ba91d7080d4706e5fb6781cc91f816be6ce1b03cff110508abf596d5d04bb223be7aa59d49a03"}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0xe83c}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xb1, 0x20, 0x7, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x5}, 0x48) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0xcbd}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0xcbd}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000200)={0x3, 0x8, 0x4, 0x20, 0x8, {r2, r3/1000+60000}, {0x3, 0x0, 0x1, 0x4, 0x1, 0x7, "94afe143"}, 0x7, 0x4, {}, 0x0, 0x0, r4}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0xcbd}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0xcbd}) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={@none, 0x13e8, 0x1, 0x0, 0x3, 0x8, "b57376f8b064720903a2dd562bb2e05744664ee361355780a008418ec505f4083f368c232d8ecc7426d2013dfdf77d7db904884957dd00ce0e3ec39621467670fbbc276dbac5c826c64436ac53ff5d16b182c716ff1cc701512ba91d7080d4706e5fb6781cc91f816be6ce1b03cff110508abf596d5d04bb223be7aa59d49a03"}) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0xe83c}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xb1, 0x20, 0x7, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x5}, 0x48) 00:30:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4004af07, 0x0) (async) 00:30:49 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={@none, 0x13e8, 0x1, 0x0, 0x3, 0x8, "b57376f8b064720903a2dd562bb2e05744664ee361355780a008418ec505f4083f368c232d8ecc7426d2013dfdf77d7db904884957dd00ce0e3ec39621467670fbbc276dbac5c826c64436ac53ff5d16b182c716ff1cc701512ba91d7080d4706e5fb6781cc91f816be6ce1b03cff110508abf596d5d04bb223be7aa59d49a03"}) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)={@none, 0x13e8, 0x1, 0x0, 0x3, 0x8, "b57376f8b064720903a2dd562bb2e05744664ee361355780a008418ec505f4083f368c232d8ecc7426d2013dfdf77d7db904884957dd00ce0e3ec39621467670fbbc276dbac5c826c64436ac53ff5d16b182c716ff1cc701512ba91d7080d4706e5fb6781cc91f816be6ce1b03cff110508abf596d5d04bb223be7aa59d49a03"}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0xe83c}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xb1, 0x20, 0x7, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x5}, 0x48) 00:30:49 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x10000, 0x21, &(0x7f0000000080)=""/33}, {0x10000, 0x35, &(0x7f00000000c0)=""/53}, {0x4, 0x8f, &(0x7f0000000100)=""/143}, {0x2, 0xf8, &(0x7f00000001c0)=""/248}]}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x5, 0x6}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:30:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x5000, 0xb9, &(0x7f0000000040)=""/185}, {0x3000, 0xdf, &(0x7f0000000100)=""/223}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x5000, 0xb9, &(0x7f0000000040)=""/185}, {0x3000, 0xdf, &(0x7f0000000100)=""/223}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x10000, 0x21, &(0x7f0000000080)=""/33}, {0x10000, 0x35, &(0x7f00000000c0)=""/53}, {0x4, 0x8f, &(0x7f0000000100)=""/143}, {0x2, 0xf8, &(0x7f00000001c0)=""/248}]}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x5, 0x6}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:30:49 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7, 0x404000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x5000, 0xb9, &(0x7f0000000040)=""/185}, {0x3000, 0xdf, &(0x7f0000000100)=""/223}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x10000, 0x21, &(0x7f0000000080)=""/33}, {0x10000, 0x35, &(0x7f00000000c0)=""/53}, {0x4, 0x8f, &(0x7f0000000100)=""/143}, {0x2, 0xf8, &(0x7f00000001c0)=""/248}]}) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x5, 0x6}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:30:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7, 0x404000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:49 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:49 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:49 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) 00:30:49 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:49 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xc) 00:30:50 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (rerun: 32) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x7, 0x404000) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async, rerun: 64) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xc) (rerun: 64) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xff, 0x4) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="695cf5790d2dd0fea03a4b92fe6f1be22a0c418519f2668b4cb6754fd04c85a39cb2123252cb22df829644f742fc71ae613d15f7224476e8f1eda1fb4896e794c0c422da4e442af43a439edc35e7589a1bab9adcee10ba7e6f7b821b3f1785459a18bdb8d5d8e99e75036b0518e2394a9d2d89cdde63a787e3dad428", 0x7c, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="695cf5790d2dd0fea03a4b92fe6f1be22a0c418519f2668b4cb6754fd04c85a39cb2123252cb22df829644f742fc71ae613d15f7224476e8f1eda1fb4896e794c0c422da4e442af43a439edc35e7589a1bab9adcee10ba7e6f7b821b3f1785459a18bdb8d5d8e99e75036b0518e2394a9d2d89cdde63a787e3dad428", 0x7c, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xc) (async) 00:30:50 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x3, 0x0, r0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xff, 0x4) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="695cf5790d2dd0fea03a4b92fe6f1be22a0c418519f2668b4cb6754fd04c85a39cb2123252cb22df829644f742fc71ae613d15f7224476e8f1eda1fb4896e794c0c422da4e442af43a439edc35e7589a1bab9adcee10ba7e6f7b821b3f1785459a18bdb8d5d8e99e75036b0518e2394a9d2d89cdde63a787e3dad428", 0x7c, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:50 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x3, 0x0, r0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 5: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x2, [], [0x7, 0x48, 0x4, 0x50e9], [0x3, 0x3, 0x20, 0x5], [0x2, 0x8000000000000000, 0x79bc, 0xfff]}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x3, 0x0, r0}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xff, 0x4) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 5: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) (async, rerun: 32) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x2, [], [0x7, 0x48, 0x4, 0x50e9], [0x3, 0x3, 0x20, 0x5], [0x2, 0x8000000000000000, 0x79bc, 0xfff]}) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 5: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x2, [], [0x7, 0x48, 0x4, 0x50e9], [0x3, 0x3, 0x20, 0x5], [0x2, 0x8000000000000000, 0x79bc, 0xfff]}) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 1: setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) (async) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 1: setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (rerun: 32) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) 00:30:50 executing program 1: setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)={0x10000008}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000040)) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 5: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1f7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='ceph\x00', r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)={0x10000008}) ioctl$NBD_CLEAR_QUE(r3, 0xab05) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 5: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1f7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='ceph\x00', r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1f7) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) (async) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='ceph\x00', r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x1000, 0x0, 0x0}]}) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket(0x2c, 0xa, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xf) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{@none}, {@fixed}, {}, {@fixed}, {}]}) ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f0000000380), 0x5005) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)={0x10000008}) (async, rerun: 64) ioctl$NBD_CLEAR_QUE(r3, 0xab05) (async, rerun: 64) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:50 executing program 5: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1f7) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='ceph\x00', r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket(0x2c, 0xa, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xf) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{@none}, {@fixed}, {}, {@fixed}, {}]}) ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f0000000380), 0x5005) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)) 00:30:50 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket(0x2c, 0xa, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xf) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{@none}, {@fixed}, {}, {@fixed}, {}]}) ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f0000000380), 0x5005) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000700)={0x200a}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000000d}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000700)={0x200a}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 64) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000700)={0x200a}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x6000000d}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) (async) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000700)={0x70000002}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x800, 0x881) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fff) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)='-\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x10000, 0x21, &(0x7f0000000080)=""/33}, {0x10000, 0x35, &(0x7f00000000c0)=""/53}, {0x4, 0x8f, &(0x7f0000000100)=""/143}, {0x2, 0xf8, &(0x7f00000001c0)=""/248}]}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000003c0)={0x7, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000040)={0x5, 0x6}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x800, 0x881) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fff) (async) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)='-\x00') (async, rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 32) 00:30:51 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4004af07, 0x0) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x800, 0x881) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7fff) (async) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)='-\x00') (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={0x0, 0x400, 0xfffffffe, 0xb023, 0x1, [0x0, 0x0], [0x2, 0x2, 0x5, 0x3], [0x1, 0x2, 0x200, 0xa89a], [0xffffffff, 0x9, 0x6, 0x80000001]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000780)={r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)={0x9, 0x0, [{0x1, 0xa, &(0x7f0000000080)=""/10}, {0x6000, 0x17, &(0x7f00000000c0)=""/23}, {0x2, 0x51, &(0x7f0000000100)=""/81}, {0x1, 0x84, &(0x7f0000000180)=""/132}, {0x0, 0x9c, &(0x7f0000000240)=""/156}, {0x4, 0x2f, &(0x7f0000000300)=""/47}, {0x10c000, 0xb8, &(0x7f0000000340)=""/184}, {0x10000, 0x60, &(0x7f0000000400)=""/96}, {0x109000, 0xfb, &(0x7f0000000480)=""/251}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={0x0, 0x400, 0xfffffffe, 0xb023, 0x1, [0x0, 0x0], [0x2, 0x2, 0x5, 0x3], [0x1, 0x2, 0x200, 0xa89a], [0xffffffff, 0x9, 0x6, 0x80000001]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000780)={r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)={0x9, 0x0, [{0x1, 0xa, &(0x7f0000000080)=""/10}, {0x6000, 0x17, &(0x7f00000000c0)=""/23}, {0x2, 0x51, &(0x7f0000000100)=""/81}, {0x1, 0x84, &(0x7f0000000180)=""/132}, {0x0, 0x9c, &(0x7f0000000240)=""/156}, {0x4, 0x2f, &(0x7f0000000300)=""/47}, {0x10c000, 0xb8, &(0x7f0000000340)=""/184}, {0x10000, 0x60, &(0x7f0000000400)=""/96}, {0x109000, 0xfb, &(0x7f0000000480)=""/251}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={0x0, 0x400, 0xfffffffe, 0xb023, 0x1, [], [0x2, 0x2, 0x5, 0x3], [0x1, 0x2, 0x200, 0xa89a], [0xffffffff, 0x9, 0x6, 0x80000001]}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000780)={r2}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)={0x9, 0x0, [{0x1, 0xa, &(0x7f0000000080)=""/10}, {0x6000, 0x17, &(0x7f00000000c0)=""/23}, {0x2, 0x51, &(0x7f0000000100)=""/81}, {0x1, 0x84, &(0x7f0000000180)=""/132}, {0x0, 0x9c, &(0x7f0000000240)=""/156}, {0x4, 0x2f, &(0x7f0000000300)=""/47}, {0x10c000, 0xb8, &(0x7f0000000340)=""/184}, {0x10000, 0x60, &(0x7f0000000400)=""/96}, {0x109000, 0xfb, &(0x7f0000000480)=""/251}]}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) (async) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000700)={0x0, 0x400, 0xfffffffe, 0xb023, 0x1, [0x0, 0x0], [0x2, 0x2, 0x5, 0x3], [0x1, 0x2, 0x200, 0xa89a], [0xffffffff, 0x9, 0x6, 0x80000001]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000780)={r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)={0x9, 0x0, [{0x1, 0xa, &(0x7f0000000080)=""/10}, {0x6000, 0x17, &(0x7f00000000c0)=""/23}, {0x2, 0x51, &(0x7f0000000100)=""/81}, {0x1, 0x84, &(0x7f0000000180)=""/132}, {0x0, 0x9c, &(0x7f0000000240)=""/156}, {0x4, 0x2f, &(0x7f0000000300)=""/47}, {0x10c000, 0xb8, &(0x7f0000000340)=""/184}, {0x10000, 0x60, &(0x7f0000000400)=""/96}, {0x109000, 0xfb, &(0x7f0000000480)=""/251}]}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) (async) r2 = getpid() (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) [ 1735.744919][T18234] input: syz0 as /devices/virtual/input/input12292 00:30:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) [ 1735.848320][T18254] input: syz0 as /devices/virtual/input/input12293 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000001c0)={0x8, 0x1f, {0x57, 0x1000, 0xfff, {0x2, 0xfffc}, {0x59c3, 0x200}, @rumble={0x8}}, {0x56, 0x8, 0x800, {0x3ff, 0x1}, {0x6, 0x3}, @const={0x1f, {0x1, 0x3, 0x1000, 0x4000}}}}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0xfbff, 0x1e3, 0x7fff, 0x5}, 'syz1\x00', 0x45}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$RTC_PIE_ON(r2, 0x7005) 00:30:52 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) [ 1735.900509][T18261] input: syz0 as /devices/virtual/input/input12294 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:52 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) [ 1736.006463][T18283] input: syz0 as /devices/virtual/input/input12295 00:30:52 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)='ceph\x00') [ 1736.082984][T18293] input: syz0 as /devices/virtual/input/input12297 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000080)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) socketpair(0x25, 0x6, 0x7fffffff, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000001c0)={0x2}) r8 = epoll_create(0xfffffffc) epoll_pwait2(r8, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x7fff]}, 0x8) syz_open_dev$dri(&(0x7f0000000200), 0x8000, 0x44100) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)}) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f0000000080)) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000700)) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 00:30:52 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x2, 0x103, {0x55, 0x3, 0x6, {0x9}, {0x0, 0x20}, @rumble={0x3, 0xe09}}, {0x57, 0xfaaf, 0x5, {0x6cb, 0x5}, {0x3f, 0x3}, @rumble={0x8, 0x1}}}) 00:30:52 executing program 1: ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000200)={0x0, 0xa, &(0x7f0000000140)=[0x9e9d, 0x5, 0x3f, 0x0, 0x0, 0x18, 0xffff, 0x2, 0x4, 0x6], &(0x7f0000000180)=[0x0, 0xffff, 0x81, 0x7fff, 0x1, 0x800, 0x2, 0x2f3], &(0x7f00000001c0)=[0x7, 0x7fff, 0xff, 0x400]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x20002035}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)='ceph\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3) (async) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)='ceph\x00') (async) 00:30:52 executing program 4: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r5, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000540)={0x2, r5, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000940)={0x2, r9, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, r9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1736.233732][T18313] input: syz0 as /devices/virtual/input/input12299 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) r2 = getpid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) getpgid(r2) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) (async) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)='ceph\x00') 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r5, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000540)={0x2, r5, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000940)={0x2, r9, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, r9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r5, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000540)={0x2, r5, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000940)={0x2, r9, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, r9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1736.363077][T18338] input: syz0 as /devices/virtual/input/input12300 00:30:52 executing program 5: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r0) keyctl$link(0x8, 0x0, r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r0) (async) keyctl$link(0x8, 0x0, r0) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x4, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x1000, &(0x7f0000000300)=""/4096}, {0xd000, 0x2b, &(0x7f0000000280)=""/43}]}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r5, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000540)={0x2, r5, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000940)={0x2, r9, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, r9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r0) keyctl$link(0x8, 0x0, r0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0xaf01, 0x0) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) [ 1736.511631][T18361] input: syz0 as /devices/virtual/input/input12301 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r7, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000240)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000001c0)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000080)=""/49, 0x31, &(0x7f00000000c0)=""/97, 0x3, 0x3}}, 0x48) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000)={0x2, 0x10001}) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$get_keyring_id(0x0, r1, 0x10001) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000040)) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) [ 1736.668431][T18393] input: syz0 as /devices/virtual/input/input12302 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$get_keyring_id(0x0, r1, 0x10001) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000040)) 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) keyctl$get_keyring_id(0x0, r1, 0x10001) (async, rerun: 32) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000040)) (rerun: 32) 00:30:52 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:52 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) [ 1736.788166][T18418] input: syz0 as /devices/virtual/input/input12303 00:30:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$get_keyring_id(0x0, r1, 0x10001) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000040)) 00:30:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) socketpair(0x2, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:52 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000580)) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000080)="8b2079d2822a6b678ce862aec9d9e9f3784da4145f23a4b23ef09dbd8bf58026736de734cf5d2fe0be89b307f810c3311b0ed759a4819c7a35e4a6d99ff182fb0ac275d4bb86ede7bf9ac23d9f43537b5938bb620f0e83f57cac7713fabbcb271b12d8411135ee90b16ed68264208d5e5f580ac7f78845652f76cca83580df2ce4da8443fcb2e65769915ee278b9356576bdda598b52e2e28af055") 00:30:53 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) socketpair(0x2, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r2, 0x8004af81, &(0x7f00000000c0)) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000540)={0x2, r4, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}]}) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 00:30:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) socketpair(0x2, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1737.227259][T18514] input: syz0 as /devices/virtual/input/input12308 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) [ 1737.338881][T18535] input: syz0 as /devices/virtual/input/input12309 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1737.422743][T18544] input: syz0 as /devices/virtual/input/input12310 [ 1737.467554][T18553] input: syz0 as /devices/virtual/input/input12311 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) clock_gettime(0x5, &(0x7f0000000200)) keyctl$reject(0x13, r2, 0x5, 0xed8, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:53 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='d', 0x1, r1) (async) r2 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', r1) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) clock_gettime(0x5, &(0x7f0000000200)) (async) keyctl$reject(0x13, r2, 0x5, 0xed8, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1737.606004][T18573] input: syz0 as /devices/virtual/input/input12312 [ 1737.644716][T18579] input: syz0 as /devices/virtual/input/input12313 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='d', 0x1, r1) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) clock_gettime(0x5, &(0x7f0000000200)) keyctl$reject(0x13, r2, 0x5, 0xed8, r3) (async) keyctl$reject(0x13, r2, 0x5, 0xed8, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:53 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1737.734660][T18596] input: syz0 as /devices/virtual/input/input12314 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000240)=[r2, 0x0, 0x0, r5, 0x0, 0x0], 0x6, 0x0, r6, 0xfffffffe, 0xfffffff7, 0x1, 0x1, {0x5, 0x4d9f, 0x4, 0x1000, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0xfce9, 0xd50, "ffd2493c585f41344144465657e7f63600c759c6b9e9286bf9482a260e6f5cc5"}}) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x410000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8912, &(0x7f0000000040)={'pim6reg\x00'}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:53 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1737.810203][T18605] input: syz0 as /devices/virtual/input/input12315 00:30:53 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:53 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x6000, 0x0, 0x0}]}) 00:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000240)=[r2, 0x0, 0x0, r5, 0x0, 0x0], 0x6, 0x0, r6, 0xfffffffe, 0xfffffff7, 0x1, 0x1, {0x5, 0x4d9f, 0x4, 0x1000, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0xfce9, 0xd50, "ffd2493c585f41344144465657e7f63600c759c6b9e9286bf9482a260e6f5cc5"}}) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x410000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8912, &(0x7f0000000040)={'pim6reg\x00'}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000240)=[r2, 0x0, 0x0, r5, 0x0, 0x0], 0x6, 0x0, r6, 0xfffffffe, 0xfffffff7, 0x1, 0x1, {0x5, 0x4d9f, 0x4, 0x1000, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0xfce9, 0xd50, "ffd2493c585f41344144465657e7f63600c759c6b9e9286bf9482a260e6f5cc5"}}) (async) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x410000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r7, 0x8912, &(0x7f0000000040)={'pim6reg\x00'}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000240)=[r2, 0x0, 0x0, r5, 0x0, 0x0], 0x6, 0x0, r6, 0xfffffffe, 0xfffffff7, 0x1, 0x1, {0x5, 0x4d9f, 0x4, 0x1000, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0xfce9, 0xd50, "ffd2493c585f41344144465657e7f63600c759c6b9e9286bf9482a260e6f5cc5"}}) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x410000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8912, &(0x7f0000000040)={'pim6reg\x00'}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x5, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000240)=[r2, 0x0, 0x0, r5, 0x0, 0x0], 0x6, 0x0, r6, 0xfffffffe, 0xfffffff7, 0x1, 0x1, {0x5, 0x4d9f, 0x4, 0x1000, 0x9, 0x1f, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0xfce9, 0xd50, "ffd2493c585f41344144465657e7f63600c759c6b9e9286bf9482a260e6f5cc5"}}) (async) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x410000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r7, 0x8912, &(0x7f0000000040)={'pim6reg\x00'}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) [ 1738.064255][T18666] input: syz0 as /devices/virtual/input/input12318 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1738.150459][T18684] input: syz0 as /devices/virtual/input/input12320 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1738.192747][T18693] input: syz0 as /devices/virtual/input/input12321 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) [ 1738.285804][T18706] input: syz0 as /devices/virtual/input/input12322 [ 1738.322808][T18711] input: syz0 as /devices/virtual/input/input12323 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1738.360790][T18720] input: syz0 as /devices/virtual/input/input12324 00:30:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x9, 0x3b01}) [ 1738.425238][T18725] input: syz0 as /devices/virtual/input/input12325 [ 1738.463683][T18734] input: syz0 as /devices/virtual/input/input12326 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) [ 1738.479188][T18740] input: syz0 as /devices/virtual/input/input12327 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x9, 0x3b01}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x9, 0x3b01}) 00:30:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x9, 0x3b01}) 00:30:54 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x0, 0xa6, &(0x7f00000000c0)=""/166}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1738.591682][T18748] input: syz0 as /devices/virtual/input/input12328 [ 1738.611461][T18759] input: syz0 as /devices/virtual/input/input12329 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1738.658658][T18755] input: syz0 as /devices/virtual/input/input12330 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:54 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:54 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x3, 0x0, [{0x1000, 0x0, 0x0}, {0x0, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x0, 0x0}]}) 00:30:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x3}) keyctl$invalidate(0x15, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1738.910230][T18815] input: syz0 as /devices/virtual/input/input12333 00:30:55 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x3}) keyctl$invalidate(0x15, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1739.009846][T18830] input: syz0 as /devices/virtual/input/input12334 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000000c0)={0x3}) (async) keyctl$invalidate(0x15, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1739.050093][T18828] input: syz0 as /devices/virtual/input/input12336 [ 1739.061147][T18835] input: syz0 as /devices/virtual/input/input12337 00:30:55 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1739.117272][T18843] input: syz0 as /devices/virtual/input/input12338 [ 1739.147151][T18850] input: syz0 as /devices/virtual/input/input12339 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0xe62c}) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.199749][T18855] input: syz0 as /devices/virtual/input/input12340 [ 1739.213521][T18859] input: syz0 as /devices/virtual/input/input12341 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0xe62c}) [ 1739.273620][T18862] input: syz0 as /devices/virtual/input/input12342 [ 1739.299679][T18869] input: syz0 as /devices/virtual/input/input12343 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0xe62c}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0xe62c}) (async) [ 1739.344911][T18873] input: syz0 as /devices/virtual/input/input12344 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:30:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.442051][T18888] input: syz0 as /devices/virtual/input/input12347 [ 1739.461271][T18886] input: syz0 as /devices/virtual/input/input12348 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000100)) 00:30:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.569778][T18916] input: syz0 as /devices/virtual/input/input12351 00:30:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000100)) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.648693][T18923] input: syz0 as /devices/virtual/input/input12353 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:55 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.723604][T18936] input: syz0 as /devices/virtual/input/input12358 00:30:55 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000100)) 00:30:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.791814][T18944] input: syz0 as /devices/virtual/input/input12359 [ 1739.830611][T18948] input: syz0 as /devices/virtual/input/input12360 00:30:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.883299][T18952] input: syz0 as /devices/virtual/input/input12361 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:56 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1739.942173][T18962] input: syz0 as /devices/virtual/input/input12362 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1739.996374][T18964] input: syz0 as /devices/virtual/input/input12363 [ 1740.007270][T18969] input: syz0 as /devices/virtual/input/input12364 [ 1740.014667][T18968] input: syz0 as /devices/virtual/input/input12365 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.063929][T18973] input: syz0 as /devices/virtual/input/input12366 00:30:56 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.107972][T18978] input: syz0 as /devices/virtual/input/input12367 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000040)) keyctl$link(0x8, 0x0, r1) 00:30:56 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000040)) keyctl$link(0x8, 0x0, r1) [ 1740.208944][T18991] input: syz0 as /devices/virtual/input/input12371 [ 1740.245894][T18993] input: syz0 as /devices/virtual/input/input12373 [ 1740.249832][T18996] input: syz0 as /devices/virtual/input/input12374 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1740.345065][T19008] input: syz0 as /devices/virtual/input/input12377 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.395136][T19014] input: syz0 as /devices/virtual/input/input12380 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.461602][T19021] input: syz0 as /devices/virtual/input/input12381 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000040)) (async) keyctl$link(0x8, 0x0, r1) 00:30:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.512913][T19026] input: syz0 as /devices/virtual/input/input12383 [ 1740.532764][T19029] input: syz0 as /devices/virtual/input/input12384 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.611884][T19042] input: syz0 as /devices/virtual/input/input12385 00:30:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.676481][T19050] input: syz0 as /devices/virtual/input/input12386 [ 1740.683043][T19053] input: syz0 as /devices/virtual/input/input12387 [ 1740.691401][T19055] input: syz0 as /devices/virtual/input/input12388 00:30:56 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1740.725263][T19047] input: syz0 as /devices/virtual/input/input12389 00:30:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:56 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:56 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.772243][T19062] input: syz0 as /devices/virtual/input/input12390 00:30:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='&\'\\\x00', r1) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1740.871258][T19073] input: syz0 as /devices/virtual/input/input12392 [ 1740.871339][T19075] input: syz0 as /devices/virtual/input/input12393 [ 1740.896056][T19076] input: syz0 as /devices/virtual/input/input12394 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='&\'\\\x00', r1) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.001977][T19088] input: syz0 as /devices/virtual/input/input12397 [ 1741.032308][T19093] input: syz0 as /devices/virtual/input/input12398 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='&\'\\\x00', r1) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.102254][T19100] input: syz0 as /devices/virtual/input/input12400 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000380)={0x0, 0x1000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000180)=""/176, 0xb0, &(0x7f00000000c0)=""/49, 0x1, 0x6}}, 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000300)) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.196253][T19115] input: syz0 as /devices/virtual/input/input12404 [ 1741.212990][T19121] input: syz0 as /devices/virtual/input/input12405 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000380)={0x0, 0x1000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000180)=""/176, 0xb0, &(0x7f00000000c0)=""/49, 0x1, 0x6}}, 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000300)) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.260819][T19126] input: syz0 as /devices/virtual/input/input12408 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.355615][T19134] input: syz0 as /devices/virtual/input/input12411 [ 1741.374112][T19142] input: syz0 as /devices/virtual/input/input12415 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000380)={0x0, 0x1000}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000180)=""/176, 0xb0, &(0x7f00000000c0)=""/49, 0x1, 0x6}}, 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000300)) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1741.441355][T19150] input: syz0 as /devices/virtual/input/input12417 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) [ 1741.529750][T19159] input: syz0 as /devices/virtual/input/input12420 [ 1741.551487][T19164] input: syz0 as /devices/virtual/input/input12422 [ 1741.557570][T19166] input: syz0 as /devices/virtual/input/input12423 [ 1741.572609][T19163] input: syz0 as /devices/virtual/input/input12424 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) socketpair(0x3, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1741.702457][T19177] input: syz0 as /devices/virtual/input/input12427 [ 1741.717631][T19185] input: syz0 as /devices/virtual/input/input12428 00:30:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:57 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) socketpair(0x3, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) socketpair(0x3, 0x80000, 0x3, &(0x7f0000000040)) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:57 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1741.834622][T19200] input: syz0 as /devices/virtual/input/input12434 [ 1741.870310][T19206] input: syz0 as /devices/virtual/input/input12436 [ 1741.881052][T19204] input: syz0 as /devices/virtual/input/input12437 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) socketpair(0x3, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) (async, rerun: 64) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (rerun: 64) 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) [ 1741.992975][T19221] input: syz0 as /devices/virtual/input/input12439 [ 1742.005062][T19226] input: syz0 as /devices/virtual/input/input12440 [ 1742.013603][T19227] input: syz0 as /devices/virtual/input/input12441 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.050523][T19230] input: syz0 as /devices/virtual/input/input12442 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) [ 1742.112270][T19237] input: syz0 as /devices/virtual/input/input12443 [ 1742.122182][T19238] input: syz0 as /devices/virtual/input/input12444 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.175452][T19241] input: syz0 as /devices/virtual/input/input12445 [ 1742.213807][T19247] input: syz0 as /devices/virtual/input/input12446 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) [ 1742.236250][T19250] input: syz0 as /devices/virtual/input/input12447 [ 1742.244894][T19253] input: syz0 as /devices/virtual/input/input12448 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0xf, 0xc0, {0x51, 0x8000, 0x8, {0x6, 0x1}, {0xff, 0x20}, @cond=[{0x1, 0x1, 0xff, 0x1, 0x1ff, 0x2}, {0xe0, 0x2, 0x8001, 0x2, 0x1a, 0x4}]}, {0x53, 0x0, 0x4, {0x1, 0x856c}, {0x40}, @const={0x8, {0xc26, 0x2, 0xfff, 0x200}}}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.294958][T19258] input: syz0 as /devices/virtual/input/input12449 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.396868][T19265] input: syz0 as /devices/virtual/input/input12450 [ 1742.406864][T19269] input: syz0 as /devices/virtual/input/input12451 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0xf, 0xc0, {0x51, 0x8000, 0x8, {0x6, 0x1}, {0xff, 0x20}, @cond=[{0x1, 0x1, 0xff, 0x1, 0x1ff, 0x2}, {0xe0, 0x2, 0x8001, 0x2, 0x1a, 0x4}]}, {0x53, 0x0, 0x4, {0x1, 0x856c}, {0x40}, @const={0x8, {0xc26, 0x2, 0xfff, 0x200}}}}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.439498][T19272] input: syz0 as /devices/virtual/input/input12453 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0xf, 0xc0, {0x51, 0x8000, 0x8, {0x6, 0x1}, {0xff, 0x20}, @cond=[{0x1, 0x1, 0xff, 0x1, 0x1ff, 0x2}, {0xe0, 0x2, 0x8001, 0x2, 0x1a, 0x4}]}, {0x53, 0x0, 0x4, {0x1, 0x856c}, {0x40}, @const={0x8, {0xc26, 0x2, 0xfff, 0x200}}}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0xf, 0xc0, {0x51, 0x8000, 0x8, {0x6, 0x1}, {0xff, 0x20}, @cond=[{0x1, 0x1, 0xff, 0x1, 0x1ff, 0x2}, {0xe0, 0x2, 0x8001, 0x2, 0x1a, 0x4}]}, {0x53, 0x0, 0x4, {0x1, 0x856c}, {0x40}, @const={0x8, {0xc26, 0x2, 0xfff, 0x200}}}}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) [ 1742.485908][T19274] input: syz0 as /devices/virtual/input/input12454 [ 1742.492344][T19275] input: syz0 as /devices/virtual/input/input12455 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.533293][T19284] input: syz0 as /devices/virtual/input/input12457 [ 1742.548034][T19283] input: syz0 as /devices/virtual/input/input12458 [ 1742.558330][T19286] input: syz0 as /devices/virtual/input/input12459 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.589545][T19290] input: syz0 as /devices/virtual/input/input12460 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.642056][T19295] input: syz0 as /devices/virtual/input/input12462 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f00000000c0)) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)) request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/vhost-vsock\x00', r2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f00000000c0)) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)) request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/vhost-vsock\x00', r2) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f00000000c0)) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)) (async) request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/vhost-vsock\x00', r2) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.725441][T19300] input: syz0 as /devices/virtual/input/input12464 [ 1742.726326][T19301] input: syz0 as /devices/virtual/input/input12465 [ 1742.746920][T19303] input: syz0 as /devices/virtual/input/input12466 00:30:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f00000000c0)) (async) r2 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)) (async) request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/vhost-vsock\x00', r2) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1742.821939][T19311] input: syz0 as /devices/virtual/input/input12468 00:30:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1742.942170][T19323] input: syz0 as /devices/virtual/input/input12471 [ 1742.976479][T19330] input: syz0 as /devices/virtual/input/input12474 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000000c0)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1742.991985][T19334] input: syz0 as /devices/virtual/input/input12475 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000000c0)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000000c0)) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1743.059857][T18247] udevd[18247]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1743.088142][T18247] udevd[18247]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.129918][T19349] input: syz0 as /devices/virtual/input/input12481 [ 1743.148311][T19352] input: syz0 as /devices/virtual/input/input12482 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000000c0)) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.171706][T19356] input: syz0 as /devices/virtual/input/input12483 [ 1743.200810][T19360] input: syz0 as /devices/virtual/input/input12485 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.268472][T19366] input: syz0 as /devices/virtual/input/input12486 [ 1743.296392][T19369] input: syz0 as /devices/virtual/input/input12487 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.352538][T19373] input: syz0 as /devices/virtual/input/input12489 [ 1743.376541][T19376] input: syz0 as /devices/virtual/input/input12490 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) [ 1743.407570][T19378] input: syz0 as /devices/virtual/input/input12491 [ 1743.416212][T19384] input: syz0 as /devices/virtual/input/input12492 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1743.543444][T19395] input: syz0 as /devices/virtual/input/input12495 [ 1743.558597][T19396] input: syz0 as /devices/virtual/input/input12496 [ 1743.577358][T19401] input: syz0 as /devices/virtual/input/input12497 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x20) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.589841][T19399] input: syz0 as /devices/virtual/input/input12498 [ 1743.607332][T19405] input: syz0 as /devices/virtual/input/input12499 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x20) 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.720428][T19412] input: syz0 as /devices/virtual/input/input12500 [ 1743.729436][T19409] input: syz0 as /devices/virtual/input/input12502 00:30:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1743.798011][T19419] input: syz0 as /devices/virtual/input/input12504 00:30:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x20) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x20) 00:30:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:30:59 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:30:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1743.902647][T19429] input: syz0 as /devices/virtual/input/input12508 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f00000000c0)='[:($:+(&%{+\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42400, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)='[:($:+(&%{+\x00') ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000240)=[0x3ff, 0xff, 0xe2d, 0x8, 0x6, 0xc2f, 0x4, 0x7f, 0x400, 0x4], &(0x7f0000000280)=[0x7, 0x1, 0x6, 0x0, 0x5, 0x3f], &(0x7f00000002c0)=[0x6, 0xf7, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1743.960170][T19441] input: syz0 as /devices/virtual/input/input12511 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f00000000c0)='[:($:+(&%{+\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42400, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) (async) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)='[:($:+(&%{+\x00') (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000240)=[0x3ff, 0xff, 0xe2d, 0x8, 0x6, 0xc2f, 0x4, 0x7f, 0x400, 0x4], &(0x7f0000000280)=[0x7, 0x1, 0x6, 0x0, 0x5, 0x3f], &(0x7f00000002c0)=[0x6, 0xf7, 0x7]}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) 00:31:00 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1744.043772][T19452] input: syz0 as /devices/virtual/input/input12513 [ 1744.077008][T19458] input: syz0 as /devices/virtual/input/input12515 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f00000000c0)='[:($:+(&%{+\x00') (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42400, 0x0) (async) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) (async) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$restrict_keyring(0x1d, r4, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)='[:($:+(&%{+\x00') ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000240)=[0x3ff, 0xff, 0xe2d, 0x8, 0x6, 0xc2f, 0x4, 0x7f, 0x400, 0x4], &(0x7f0000000280)=[0x7, 0x1, 0x6, 0x0, 0x5, 0x3f], &(0x7f00000002c0)=[0x6, 0xf7, 0x7]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000440)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x3}) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1744.180838][T19470] input: syz0 as /devices/virtual/input/input12516 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1744.296684][T19493] input: syz0 as /devices/virtual/input/input12519 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:00 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1744.394981][T19509] input: syz0 as /devices/virtual/input/input12521 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x0, 0x20}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1744.521774][T19525] input: syz0 as /devices/virtual/input/input12526 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x0, 0x20}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000100)={0x0, 0x20}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (rerun: 32) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='logon\x00', &(0x7f00000000c0)='/dev/vhost-vsock\x00') 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='logon\x00', &(0x7f00000000c0)='/dev/vhost-vsock\x00') 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1744.843516][T19587] input: syz0 as /devices/virtual/input/input12544 [ 1744.882442][T19593] input: syz0 as /devices/virtual/input/input12546 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000040)='logon\x00', &(0x7f00000000c0)='/dev/vhost-vsock\x00') 00:31:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, r1) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1745.017045][T19611] input: syz0 as /devices/virtual/input/input12553 [ 1745.027563][T19613] input: syz0 as /devices/virtual/input/input12554 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.080230][T19621] input: syz0 as /devices/virtual/input/input12556 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, r1) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, r1) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1745.184104][T19632] input: syz0 as /devices/virtual/input/input12561 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, r1) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.246323][T19643] input: syz0 as /devices/virtual/input/input12564 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.355569][T19658] input: syz0 as /devices/virtual/input/input12568 [ 1745.387458][T19665] input: syz0 as /devices/virtual/input/input12571 [ 1745.388364][T19664] input: syz0 as /devices/virtual/input/input12572 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.450118][T19668] input: syz0 as /devices/virtual/input/input12573 00:31:01 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1745.525709][T19674] input: syz0 as /devices/virtual/input/input12575 [ 1745.553515][T19678] input: syz0 as /devices/virtual/input/input12577 00:31:01 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.600524][T19687] input: syz0 as /devices/virtual/input/input12578 00:31:01 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1745.702030][T19698] input: syz0 as /devices/virtual/input/input12581 [ 1745.720952][T19699] input: syz0 as /devices/virtual/input/input12582 [ 1745.742406][T19704] input: syz0 as /devices/virtual/input/input12584 [ 1745.749400][T19702] input: syz0 as /devices/virtual/input/input12583 00:31:01 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:31:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, &(0x7f0000000100)) [ 1745.872037][T19713] input: syz0 as /devices/virtual/input/input12585 [ 1745.880455][T19720] input: syz0 as /devices/virtual/input/input12586 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 5: r0 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='+[},a#-Q\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000004c0)={0x2, 0x0, @b}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)={0x3, 0x0, @a}, 0x48, r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) [ 1745.986253][T19731] input: syz0 as /devices/virtual/input/input12587 [ 1746.010453][T19735] input: syz0 as /devices/virtual/input/input12588 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 5: request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffff9) (async) r0 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='+[},a#-Q\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000004c0)={0x2, 0x0, @b}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)={0x3, 0x0, @a}, 0x48, r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) [ 1746.063892][T19741] input: syz0 as /devices/virtual/input/input12589 00:31:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1746.168368][T19746] input: syz0 as /devices/virtual/input/input12591 00:31:02 executing program 5: r0 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syz', 0xfffffffffffffff9) (async) r1 = request_key(&(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='+[},a#-Q\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000004c0)={0x2, 0x0, @b}, 0x48, r1) (async, rerun: 64) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000180)={0x3, 0x0, @a}, 0x48, r0) (async, rerun: 64) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x9, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1746.213215][T19758] input: syz0 as /devices/virtual/input/input12593 [ 1746.233670][T19759] input: syz0 as /devices/virtual/input/input12594 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1746.324018][T19771] input: syz0 as /devices/virtual/input/input12596 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x6000, 0x0, 0x0}]}) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1746.369481][T19774] input: syz0 as /devices/virtual/input/input12598 [ 1746.392827][T19778] input: syz0 as /devices/virtual/input/input12599 [ 1746.396520][T19782] input: syz0 as /devices/virtual/input/input12600 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xffe0}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) clock_gettime(0x5, &(0x7f0000000200)) keyctl$reject(0x13, r2, 0x5, 0xed8, r3) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffff8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1746.547834][T19793] input: syz0 as /devices/virtual/input/input12603 [ 1746.571848][T19804] input: syz0 as /devices/virtual/input/input12604 00:31:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) [ 1746.595906][T19802] input: syz0 as /devices/virtual/input/input12605 00:31:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x9, 0x3, 0xffe0, 0x5}, 'syz0\x00', 0x12}) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1746.621324][T19800] input: syz0 as /devices/virtual/input/input12606 00:31:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 00:31:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x1, 0x2f}) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r4, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x2}) 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) [ 1746.692611][T19816] input: syz0 as /devices/virtual/input/input12607 00:31:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x700000000000000) 00:31:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002400)={0x7, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x1000, &(0x7f0000000300)=""/4096}, {0xd000, 0x2b, &(0x7f0000000280)=""/43}, {0x6000, 0x43, &(0x7f0000001300)=""/67}, {0x2000, 0x68, &(0x7f0000001380)=""/104}, {0xd000, 0x1000, &(0x7f0000001400)=""/4096}]}) 00:31:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x0, 0xe866}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:31:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1746.759690][T19823] input: syz0 as /devices/virtual/input/input12608 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:02 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x0, r4}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000080)={0x2, 0x93f4}) 00:31:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x600000000000000) 00:31:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:02 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:31:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x100000000000000) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) 00:31:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) pselect6(0x40, &(0x7f0000000080)={0x6, 0x81, 0x6f, 0x9, 0xbfac, 0x6, 0x8, 0x1f}, &(0x7f00000000c0)={0x81, 0x5, 0x7, 0x3, 0x6, 0x4, 0xffffffff, 0x83}, &(0x7f0000000100)={0xfffffffffffeffff, 0x8, 0x5, 0xb9, 0x656, 0x6, 0x4, 0x9}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x8000000000000000]}, 0x8}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)) 00:31:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 00:31:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x7, 0x0, [{0x1000, 0xa6, &(0x7f00000000c0)=""/166}, {0xd000, 0xe6, &(0x7f0000000180)=""/230}, {0x6000, 0x1000, &(0x7f0000000300)=""/4096}, {0xd000, 0x2b, &(0x7f0000000280)=""/43}, {0x6000, 0x43, &(0x7f0000001300)=""/67}, {0x2000, 0x68, &(0x7f0000001380)=""/104}, {0xd000, 0x1000, &(0x7f0000001400)=""/4096}]}) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:03 executing program 3: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x24b) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:31:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:31:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x7a000000) 00:31:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/186, 0xba}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r2, 0x4) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) (async) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, r1) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x6800) 00:31:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) write$vhost_msg_v2(r2, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000080)=""/104, 0x68, &(0x7f0000000100)=""/54, 0x2, 0x4}}, 0x48) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x400, 0x200000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000001c0)={0x0, 0x1}) 00:31:03 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x920, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/162, 0xa2, &(0x7f0000000140)=""/59, 0x1, 0x4}}, 0x48) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000001c0)=""/137, 0x89}) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4004af07, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 00:31:03 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x920, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/162, 0xa2, &(0x7f0000000140)=""/59, 0x1, 0x4}}, 0x48) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000001c0)=""/137, 0x89}) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4004af07, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 00:31:03 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r0) 00:31:03 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x920, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20000000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000280)=""/162, 0xa2, &(0x7f0000000140)=""/59, 0x1, 0x4}}, 0x48) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000001c0)=""/137, 0x89}) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4004af07, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 00:31:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) 00:31:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) 00:31:03 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r0) 00:31:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = getpgid(0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x7}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x9) 00:31:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x6c) 00:31:03 executing program 4: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x1, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r1}, 0x48) 00:31:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x7, 0x0, [{0x1000, 0x4a, &(0x7f00000000c0)=""/74}, {0xd000, 0x7, &(0x7f0000000140)=""/7}, {0x4000, 0x60, &(0x7f0000000180)=""/96}, {0x2000, 0x5c, &(0x7f0000000200)=""/92}, {0x1, 0x26, &(0x7f0000000280)=""/38}, {0xd000, 0x30, &(0x7f00000002c0)=""/48}, {0x5000, 0x2f, &(0x7f0000000300)=""/47}]}) 00:31:03 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x7, 0x0, [{0x1000, 0x4a, &(0x7f00000000c0)=""/74}, {0xd000, 0x7, &(0x7f0000000140)=""/7}, {0x4000, 0x60, &(0x7f0000000180)=""/96}, {0x2000, 0x5c, &(0x7f0000000200)=""/92}, {0x1, 0x26, &(0x7f0000000280)=""/38}, {0xd000, 0x30, &(0x7f00000002c0)=""/48}, {0x5000, 0x2f, &(0x7f0000000300)=""/47}]}) 00:31:03 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r0) 00:31:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x4) 00:31:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="ac8428d139260087f5be660db7effdd46315a628521664f5bd93830e2b81743dc58fb7242bd6f0d982687fe64cbfb73ea1aa0356a955c516434f4813130639eeabe40bdc60f30e9cad3fc7fa633b7e08cdc20fdb2f8545b3b796c803c18f864ea4373757d65ceedc3bad9e2fd259eaa668182e41b4c8aad41ac2006ebd1870761326fe261915024cc245c0717cde78f291f7ddc777330ef289eaec0990039079b05747f5effcab4147e24ffd3fc31afadfc595c3aa29f6b333d781130a805e0f224d24090938ac686c093a80d31bfb79a4ae475e7523896a12f3a86a8be45b15ab411994d85bc0") epoll_pwait2(r1, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x4]}, 0x8) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) io_uring_setup(0x5aad, &(0x7f0000000300)={0x0, 0x22cc, 0x2, 0x3, 0x1e4, 0x0, r1}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x3, 0x620000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x100}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:03 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x2, 0x4, 0x2, 0x4, 0x6, "8f0490e8056f198ecdf1f6055bfca5e3ee03236a4bf358ba4e380790af9dad9549040d4c49cb208a3cd3574e7eab97423f1a35d8422daf7ee49b494c38dd7c85993e881bacfabd338329be73b33962df01b2a9b3dde5b6f9a21bc7afe03ba7f6d638939eb0fec83a49f6a3cabafef16209b048e7d444d600"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f00000003c0)={0x8, 0x90, {0x56, 0x0, 0x100, {0x8, 0xd5}, {0xeae1, 0x1ff}, @const={0x6, {0xfff, 0xd8a9, 0x80, 0x6}}}, {0x55, 0x5, 0x81, {0x40, 0x1f8}, {0xffc0, 0x7fff}, @ramp={0x1, 0x8e, {0x4, 0x7, 0x9c3, 0x2}}}}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000340), &(0x7f0000000380)=0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{}, {@fixed}]}) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000000)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)) 00:31:03 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r1, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r1, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r2, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r2, 0xdededede}) 00:31:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x7, 0x0, [{0x1000, 0x4a, &(0x7f00000000c0)=""/74}, {0xd000, 0x7, &(0x7f0000000140)=""/7}, {0x4000, 0x60, &(0x7f0000000180)=""/96}, {0x2000, 0x5c, &(0x7f0000000200)=""/92}, {0x1, 0x26, &(0x7f0000000280)=""/38}, {0xd000, 0x30, &(0x7f00000002c0)=""/48}, {0x5000, 0x2f, &(0x7f0000000300)=""/47}]}) 00:31:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xe804, 0x32, &(0x7f0000000100)=""/50}]}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4004af07, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+memory +rlimit +net_prio -net +cpuacct -blkio \x00rlimit +io -memory \x00\x00\x00\x00/)'], 0x48) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x100}) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) 00:31:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1) 00:31:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x7, 0x0, [{0x1000, 0x4a, &(0x7f00000000c0)=""/74}, {0xd000, 0x7, &(0x7f0000000140)=""/7}, {0x4000, 0x60, &(0x7f0000000180)=""/96}, {0x2000, 0x5c, &(0x7f0000000200)=""/92}, {0x1, 0x26, &(0x7f0000000280)=""/38}, {0xd000, 0x30, &(0x7f00000002c0)=""/48}, {0x5000, 0x2f, &(0x7f0000000300)=""/47}]}) 00:31:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1) 00:31:03 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x100}) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1747.466727][T19973] FAULT_INJECTION: forcing a failure. [ 1747.466727][T19973] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.470486][T19974] FAULT_INJECTION: forcing a failure. [ 1747.470486][T19974] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.483363][T19973] CPU: 0 PID: 19973 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1747.502372][T19973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1747.512437][T19973] Call Trace: [ 1747.515722][T19973] [ 1747.518652][T19973] dump_stack_lvl+0x125/0x1b0 [ 1747.523331][T19973] should_fail_ex+0x496/0x5b0 [ 1747.528026][T19973] should_failslab+0x9/0x20 [ 1747.532532][T19973] __kmem_cache_alloc_node+0x2fd/0x350 [ 1747.537995][T19973] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1747.543811][T19973] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1747.549545][T19973] __kmalloc+0x4f/0x100 [ 1747.553702][T19973] tomoyo_realpath_from_path+0xb9/0x710 [ 1747.559264][T19973] ? lock_release+0x4bf/0x680 [ 1747.563963][T19973] ? tomoyo_profile+0x47/0x60 [ 1747.568671][T19973] tomoyo_path_number_perm+0x243/0x590 [ 1747.574157][T19973] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1747.579797][T19973] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1747.585621][T19973] ? lock_release+0x4bf/0x680 [ 1747.590326][T19973] ? reacquire_held_locks+0x4b0/0x4b0 [ 1747.595700][T19973] ? bit_wait_timeout+0x160/0x160 [ 1747.600725][T19973] ? __fget_files+0x279/0x410 [ 1747.605477][T19973] ? __fget_files+0x279/0x410 [ 1747.610167][T19973] security_file_ioctl+0x72/0xb0 [ 1747.615093][T19973] __x64_sys_ioctl+0xbb/0x210 [ 1747.619757][T19973] do_syscall_64+0x38/0xb0 [ 1747.624161][T19973] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1747.630045][T19973] RIP: 0033:0x7f394be7cae9 [ 1747.634449][T19973] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1747.654139][T19973] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.662542][T19973] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1747.670508][T19973] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1747.678466][T19973] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1747.686454][T19973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.694420][T19973] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1747.702397][T19973] [ 1747.711356][T19973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1747.713734][T19974] CPU: 0 PID: 19974 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1747.723014][T19973] input: syz0 as /devices/virtual/input/input12612 [ 1747.728244][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1747.728257][T19974] Call Trace: [ 1747.728264][T19974] [ 1747.728271][T19974] dump_stack_lvl+0x125/0x1b0 [ 1747.750229][T19982] FAULT_INJECTION: forcing a failure. [ 1747.750229][T19982] name failslab, interval 1, probability 0, space 0, times 0 00:31:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1) [ 1747.750968][T19974] should_fail_ex+0x496/0x5b0 [ 1747.772994][T19974] should_failslab+0x9/0x20 [ 1747.777500][T19974] __kmem_cache_alloc_node+0x2fd/0x350 [ 1747.782981][T19974] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1747.788708][T19974] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1747.794431][T19974] __kmalloc+0x4f/0x100 [ 1747.798605][T19974] tomoyo_realpath_from_path+0xb9/0x710 [ 1747.804264][T19974] ? lock_release+0x4bf/0x680 [ 1747.808988][T19974] ? tomoyo_profile+0x47/0x60 [ 1747.813679][T19974] tomoyo_path_number_perm+0x243/0x590 [ 1747.819161][T19974] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1747.824812][T19974] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1747.830619][T19974] ? lock_release+0x4bf/0x680 [ 1747.835308][T19974] ? reacquire_held_locks+0x4b0/0x4b0 [ 1747.840723][T19974] ? bit_wait_timeout+0x160/0x160 [ 1747.845756][T19974] ? __fget_files+0x279/0x410 [ 1747.850457][T19974] ? __fget_files+0x279/0x410 [ 1747.855138][T19974] security_file_ioctl+0x72/0xb0 [ 1747.860088][T19974] __x64_sys_ioctl+0xbb/0x210 [ 1747.864775][T19974] do_syscall_64+0x38/0xb0 [ 1747.869188][T19974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1747.875166][T19974] RIP: 0033:0x7ffb98e7cae9 [ 1747.879576][T19974] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1747.899388][T19974] RSP: 002b:00007ffb99b8c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1747.907911][T19974] RAX: ffffffffffffffda RBX: 00007ffb98f9bf80 RCX: 00007ffb98e7cae9 [ 1747.915875][T19974] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1747.923833][T19974] RBP: 00007ffb99b8c120 R08: 0000000000000000 R09: 0000000000000000 [ 1747.931878][T19974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.939856][T19974] R13: 000000000000000b R14: 00007ffb98f9bf80 R15: 00007fffff38b098 [ 1747.947823][T19974] [ 1747.958275][T19982] CPU: 0 PID: 19982 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 00:31:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:31:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 2) 00:31:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x305001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) [ 1747.968378][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1747.978440][T19982] Call Trace: [ 1747.981719][T19982] [ 1747.984657][T19982] dump_stack_lvl+0x125/0x1b0 [ 1747.989351][T19982] should_fail_ex+0x496/0x5b0 [ 1747.994054][T19982] should_failslab+0x9/0x20 [ 1747.998560][T19982] __kmem_cache_alloc_node+0x2fd/0x350 [ 1748.004033][T19982] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1748.009776][T19982] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1748.014499][T19987] FAULT_INJECTION: forcing a failure. [ 1748.014499][T19987] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.015546][T19982] __kmalloc+0x4f/0x100 [ 1748.015570][T19982] tomoyo_realpath_from_path+0xb9/0x710 [ 1748.015599][T19982] ? lock_release+0x4bf/0x680 [ 1748.015626][T19982] ? tomoyo_profile+0x47/0x60 [ 1748.015649][T19982] tomoyo_path_number_perm+0x243/0x590 [ 1748.015674][T19982] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1748.015700][T19982] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1748.015725][T19982] ? lock_release+0x4bf/0x680 [ 1748.015759][T19982] ? reacquire_held_locks+0x4b0/0x4b0 [ 1748.015784][T19982] ? bit_wait_timeout+0x160/0x160 [ 1748.015808][T19982] ? __fget_files+0x279/0x410 [ 1748.015830][T19982] ? __fget_files+0x279/0x410 [ 1748.015851][T19982] security_file_ioctl+0x72/0xb0 [ 1748.015873][T19982] __x64_sys_ioctl+0xbb/0x210 [ 1748.015893][T19982] do_syscall_64+0x38/0xb0 [ 1748.015912][T19982] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1748.015933][T19982] RIP: 0033:0x7f426867cae9 [ 1748.015948][T19982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.015967][T19982] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.015986][T19982] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1748.016000][T19982] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1748.016012][T19982] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.016024][T19982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.016036][T19982] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1748.016053][T19982] [ 1748.038451][T19982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.049091][T19987] CPU: 1 PID: 19987 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1748.201128][T19987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1748.211199][T19987] Call Trace: [ 1748.214525][T19987] [ 1748.217446][T19987] dump_stack_lvl+0x125/0x1b0 [ 1748.222119][T19987] should_fail_ex+0x496/0x5b0 [ 1748.226797][T19987] should_failslab+0x9/0x20 [ 1748.231315][T19987] __kmem_cache_alloc_node+0x2fd/0x350 [ 1748.236773][T19987] ? tomoyo_encode2+0x100/0x3d0 [ 1748.241625][T19987] ? tomoyo_encode2+0x100/0x3d0 [ 1748.246471][T19987] __kmalloc+0x4f/0x100 [ 1748.250621][T19987] tomoyo_encode2+0x100/0x3d0 [ 1748.255291][T19987] ? rcu_is_watching+0x12/0xb0 [ 1748.260051][T19987] tomoyo_encode+0x29/0x50 [ 1748.264485][T19987] tomoyo_realpath_from_path+0x196/0x710 [ 1748.270118][T19987] tomoyo_path_number_perm+0x243/0x590 [ 1748.275572][T19987] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1748.281201][T19987] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1748.287001][T19987] ? lock_release+0x4bf/0x680 [ 1748.291680][T19987] ? reacquire_held_locks+0x4b0/0x4b0 [ 1748.297043][T19987] ? bit_wait_timeout+0x160/0x160 [ 1748.302062][T19987] ? __fget_files+0x279/0x410 [ 1748.306823][T19987] ? __fget_files+0x279/0x410 [ 1748.311518][T19987] security_file_ioctl+0x72/0xb0 [ 1748.316449][T19987] __x64_sys_ioctl+0xbb/0x210 [ 1748.321114][T19987] do_syscall_64+0x38/0xb0 [ 1748.325542][T19987] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1748.331441][T19987] RIP: 0033:0x7f394be7cae9 [ 1748.336044][T19987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.355641][T19987] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.364480][T19987] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1748.372437][T19987] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1748.380396][T19987] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.388447][T19987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.396408][T19987] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1748.404460][T19987] [ 1748.409264][T19982] input: syz0 as /devices/virtual/input/input12614 00:31:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1748.422086][T19974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.426731][T19987] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.431446][T19974] input: syz0 as /devices/virtual/input/input12613 [ 1748.474364][T19987] input: syz0 as /devices/virtual/input/input12615 [ 1748.487101][T19992] input: syz0 as /devices/virtual/input/input12616 00:31:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 1) 00:31:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x305001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 2) 00:31:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2) 00:31:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x10) 00:31:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x541b) [ 1748.559108][T19999] FAULT_INJECTION: forcing a failure. [ 1748.559108][T19999] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.575834][T19999] CPU: 0 PID: 19999 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1748.585916][T19999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1748.595983][T19999] Call Trace: [ 1748.599265][T19999] [ 1748.602195][T19999] dump_stack_lvl+0x125/0x1b0 00:31:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5421) [ 1748.606876][T19999] should_fail_ex+0x496/0x5b0 [ 1748.611586][T19999] should_failslab+0x9/0x20 [ 1748.616093][T19999] __kmem_cache_alloc_node+0x2fd/0x350 [ 1748.621576][T19999] ? tomoyo_encode2+0x100/0x3d0 [ 1748.626445][T19999] ? tomoyo_encode2+0x100/0x3d0 [ 1748.631011][T20007] FAULT_INJECTION: forcing a failure. [ 1748.631011][T20007] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.631292][T19999] __kmalloc+0x4f/0x100 [ 1748.631314][T19999] tomoyo_encode2+0x100/0x3d0 [ 1748.652684][T19999] ? rcu_is_watching+0x12/0xb0 [ 1748.657447][T19999] tomoyo_encode+0x29/0x50 [ 1748.661870][T19999] tomoyo_realpath_from_path+0x196/0x710 [ 1748.667624][T19999] tomoyo_path_number_perm+0x243/0x590 [ 1748.673083][T19999] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1748.678716][T19999] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1748.684521][T19999] ? lock_release+0x4bf/0x680 [ 1748.689217][T19999] ? reacquire_held_locks+0x4b0/0x4b0 [ 1748.694590][T19999] ? bit_wait_timeout+0x160/0x160 [ 1748.699707][T19999] ? __fget_files+0x279/0x410 [ 1748.704393][T19999] ? __fget_files+0x279/0x410 [ 1748.709070][T19999] security_file_ioctl+0x72/0xb0 [ 1748.714016][T19999] __x64_sys_ioctl+0xbb/0x210 [ 1748.718698][T19999] do_syscall_64+0x38/0xb0 [ 1748.723198][T19999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1748.729090][T19999] RIP: 0033:0x7f426867cae9 [ 1748.733502][T19999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.753111][T19999] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.761523][T19999] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1748.769524][T19999] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1748.777488][T19999] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.785460][T19999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.793454][T19999] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1748.801449][T19999] [ 1748.804549][T20007] CPU: 1 PID: 20007 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1748.814635][T20007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1748.824742][T20007] Call Trace: [ 1748.825408][T19999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1748.828011][T20007] [ 1748.828018][T20007] dump_stack_lvl+0x125/0x1b0 [ 1748.828045][T20007] should_fail_ex+0x496/0x5b0 [ 1748.841404][T19999] input: syz0 as /devices/virtual/input/input12617 [ 1748.842304][T20007] should_failslab+0x9/0x20 [ 1748.842330][T20007] __kmem_cache_alloc_node+0x2fd/0x350 [ 1748.863423][T20007] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1748.869147][T20007] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1748.874863][T20007] __kmalloc+0x4f/0x100 [ 1748.879031][T20007] tomoyo_realpath_from_path+0xb9/0x710 [ 1748.884571][T20007] ? lock_release+0x4bf/0x680 [ 1748.889246][T20007] ? tomoyo_profile+0x47/0x60 [ 1748.893916][T20007] tomoyo_path_number_perm+0x243/0x590 [ 1748.899367][T20007] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1748.905000][T20007] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1748.910801][T20007] ? lock_release+0x4bf/0x680 [ 1748.915482][T20007] ? reacquire_held_locks+0x4b0/0x4b0 [ 1748.920853][T20007] ? bit_wait_timeout+0x160/0x160 [ 1748.925874][T20007] ? __fget_files+0x279/0x410 [ 1748.930547][T20007] ? __fget_files+0x279/0x410 [ 1748.935211][T20007] security_file_ioctl+0x72/0xb0 [ 1748.940144][T20007] __x64_sys_ioctl+0xbb/0x210 [ 1748.944812][T20007] do_syscall_64+0x38/0xb0 [ 1748.949216][T20007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1748.955097][T20007] RIP: 0033:0x7f4a3f07cae9 [ 1748.959496][T20007] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.979096][T20007] RSP: 002b:00007f4a3fe2d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1748.987497][T20007] RAX: ffffffffffffffda RBX: 00007f4a3f19bf80 RCX: 00007f4a3f07cae9 [ 1748.995481][T20007] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1749.003445][T20007] RBP: 00007f4a3fe2d120 R08: 0000000000000000 R09: 0000000000000000 00:31:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x305001) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) [ 1749.011402][T20007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.019363][T20007] R13: 000000000000000b R14: 00007f4a3f19bf80 R15: 00007fff2aba3128 [ 1749.027363][T20007] 00:31:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 3) 00:31:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5450) [ 1749.053442][T20007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1749.069066][T20007] input: syz0 as /devices/virtual/input/input12621 00:31:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 3) 00:31:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 2) 00:31:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)='*\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1749.140538][T20024] FAULT_INJECTION: forcing a failure. [ 1749.140538][T20024] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.154701][T20024] CPU: 0 PID: 20024 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1749.164771][T20024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1749.174958][T20024] Call Trace: [ 1749.178251][T20024] [ 1749.181198][T20024] dump_stack_lvl+0x125/0x1b0 [ 1749.185889][T20024] should_fail_ex+0x496/0x5b0 00:31:05 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) [ 1749.190587][T20024] should_failslab+0x9/0x20 [ 1749.195091][T20024] __kmem_cache_alloc_node+0x2fd/0x350 [ 1749.200568][T20024] ? input_register_device+0x685/0x1130 [ 1749.206143][T20024] ? input_register_device+0x685/0x1130 [ 1749.211701][T20024] __kmalloc+0x4f/0x100 [ 1749.215848][T20024] input_register_device+0x685/0x1130 [ 1749.221252][T20024] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1749.227230][T20024] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1749.232944][T20024] ? reacquire_held_locks+0x4b0/0x4b0 [ 1749.238315][T20024] ? bit_wait_timeout+0x160/0x160 [ 1749.243329][T20024] ? __fget_files+0x279/0x410 [ 1749.248022][T20024] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1749.252950][T20024] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1749.259104][T20024] __x64_sys_ioctl+0x18f/0x210 [ 1749.263883][T20024] do_syscall_64+0x38/0xb0 [ 1749.268293][T20024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1749.274176][T20024] RIP: 0033:0x7f394be7cae9 [ 1749.278581][T20024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.298180][T20024] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.306582][T20024] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1749.314540][T20024] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1749.322495][T20024] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.330472][T20024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.338637][T20024] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1749.346691][T20024] [ 1749.356875][T20034] FAULT_INJECTION: forcing a failure. [ 1749.356875][T20034] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.371068][T20034] CPU: 0 PID: 20034 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1749.372275][T20037] FAULT_INJECTION: forcing a failure. 00:31:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4) [ 1749.372275][T20037] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.381131][T20034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1749.381144][T20034] Call Trace: [ 1749.381152][T20034] [ 1749.381159][T20034] dump_stack_lvl+0x125/0x1b0 [ 1749.381182][T20034] should_fail_ex+0x496/0x5b0 [ 1749.381212][T20034] should_failslab+0x9/0x20 [ 1749.381231][T20034] __kmem_cache_alloc_node+0x2fd/0x350 [ 1749.381259][T20034] ? tomoyo_encode2+0x100/0x3d0 [ 1749.381286][T20034] ? tomoyo_encode2+0x100/0x3d0 00:31:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)='*\x00') (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1749.407293][T20039] FAULT_INJECTION: forcing a failure. [ 1749.407293][T20039] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.410179][T20034] __kmalloc+0x4f/0x100 [ 1749.410207][T20034] tomoyo_encode2+0x100/0x3d0 [ 1749.460605][T20034] ? rcu_is_watching+0x12/0xb0 [ 1749.465468][T20034] tomoyo_encode+0x29/0x50 [ 1749.469905][T20034] tomoyo_realpath_from_path+0x196/0x710 [ 1749.475548][T20034] tomoyo_path_number_perm+0x243/0x590 [ 1749.481023][T20034] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1749.486665][T20034] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1749.492501][T20034] ? lock_release+0x4bf/0x680 [ 1749.497206][T20034] ? reacquire_held_locks+0x4b0/0x4b0 [ 1749.502676][T20034] ? bit_wait_timeout+0x160/0x160 [ 1749.507721][T20034] ? __fget_files+0x279/0x410 [ 1749.512401][T20034] ? __fget_files+0x279/0x410 [ 1749.517082][T20034] security_file_ioctl+0x72/0xb0 [ 1749.522127][T20034] __x64_sys_ioctl+0xbb/0x210 [ 1749.526805][T20034] do_syscall_64+0x38/0xb0 [ 1749.531222][T20034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1749.537115][T20034] RIP: 0033:0x7f4a3f07cae9 [ 1749.541528][T20034] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.561132][T20034] RSP: 002b:00007f4a3fe2d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.569540][T20034] RAX: ffffffffffffffda RBX: 00007f4a3f19bf80 RCX: 00007f4a3f07cae9 [ 1749.577535][T20034] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1749.585496][T20034] RBP: 00007f4a3fe2d120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.593458][T20034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.601450][T20034] R13: 000000000000000b R14: 00007f4a3f19bf80 R15: 00007fff2aba3128 [ 1749.609413][T20034] [ 1749.614314][T20037] CPU: 1 PID: 20037 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1749.624403][T20037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1749.634451][T20037] Call Trace: [ 1749.637726][T20037] [ 1749.640653][T20037] dump_stack_lvl+0x125/0x1b0 [ 1749.645332][T20037] should_fail_ex+0x496/0x5b0 [ 1749.650022][T20037] should_failslab+0x9/0x20 [ 1749.654551][T20037] __kmem_cache_alloc_node+0x2fd/0x350 [ 1749.660071][T20037] ? tomoyo_encode2+0x100/0x3d0 [ 1749.664928][T20037] ? tomoyo_encode2+0x100/0x3d0 [ 1749.669778][T20037] __kmalloc+0x4f/0x100 [ 1749.673930][T20037] tomoyo_encode2+0x100/0x3d0 [ 1749.678607][T20037] ? rcu_is_watching+0x12/0xb0 [ 1749.683488][T20037] tomoyo_encode+0x29/0x50 [ 1749.687912][T20037] tomoyo_realpath_from_path+0x196/0x710 [ 1749.693558][T20037] tomoyo_path_number_perm+0x243/0x590 [ 1749.699017][T20037] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1749.704651][T20037] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1749.710457][T20037] ? lock_release+0x4bf/0x680 [ 1749.715156][T20037] ? reacquire_held_locks+0x4b0/0x4b0 [ 1749.720527][T20037] ? bit_wait_timeout+0x160/0x160 [ 1749.725550][T20037] ? __fget_files+0x279/0x410 [ 1749.730229][T20037] ? __fget_files+0x279/0x410 [ 1749.734906][T20037] security_file_ioctl+0x72/0xb0 [ 1749.739842][T20037] __x64_sys_ioctl+0xbb/0x210 [ 1749.744518][T20037] do_syscall_64+0x38/0xb0 [ 1749.749023][T20037] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1749.754929][T20037] RIP: 0033:0x7f426867cae9 [ 1749.759337][T20037] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.779029][T20037] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.787439][T20037] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1749.795407][T20037] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1749.803459][T20037] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.804360][T20034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1749.811415][T20037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.811431][T20037] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1749.811450][T20037] 00:31:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 5) [ 1749.839729][T20037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1749.846704][T20039] CPU: 1 PID: 20039 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1749.846731][T20039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1749.846742][T20039] Call Trace: [ 1749.846749][T20039] [ 1749.846755][T20039] dump_stack_lvl+0x125/0x1b0 [ 1749.846780][T20039] should_fail_ex+0x496/0x5b0 [ 1749.846813][T20039] should_failslab+0x9/0x20 [ 1749.846833][T20039] __kmem_cache_alloc_node+0x2fd/0x350 00:31:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) 00:31:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) [ 1749.846862][T20039] ? device_add+0xd18/0x1ac0 [ 1749.846884][T20039] kmalloc_trace+0x25/0xe0 [ 1749.846913][T20039] device_add+0xd18/0x1ac0 [ 1749.846933][T20039] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1749.846956][T20039] ? kasan_set_track+0x25/0x30 [ 1749.846984][T20039] ? rcu_is_watching+0x12/0xb0 [ 1749.847005][T20039] input_register_device+0x7b6/0x1130 [ 1749.847038][T20039] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1749.847065][T20039] ? uinput_ff_upload_to_user+0x2a0/0x2a0 00:31:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) [ 1749.847091][T20039] ? reacquire_held_locks+0x4b0/0x4b0 [ 1749.847117][T20039] ? bit_wait_timeout+0x160/0x160 [ 1749.847141][T20039] ? __fget_files+0x279/0x410 [ 1749.847167][T20039] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1749.847191][T20039] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1749.847217][T20039] __x64_sys_ioctl+0x18f/0x210 [ 1749.847238][T20039] do_syscall_64+0x38/0xb0 [ 1749.847256][T20039] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1749.847277][T20039] RIP: 0033:0x7f394be7cae9 [ 1749.847292][T20039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.847312][T20039] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1749.847332][T20039] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1749.847345][T20039] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1749.847365][T20039] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.847377][T20039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.847389][T20039] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1749.847407][T20039] [ 1749.854446][T20034] input: syz0 as /devices/virtual/input/input12624 [ 1749.870514][T20037] input: syz0 as /devices/virtual/input/input12625 [ 1750.017211][T20052] FAULT_INJECTION: forcing a failure. [ 1750.017211][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.098419][T20052] CPU: 0 PID: 20052 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1750.108529][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1750.118586][T20052] Call Trace: [ 1750.121870][T20052] [ 1750.124799][T20052] dump_stack_lvl+0x125/0x1b0 [ 1750.129458][T20052] should_fail_ex+0x496/0x5b0 [ 1750.134127][T20052] should_failslab+0x9/0x20 [ 1750.138618][T20052] __kmem_cache_alloc_node+0x2fd/0x350 [ 1750.144150][T20052] ? kstrdup_const+0x5f/0x70 [ 1750.148723][T20052] ? kstrdup_const+0x5f/0x70 [ 1750.153297][T20052] __kmalloc_node_track_caller+0x50/0x100 [ 1750.158999][T20052] kstrdup+0x3c/0x70 [ 1750.162877][T20052] kstrdup_const+0x5f/0x70 [ 1750.167315][T20052] __kernfs_new_node+0x9c/0x8a0 [ 1750.172197][T20052] ? kernfs_path_from_node+0x60/0x60 [ 1750.177460][T20052] ? stack_trace_save+0x96/0xd0 [ 1750.182292][T20052] ? rcu_is_watching+0x12/0xb0 [ 1750.187118][T20052] ? lock_acquire+0x464/0x510 [ 1750.191777][T20052] ? lock_sync+0x190/0x190 [ 1750.196180][T20052] kernfs_create_dir_ns+0x9a/0x210 [ 1750.201302][T20052] sysfs_create_dir_ns+0x13b/0x2a0 [ 1750.206407][T20052] ? sysfs_create_mount_point+0xb0/0xb0 [ 1750.211979][T20052] ? spin_bug+0x1d0/0x1d0 [ 1750.216314][T20052] ? get_device_parent+0x10a/0x4e0 [ 1750.221410][T20052] ? class_dir_child_ns_type+0xd/0x60 [ 1750.226855][T20052] kobject_add_internal+0x2c8/0x960 [ 1750.232035][T20052] kobject_add+0x16f/0x240 [ 1750.236456][T20052] ? kset_create_and_add+0x190/0x190 [ 1750.241724][T20052] ? do_raw_spin_unlock+0x173/0x230 [ 1750.246922][T20052] ? kobject_put+0xbe/0x440 [ 1750.251406][T20052] device_add+0x290/0x1ac0 [ 1750.255803][T20052] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1750.262636][T20052] ? kasan_set_track+0x25/0x30 [ 1750.267391][T20052] ? rcu_is_watching+0x12/0xb0 [ 1750.272134][T20052] input_register_device+0x7b6/0x1130 [ 1750.277511][T20052] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1750.283473][T20052] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1750.289172][T20052] ? reacquire_held_locks+0x4b0/0x4b0 [ 1750.294611][T20052] ? bit_wait_timeout+0x160/0x160 [ 1750.299618][T20052] ? __fget_files+0x279/0x410 [ 1750.304277][T20052] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1750.309213][T20052] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1750.315352][T20052] __x64_sys_ioctl+0x18f/0x210 [ 1750.320096][T20052] do_syscall_64+0x38/0xb0 [ 1750.324493][T20052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1750.330367][T20052] RIP: 0033:0x7f394be7cae9 [ 1750.334759][T20052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1750.354777][T20052] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.363173][T20052] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1750.371124][T20052] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1750.379083][T20052] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.387156][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:31:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 3) 00:31:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) [ 1750.395215][T20052] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1750.403177][T20052] [ 1750.430809][T20052] kobject: kobject_add_internal failed for input12631 (error: -12 parent: input) [ 1750.433319][T20055] FAULT_INJECTION: forcing a failure. [ 1750.433319][T20055] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.460161][T20055] CPU: 1 PID: 20055 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1750.470244][T20055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1750.480313][T20055] Call Trace: [ 1750.483640][T20055] [ 1750.486578][T20055] dump_stack_lvl+0x125/0x1b0 [ 1750.491279][T20055] should_fail_ex+0x496/0x5b0 [ 1750.495983][T20055] should_failslab+0x9/0x20 00:31:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) r2 = request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)='*\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r1) (async) request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r1) (async) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)='*\x00') (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) 00:31:06 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 6) 00:31:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5504) 00:31:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4) 00:31:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) [ 1750.500504][T20055] __kmem_cache_alloc_node+0x2fd/0x350 [ 1750.505982][T20055] ? input_register_device+0x685/0x1130 [ 1750.511544][T20055] ? input_register_device+0x685/0x1130 [ 1750.517114][T20055] __kmalloc+0x4f/0x100 [ 1750.521273][T20055] input_register_device+0x685/0x1130 [ 1750.526936][T20055] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1750.529306][T20064] FAULT_INJECTION: forcing a failure. [ 1750.529306][T20064] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.532925][T20055] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1750.532958][T20055] ? reacquire_held_locks+0x4b0/0x4b0 [ 1750.556768][T20055] ? bit_wait_timeout+0x160/0x160 [ 1750.561816][T20055] ? __fget_files+0x279/0x410 [ 1750.566504][T20055] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1750.571445][T20055] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1750.577611][T20055] __x64_sys_ioctl+0x18f/0x210 [ 1750.582371][T20055] do_syscall_64+0x38/0xb0 [ 1750.586790][T20055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1750.592684][T20055] RIP: 0033:0x7f4a3f07cae9 [ 1750.597090][T20055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1750.610527][T20067] FAULT_INJECTION: forcing a failure. [ 1750.610527][T20067] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.616771][T20055] RSP: 002b:00007f4a3fe2d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.616794][T20055] RAX: ffffffffffffffda RBX: 00007f4a3f19bf80 RCX: 00007f4a3f07cae9 [ 1750.616808][T20055] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1750.616822][T20055] RBP: 00007f4a3fe2d120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.616834][T20055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.669916][T20055] R13: 000000000000000b R14: 00007f4a3f19bf80 R15: 00007fff2aba3128 [ 1750.677895][T20055] [ 1750.680908][T20067] CPU: 0 PID: 20067 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1750.690992][T20067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1750.701044][T20067] Call Trace: [ 1750.704318][T20067] [ 1750.707249][T20067] dump_stack_lvl+0x125/0x1b0 [ 1750.711932][T20067] should_fail_ex+0x496/0x5b0 [ 1750.716643][T20067] should_failslab+0x9/0x20 [ 1750.721158][T20067] kmem_cache_alloc+0x33a/0x3b0 [ 1750.726023][T20067] ? kstrdup+0x5c/0x70 [ 1750.730119][T20067] __kernfs_new_node+0xd3/0x8a0 [ 1750.734965][T20067] ? kernfs_path_from_node+0x60/0x60 [ 1750.740372][T20067] ? stack_trace_save+0x96/0xd0 [ 1750.745221][T20067] ? rcu_is_watching+0x12/0xb0 [ 1750.749977][T20067] ? lock_acquire+0x464/0x510 [ 1750.754647][T20067] ? lock_sync+0x190/0x190 [ 1750.759059][T20067] kernfs_create_dir_ns+0x9a/0x210 [ 1750.764169][T20067] sysfs_create_dir_ns+0x13b/0x2a0 [ 1750.769276][T20067] ? sysfs_create_mount_point+0xb0/0xb0 [ 1750.774815][T20067] ? spin_bug+0x1d0/0x1d0 [ 1750.779142][T20067] ? get_device_parent+0x10a/0x4e0 [ 1750.784253][T20067] ? class_dir_child_ns_type+0xd/0x60 [ 1750.789620][T20067] kobject_add_internal+0x2c8/0x960 [ 1750.794811][T20067] kobject_add+0x16f/0x240 [ 1750.799222][T20067] ? kset_create_and_add+0x190/0x190 [ 1750.804584][T20067] ? do_raw_spin_unlock+0x173/0x230 [ 1750.809775][T20067] ? kobject_put+0xbe/0x440 [ 1750.814275][T20067] device_add+0x290/0x1ac0 [ 1750.818680][T20067] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1750.825523][T20067] ? kasan_set_track+0x25/0x30 [ 1750.830317][T20067] ? rcu_is_watching+0x12/0xb0 [ 1750.835106][T20067] input_register_device+0x7b6/0x1130 [ 1750.840483][T20067] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1750.846464][T20067] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1750.852177][T20067] ? reacquire_held_locks+0x4b0/0x4b0 [ 1750.857547][T20067] ? bit_wait_timeout+0x160/0x160 [ 1750.862563][T20067] ? __fget_files+0x279/0x410 [ 1750.867239][T20067] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1750.872294][T20067] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1750.878444][T20067] __x64_sys_ioctl+0x18f/0x210 [ 1750.883201][T20067] do_syscall_64+0x38/0xb0 [ 1750.887605][T20067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1750.893509][T20067] RIP: 0033:0x7f394be7cae9 [ 1750.897915][T20067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1750.917530][T20067] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.925937][T20067] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1750.933898][T20067] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1750.941862][T20067] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.949822][T20067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.957780][T20067] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1750.965750][T20067] [ 1750.980420][T20064] CPU: 0 PID: 20064 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1750.990512][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1751.000582][T20064] Call Trace: [ 1751.003427][T20076] FAULT_INJECTION: forcing a failure. [ 1751.003427][T20076] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.003855][T20064] [ 1751.019457][T20064] dump_stack_lvl+0x125/0x1b0 [ 1751.024140][T20064] should_fail_ex+0x496/0x5b0 [ 1751.028831][T20064] should_failslab+0x9/0x20 [ 1751.033332][T20064] __kmem_cache_alloc_node+0x2fd/0x350 [ 1751.038810][T20064] ? device_add+0xd18/0x1ac0 [ 1751.043400][T20064] kmalloc_trace+0x25/0xe0 [ 1751.047824][T20064] device_add+0xd18/0x1ac0 [ 1751.052238][T20064] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1751.059106][T20064] ? kasan_set_track+0x25/0x30 [ 1751.064000][T20064] ? rcu_is_watching+0x12/0xb0 [ 1751.068782][T20064] input_register_device+0x7b6/0x1130 [ 1751.074164][T20064] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1751.080145][T20064] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1751.085862][T20064] ? reacquire_held_locks+0x4b0/0x4b0 [ 1751.091241][T20064] ? bit_wait_timeout+0x160/0x160 [ 1751.096264][T20064] ? __fget_files+0x279/0x410 [ 1751.100936][T20064] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1751.105868][T20064] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1751.112016][T20064] __x64_sys_ioctl+0x18f/0x210 [ 1751.116777][T20064] do_syscall_64+0x38/0xb0 [ 1751.121186][T20064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1751.127069][T20064] RIP: 0033:0x7f426867cae9 [ 1751.131471][T20064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 00:31:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 4) 00:31:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5509) [ 1751.151068][T20064] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.159486][T20064] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1751.167451][T20064] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1751.175449][T20064] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1751.183422][T20064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.191391][T20064] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1751.199368][T20064] [ 1751.207192][T20076] CPU: 1 PID: 20076 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1751.217284][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1751.221700][T20067] kobject: kobject_add_internal failed for input12636 (error: -12 parent: input) [ 1751.227327][T20076] Call Trace: [ 1751.227335][T20076] [ 1751.227342][T20076] dump_stack_lvl+0x125/0x1b0 [ 1751.227369][T20076] should_fail_ex+0x496/0x5b0 [ 1751.251969][T20076] should_failslab+0x9/0x20 [ 1751.256471][T20076] __kmem_cache_alloc_node+0x2fd/0x350 [ 1751.261925][T20076] ? device_add+0xd18/0x1ac0 [ 1751.266507][T20076] kmalloc_trace+0x25/0xe0 [ 1751.271005][T20076] device_add+0xd18/0x1ac0 [ 1751.275415][T20076] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1751.282255][T20076] ? kasan_set_track+0x25/0x30 [ 1751.287015][T20076] ? rcu_is_watching+0x12/0xb0 [ 1751.291766][T20076] input_register_device+0x7b6/0x1130 [ 1751.297134][T20076] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1751.303106][T20076] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1751.308814][T20076] ? reacquire_held_locks+0x4b0/0x4b0 [ 1751.314184][T20076] ? bit_wait_timeout+0x160/0x160 [ 1751.319200][T20076] ? __fget_files+0x279/0x410 [ 1751.323877][T20076] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1751.328804][T20076] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1751.334951][T20076] __x64_sys_ioctl+0x18f/0x210 [ 1751.339702][T20076] do_syscall_64+0x38/0xb0 [ 1751.344121][T20076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1751.350004][T20076] RIP: 0033:0x7f4a3f07cae9 [ 1751.354429][T20076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1751.374111][T20076] RSP: 002b:00007f4a3fe2d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.382509][T20076] RAX: ffffffffffffffda RBX: 00007f4a3f19bf80 RCX: 00007f4a3f07cae9 [ 1751.390466][T20076] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1751.398423][T20076] RBP: 00007f4a3fe2d120 R08: 0000000000000000 R09: 0000000000000000 00:31:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 5) 00:31:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) 00:31:07 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4000) [ 1751.406379][T20076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.414354][T20076] R13: 000000000000000b R14: 00007f4a3f19bf80 R15: 00007fff2aba3128 [ 1751.422338][T20076] 00:31:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) 00:31:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4000) 00:31:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 7) 00:31:07 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 5) [ 1751.514041][T20088] FAULT_INJECTION: forcing a failure. [ 1751.514041][T20088] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.539422][T20088] CPU: 1 PID: 20088 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1751.540640][T20094] FAULT_INJECTION: forcing a failure. [ 1751.540640][T20094] name failslab, interval 1, probability 0, space 0, times 0 00:31:07 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) [ 1751.549523][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1751.549538][T20088] Call Trace: [ 1751.549545][T20088] [ 1751.549552][T20088] dump_stack_lvl+0x125/0x1b0 [ 1751.549576][T20088] should_fail_ex+0x496/0x5b0 [ 1751.549605][T20088] should_failslab+0x9/0x20 [ 1751.549624][T20088] __kmem_cache_alloc_node+0x2fd/0x350 [ 1751.549651][T20088] ? kstrdup_const+0x5f/0x70 [ 1751.549677][T20088] ? kstrdup_const+0x5f/0x70 [ 1751.549701][T20088] __kmalloc_node_track_caller+0x50/0x100 00:31:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) [ 1751.549721][T20088] kstrdup+0x3c/0x70 [ 1751.549744][T20088] kstrdup_const+0x5f/0x70 [ 1751.549769][T20088] __kernfs_new_node+0x9c/0x8a0 [ 1751.549789][T20088] ? kernfs_path_from_node+0x60/0x60 [ 1751.549808][T20088] ? stack_trace_save+0x96/0xd0 [ 1751.549835][T20088] ? rcu_is_watching+0x12/0xb0 [ 1751.549866][T20088] ? lock_acquire+0x464/0x510 [ 1751.549891][T20088] ? lock_sync+0x190/0x190 [ 1751.549915][T20088] kernfs_create_dir_ns+0x9a/0x210 [ 1751.549936][T20088] sysfs_create_dir_ns+0x13b/0x2a0 [ 1751.549959][T20088] ? sysfs_create_mount_point+0xb0/0xb0 [ 1751.549981][T20088] ? spin_bug+0x1d0/0x1d0 [ 1751.669912][T20088] ? get_device_parent+0x10a/0x4e0 [ 1751.675116][T20088] ? class_dir_child_ns_type+0xd/0x60 [ 1751.680480][T20088] kobject_add_internal+0x2c8/0x960 [ 1751.685677][T20088] kobject_add+0x16f/0x240 [ 1751.690123][T20088] ? kset_create_and_add+0x190/0x190 [ 1751.695407][T20088] ? do_raw_spin_unlock+0x173/0x230 [ 1751.700607][T20088] ? kobject_put+0xbe/0x440 [ 1751.705103][T20088] device_add+0x290/0x1ac0 [ 1751.709521][T20088] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1751.716363][T20088] ? kasan_set_track+0x25/0x30 [ 1751.721126][T20088] ? rcu_is_watching+0x12/0xb0 [ 1751.725882][T20088] input_register_device+0x7b6/0x1130 [ 1751.731259][T20088] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1751.737238][T20088] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1751.742951][T20088] ? reacquire_held_locks+0x4b0/0x4b0 [ 1751.748315][T20088] ? bit_wait_timeout+0x160/0x160 [ 1751.753332][T20088] ? __fget_files+0x279/0x410 [ 1751.758001][T20088] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1751.762939][T20088] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1751.769085][T20088] __x64_sys_ioctl+0x18f/0x210 [ 1751.773841][T20088] do_syscall_64+0x38/0xb0 [ 1751.778248][T20088] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1751.784133][T20088] RIP: 0033:0x7f426867cae9 [ 1751.788535][T20088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1751.808151][T20088] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.816561][T20088] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1751.824523][T20088] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1751.832480][T20088] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1751.840439][T20088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1751.848417][T20088] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1751.856423][T20088] 00:31:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) 00:31:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 6) 00:31:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1751.860804][T20094] CPU: 1 PID: 20094 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1751.862444][T20088] kobject: kobject_add_internal failed for input12641 (error: -12 parent: input) [ 1751.870873][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1751.870886][T20094] Call Trace: [ 1751.870894][T20094] [ 1751.870901][T20094] dump_stack_lvl+0x125/0x1b0 [ 1751.900906][T20094] should_fail_ex+0x496/0x5b0 [ 1751.905608][T20094] should_failslab+0x9/0x20 [ 1751.910142][T20094] kmem_cache_alloc+0x33a/0x3b0 [ 1751.915011][T20094] ? reacquire_held_locks+0x4b0/0x4b0 [ 1751.920404][T20094] __kernfs_new_node+0xd3/0x8a0 [ 1751.925275][T20094] ? kernfs_path_from_node+0x60/0x60 [ 1751.930574][T20094] ? up_write+0x1b3/0x510 [ 1751.931164][T20107] FAULT_INJECTION: forcing a failure. [ 1751.931164][T20107] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.934916][T20094] ? kernfs_add_one+0x17f/0x510 [ 1751.934944][T20094] ? kernfs_create_dir_ns+0x195/0x210 [ 1751.957710][T20094] kernfs_new_node+0x94/0x110 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5563) [ 1751.962392][T20094] __kernfs_create_file+0x53/0x340 [ 1751.967518][T20094] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1751.972896][T20094] sysfs_create_file_ns+0x13e/0x1d0 [ 1751.978117][T20094] ? sysfs_add_file_mode_ns+0x3b0/0x3b0 [ 1751.983676][T20094] ? down_read+0x13e/0x470 [ 1751.988102][T20094] ? _down_write_nest_lock+0x200/0x200 [ 1751.993573][T20094] ? kobject_put+0xbe/0x440 [ 1751.998088][T20094] device_create_file+0xee/0x1d0 [ 1752.003089][T20094] device_add+0x2e2/0x1ac0 [ 1752.007522][T20094] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1752.014365][T20094] ? kasan_set_track+0x25/0x30 [ 1752.019127][T20094] ? rcu_is_watching+0x12/0xb0 [ 1752.023887][T20094] input_register_device+0x7b6/0x1130 [ 1752.029258][T20094] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1752.035242][T20094] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1752.040954][T20094] ? reacquire_held_locks+0x4b0/0x4b0 [ 1752.046321][T20094] ? bit_wait_timeout+0x160/0x160 [ 1752.051341][T20094] ? __fget_files+0x279/0x410 [ 1752.056037][T20094] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1752.060969][T20094] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1752.067117][T20094] __x64_sys_ioctl+0x18f/0x210 [ 1752.071878][T20094] do_syscall_64+0x38/0xb0 [ 1752.076310][T20094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1752.082220][T20094] RIP: 0033:0x7f394be7cae9 [ 1752.086626][T20094] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1752.106228][T20094] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.114633][T20094] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1752.122598][T20094] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1752.130560][T20094] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1752.138606][T20094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.146565][T20094] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1752.154533][T20094] 00:31:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4000) 00:31:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 8) 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) [ 1752.183622][T20116] input: syz0 as /devices/virtual/input/input12648 [ 1752.199246][T20107] CPU: 1 PID: 20107 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1752.209328][T20107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1752.219479][T20107] Call Trace: [ 1752.222752][T20107] [ 1752.225680][T20107] dump_stack_lvl+0x125/0x1b0 [ 1752.230372][T20107] should_fail_ex+0x496/0x5b0 [ 1752.235073][T20107] should_failslab+0x9/0x20 [ 1752.239582][T20107] kmem_cache_alloc+0x33a/0x3b0 [ 1752.243495][T20124] FAULT_INJECTION: forcing a failure. [ 1752.243495][T20124] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.244431][T20107] ? kstrdup+0x5c/0x70 [ 1752.244464][T20107] __kernfs_new_node+0xd3/0x8a0 [ 1752.265905][T20107] ? kernfs_path_from_node+0x60/0x60 [ 1752.271194][T20107] ? stack_trace_save+0x96/0xd0 [ 1752.276050][T20107] ? rcu_is_watching+0x12/0xb0 [ 1752.280811][T20107] ? lock_acquire+0x464/0x510 [ 1752.285576][T20107] ? lock_sync+0x190/0x190 [ 1752.290000][T20107] kernfs_create_dir_ns+0x9a/0x210 [ 1752.295115][T20107] sysfs_create_dir_ns+0x13b/0x2a0 [ 1752.300241][T20107] ? sysfs_create_mount_point+0xb0/0xb0 [ 1752.305782][T20107] ? spin_bug+0x1d0/0x1d0 [ 1752.310201][T20107] ? get_device_parent+0x10a/0x4e0 [ 1752.315309][T20107] ? class_dir_child_ns_type+0xd/0x60 [ 1752.320674][T20107] kobject_add_internal+0x2c8/0x960 [ 1752.325863][T20107] kobject_add+0x16f/0x240 [ 1752.330272][T20107] ? kset_create_and_add+0x190/0x190 [ 1752.335546][T20107] ? do_raw_spin_unlock+0x173/0x230 [ 1752.340740][T20107] ? kobject_put+0xbe/0x440 [ 1752.345235][T20107] device_add+0x290/0x1ac0 [ 1752.349641][T20107] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1752.356483][T20107] ? kasan_set_track+0x25/0x30 [ 1752.361241][T20107] ? rcu_is_watching+0x12/0xb0 [ 1752.366011][T20107] input_register_device+0x7b6/0x1130 [ 1752.371411][T20107] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1752.377383][T20107] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1752.383097][T20107] ? reacquire_held_locks+0x4b0/0x4b0 [ 1752.388468][T20107] ? bit_wait_timeout+0x160/0x160 [ 1752.393483][T20107] ? __fget_files+0x279/0x410 [ 1752.398154][T20107] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1752.403084][T20107] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1752.409237][T20107] __x64_sys_ioctl+0x18f/0x210 [ 1752.414025][T20107] do_syscall_64+0x38/0xb0 [ 1752.418434][T20107] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1752.424324][T20107] RIP: 0033:0x7f426867cae9 [ 1752.428731][T20107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1752.448334][T20107] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.456745][T20107] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1752.464707][T20107] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1752.472667][T20107] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1752.480628][T20107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.488587][T20107] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1752.496555][T20107] [ 1752.504459][T20107] kobject: kobject_add_internal failed for input12644 (error: -12 parent: input) [ 1752.515597][T20124] CPU: 1 PID: 20124 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 00:31:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) 00:31:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 7) [ 1752.525688][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1752.535750][T20124] Call Trace: [ 1752.539040][T20124] [ 1752.541972][T20124] dump_stack_lvl+0x125/0x1b0 [ 1752.546665][T20124] should_fail_ex+0x496/0x5b0 [ 1752.551370][T20124] should_failslab+0x9/0x20 [ 1752.555909][T20124] kmem_cache_alloc+0x33a/0x3b0 [ 1752.560795][T20124] __kernfs_new_node+0xd3/0x8a0 [ 1752.565671][T20124] ? kernfs_add_one+0x17f/0x510 [ 1752.570525][T20124] ? kernfs_path_from_node+0x60/0x60 [ 1752.575837][T20124] ? rcu_is_watching+0x12/0xb0 [ 1752.580625][T20124] ? rcu_is_watching+0x12/0xb0 00:31:08 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) [ 1752.585482][T20124] ? lock_release+0x4bf/0x680 [ 1752.590180][T20124] ? sysfs_do_create_link_sd+0x82/0x140 [ 1752.595739][T20124] kernfs_new_node+0x94/0x110 [ 1752.600419][T20124] kernfs_create_link+0xcc/0x230 [ 1752.605368][T20124] sysfs_do_create_link_sd+0x90/0x140 [ 1752.610747][T20124] sysfs_create_link+0x61/0xc0 [ 1752.615947][T20124] device_add+0x546/0x1ac0 [ 1752.620364][T20124] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1752.627210][T20124] ? kasan_set_track+0x25/0x30 [ 1752.631979][T20124] ? rcu_is_watching+0x12/0xb0 [ 1752.636738][T20124] input_register_device+0x7b6/0x1130 [ 1752.642109][T20124] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1752.648094][T20124] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1752.653808][T20124] ? reacquire_held_locks+0x4b0/0x4b0 [ 1752.659170][T20124] ? bit_wait_timeout+0x160/0x160 [ 1752.664185][T20124] ? __fget_files+0x279/0x410 [ 1752.668855][T20124] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1752.673783][T20124] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1752.679931][T20124] __x64_sys_ioctl+0x18f/0x210 [ 1752.684682][T20124] do_syscall_64+0x38/0xb0 [ 1752.689085][T20124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1752.694970][T20124] RIP: 0033:0x7f394be7cae9 [ 1752.699371][T20124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1752.718976][T20124] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.727390][T20124] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 00:31:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1752.735353][T20124] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1752.743313][T20124] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1752.751283][T20124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.759244][T20124] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1752.767210][T20124] 00:31:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2) 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 00:31:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x10) [ 1752.817423][T20133] FAULT_INJECTION: forcing a failure. [ 1752.817423][T20133] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.839556][T20133] CPU: 1 PID: 20133 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1752.849637][T20133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1752.859691][T20133] Call Trace: [ 1752.862975][T20133] 00:31:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x541b) 00:31:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448dd) [ 1752.865912][T20133] dump_stack_lvl+0x125/0x1b0 [ 1752.870595][T20133] should_fail_ex+0x496/0x5b0 [ 1752.875285][T20133] should_failslab+0x9/0x20 [ 1752.879787][T20133] kmem_cache_alloc+0x33a/0x3b0 [ 1752.884655][T20133] ? reacquire_held_locks+0x4b0/0x4b0 [ 1752.890065][T20133] __kernfs_new_node+0xd3/0x8a0 [ 1752.894924][T20133] ? kernfs_path_from_node+0x60/0x60 [ 1752.900217][T20133] ? up_write+0x1b3/0x510 [ 1752.904550][T20133] ? kernfs_add_one+0x17f/0x510 [ 1752.909421][T20133] ? kernfs_create_dir_ns+0x195/0x210 [ 1752.914799][T20133] kernfs_new_node+0x94/0x110 [ 1752.919488][T20133] __kernfs_create_file+0x53/0x340 [ 1752.924616][T20133] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1752.930002][T20133] sysfs_create_file_ns+0x13e/0x1d0 [ 1752.935207][T20133] ? sysfs_add_file_mode_ns+0x3b0/0x3b0 [ 1752.940751][T20133] ? down_read+0x13e/0x470 [ 1752.945151][T20133] ? _down_write_nest_lock+0x200/0x200 [ 1752.950591][T20133] ? kobject_put+0xbe/0x440 [ 1752.955077][T20133] device_create_file+0xee/0x1d0 [ 1752.960006][T20133] device_add+0x2e2/0x1ac0 [ 1752.964420][T20133] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1752.971250][T20133] ? kasan_set_track+0x25/0x30 [ 1752.976016][T20133] ? rcu_is_watching+0x12/0xb0 [ 1752.980761][T20133] input_register_device+0x7b6/0x1130 [ 1752.986297][T20133] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1752.992262][T20133] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1752.997969][T20133] ? reacquire_held_locks+0x4b0/0x4b0 [ 1753.003332][T20133] ? bit_wait_timeout+0x160/0x160 [ 1753.008359][T20133] ? __fget_files+0x279/0x410 [ 1753.013050][T20133] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1753.017984][T20133] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1753.024146][T20133] __x64_sys_ioctl+0x18f/0x210 [ 1753.028898][T20133] do_syscall_64+0x38/0xb0 [ 1753.033298][T20133] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1753.039174][T20133] RIP: 0033:0x7f426867cae9 [ 1753.043570][T20133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 00:31:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 9) 00:31:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 00:31:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5421) [ 1753.063246][T20133] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.071723][T20133] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1753.079677][T20133] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1753.087626][T20133] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1753.095582][T20133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.103534][T20133] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1753.111504][T20133] 00:31:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 8) 00:31:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5450) [ 1753.151893][T20155] FAULT_INJECTION: forcing a failure. [ 1753.151893][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.164875][T20155] CPU: 1 PID: 20155 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1753.174946][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1753.185012][T20155] Call Trace: [ 1753.188288][T20155] [ 1753.191214][T20155] dump_stack_lvl+0x125/0x1b0 [ 1753.195898][T20155] should_fail_ex+0x496/0x5b0 [ 1753.200596][T20155] should_failslab+0x9/0x20 [ 1753.205107][T20155] __kmem_cache_alloc_node+0x2fd/0x350 [ 1753.210580][T20155] ? kstrdup_const+0x5f/0x70 [ 1753.215186][T20155] ? kstrdup_const+0x5f/0x70 [ 1753.219786][T20155] __kmalloc_node_track_caller+0x50/0x100 [ 1753.225526][T20155] kstrdup+0x3c/0x70 [ 1753.229432][T20155] kstrdup_const+0x5f/0x70 [ 1753.233848][T20155] __kernfs_new_node+0x9c/0x8a0 [ 1753.238692][T20155] ? kernfs_add_one+0x3ca/0x510 [ 1753.243528][T20155] ? kernfs_path_from_node+0x60/0x60 [ 1753.248801][T20155] ? down_write+0x14f/0x200 [ 1753.253297][T20155] ? rcu_is_watching+0x12/0xb0 [ 1753.258045][T20155] ? rcu_is_watching+0x12/0xb0 [ 1753.262795][T20155] ? lock_release+0x4bf/0x680 [ 1753.267463][T20155] ? sysfs_do_create_link_sd+0x82/0x140 [ 1753.273001][T20155] kernfs_new_node+0x94/0x110 [ 1753.277672][T20155] kernfs_create_link+0xcc/0x230 [ 1753.282597][T20155] sysfs_do_create_link_sd+0x90/0x140 [ 1753.287962][T20155] sysfs_create_link+0x61/0xc0 [ 1753.292717][T20155] device_add+0x669/0x1ac0 [ 1753.297122][T20155] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1753.303959][T20155] ? kasan_set_track+0x25/0x30 [ 1753.308720][T20155] ? rcu_is_watching+0x12/0xb0 [ 1753.313471][T20155] input_register_device+0x7b6/0x1130 [ 1753.318842][T20155] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1753.324821][T20155] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1753.330544][T20155] ? reacquire_held_locks+0x4b0/0x4b0 [ 1753.335918][T20155] ? bit_wait_timeout+0x160/0x160 [ 1753.340935][T20155] ? __fget_files+0x279/0x410 [ 1753.345605][T20155] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1753.350562][T20155] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1753.356708][T20155] __x64_sys_ioctl+0x18f/0x210 [ 1753.361461][T20155] do_syscall_64+0x38/0xb0 [ 1753.365865][T20155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1753.371745][T20155] RIP: 0033:0x7f394be7cae9 [ 1753.376144][T20155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1753.395739][T20155] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.404138][T20155] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1753.412092][T20155] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1753.420046][T20155] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1753.428007][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.435968][T20155] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1753.443933][T20155] [ 1753.453844][T20166] FAULT_INJECTION: forcing a failure. [ 1753.453844][T20166] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.466662][T20166] CPU: 1 PID: 20166 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1753.476719][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1753.486758][T20166] Call Trace: [ 1753.490059][T20166] [ 1753.492976][T20166] dump_stack_lvl+0x125/0x1b0 [ 1753.497645][T20166] should_fail_ex+0x496/0x5b0 [ 1753.502335][T20166] should_failslab+0x9/0x20 [ 1753.506827][T20166] kmem_cache_alloc+0x33a/0x3b0 [ 1753.511677][T20166] __kernfs_new_node+0xd3/0x8a0 [ 1753.516514][T20166] ? kernfs_add_one+0x17f/0x510 [ 1753.521358][T20166] ? kernfs_path_from_node+0x60/0x60 [ 1753.526634][T20166] ? rcu_is_watching+0x12/0xb0 [ 1753.531389][T20166] ? rcu_is_watching+0x12/0xb0 [ 1753.536224][T20166] ? lock_release+0x4bf/0x680 [ 1753.540888][T20166] ? sysfs_do_create_link_sd+0x82/0x140 [ 1753.546426][T20166] kernfs_new_node+0x94/0x110 [ 1753.551089][T20166] kernfs_create_link+0xcc/0x230 [ 1753.556016][T20166] sysfs_do_create_link_sd+0x90/0x140 [ 1753.561385][T20166] sysfs_create_link+0x61/0xc0 [ 1753.566154][T20166] device_add+0x546/0x1ac0 [ 1753.570562][T20166] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1753.577401][T20166] ? kasan_set_track+0x25/0x30 [ 1753.582160][T20166] ? rcu_is_watching+0x12/0xb0 [ 1753.586911][T20166] input_register_device+0x7b6/0x1130 [ 1753.592279][T20166] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1753.598340][T20166] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1753.604058][T20166] ? reacquire_held_locks+0x4b0/0x4b0 [ 1753.609421][T20166] ? bit_wait_timeout+0x160/0x160 [ 1753.614437][T20166] ? __fget_files+0x279/0x410 [ 1753.619104][T20166] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1753.624030][T20166] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1753.630173][T20166] __x64_sys_ioctl+0x18f/0x210 [ 1753.634926][T20166] do_syscall_64+0x38/0xb0 [ 1753.639329][T20166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1753.645216][T20166] RIP: 0033:0x7f426867cae9 [ 1753.649615][T20166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1753.669209][T20166] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.677636][T20166] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1753.685592][T20166] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1753.693548][T20166] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 00:31:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 00:31:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 10) 00:31:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) [ 1753.701506][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.709468][T20166] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1753.717433][T20166] 00:31:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) 00:31:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) 00:31:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 9) 00:31:09 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 00:31:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xffffffffffffff31, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x6, r1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socketpair(0x25, 0x3, 0xfe, &(0x7f0000000040)={0xffffffffffffffff}) getpid() ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000001c0)={@none, 0x1f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) [ 1753.823687][T20170] FAULT_INJECTION: forcing a failure. [ 1753.823687][T20170] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.853193][T20170] CPU: 1 PID: 20170 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1753.863280][T20170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 00:31:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) [ 1753.873343][T20170] Call Trace: [ 1753.876630][T20170] [ 1753.879560][T20170] dump_stack_lvl+0x125/0x1b0 [ 1753.884241][T20170] should_fail_ex+0x496/0x5b0 [ 1753.888932][T20170] should_failslab+0x9/0x20 [ 1753.893434][T20170] kmem_cache_alloc+0x33a/0x3b0 [ 1753.898298][T20170] ? kstrdup+0x5c/0x70 [ 1753.902418][T20170] __kernfs_new_node+0xd3/0x8a0 [ 1753.903749][T20184] FAULT_INJECTION: forcing a failure. [ 1753.903749][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.907261][T20170] ? kernfs_add_one+0x3ca/0x510 [ 1753.907285][T20170] ? kernfs_path_from_node+0x60/0x60 [ 1753.907304][T20170] ? down_write+0x14f/0x200 [ 1753.934460][T20170] ? rcu_is_watching+0x12/0xb0 [ 1753.939246][T20170] ? rcu_is_watching+0x12/0xb0 [ 1753.944008][T20170] ? lock_release+0x4bf/0x680 [ 1753.948688][T20170] ? sysfs_do_create_link_sd+0x82/0x140 [ 1753.954238][T20170] kernfs_new_node+0x94/0x110 [ 1753.958912][T20170] kernfs_create_link+0xcc/0x230 [ 1753.963848][T20170] sysfs_do_create_link_sd+0x90/0x140 [ 1753.969221][T20170] sysfs_create_link+0x61/0xc0 [ 1753.973981][T20170] device_add+0x669/0x1ac0 [ 1753.978393][T20170] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1753.985237][T20170] ? kasan_set_track+0x25/0x30 [ 1753.990004][T20170] ? rcu_is_watching+0x12/0xb0 [ 1753.994762][T20170] input_register_device+0x7b6/0x1130 [ 1754.000146][T20170] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1754.006127][T20170] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1754.011854][T20170] ? reacquire_held_locks+0x4b0/0x4b0 [ 1754.017232][T20170] ? bit_wait_timeout+0x160/0x160 [ 1754.022297][T20170] ? __fget_files+0x279/0x410 [ 1754.026995][T20170] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1754.031957][T20170] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1754.038202][T20170] __x64_sys_ioctl+0x18f/0x210 [ 1754.042964][T20170] do_syscall_64+0x38/0xb0 [ 1754.047395][T20170] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1754.053301][T20170] RIP: 0033:0x7f394be7cae9 [ 1754.057712][T20170] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.077325][T20170] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.085736][T20170] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1754.093696][T20170] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1754.101662][T20170] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.109627][T20170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.117595][T20170] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1754.125654][T20170] [ 1754.128662][T20184] CPU: 0 PID: 20184 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1754.138736][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1754.148791][T20184] Call Trace: [ 1754.152072][T20184] [ 1754.155003][T20184] dump_stack_lvl+0x125/0x1b0 [ 1754.159707][T20184] should_fail_ex+0x496/0x5b0 [ 1754.164406][T20184] should_failslab+0x9/0x20 [ 1754.168919][T20184] __kmem_cache_alloc_node+0x2fd/0x350 [ 1754.174384][T20184] ? kstrdup_const+0x5f/0x70 [ 1754.178995][T20184] ? kstrdup_const+0x5f/0x70 [ 1754.183589][T20184] __kmalloc_node_track_caller+0x50/0x100 [ 1754.189317][T20184] kstrdup+0x3c/0x70 [ 1754.193206][T20184] kstrdup_const+0x5f/0x70 [ 1754.197636][T20184] __kernfs_new_node+0x9c/0x8a0 [ 1754.202472][T20184] ? kernfs_add_one+0x3ca/0x510 [ 1754.207306][T20184] ? kernfs_path_from_node+0x60/0x60 [ 1754.212575][T20184] ? down_write+0x14f/0x200 [ 1754.217071][T20184] ? rcu_is_watching+0x12/0xb0 [ 1754.221819][T20184] ? rcu_is_watching+0x12/0xb0 [ 1754.226598][T20184] ? lock_release+0x4bf/0x680 [ 1754.231270][T20184] ? sysfs_do_create_link_sd+0x82/0x140 [ 1754.236808][T20184] kernfs_new_node+0x94/0x110 [ 1754.241475][T20184] kernfs_create_link+0xcc/0x230 [ 1754.246403][T20184] sysfs_do_create_link_sd+0x90/0x140 [ 1754.251778][T20184] sysfs_create_link+0x61/0xc0 [ 1754.256537][T20184] device_add+0x669/0x1ac0 [ 1754.260941][T20184] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1754.267780][T20184] ? kasan_set_track+0x25/0x30 [ 1754.272538][T20184] ? rcu_is_watching+0x12/0xb0 [ 1754.277289][T20184] input_register_device+0x7b6/0x1130 [ 1754.282659][T20184] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1754.288631][T20184] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1754.294341][T20184] ? reacquire_held_locks+0x4b0/0x4b0 [ 1754.299704][T20184] ? bit_wait_timeout+0x160/0x160 [ 1754.304717][T20184] ? __fget_files+0x279/0x410 [ 1754.309385][T20184] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1754.314315][T20184] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1754.320459][T20184] __x64_sys_ioctl+0x18f/0x210 [ 1754.325220][T20184] do_syscall_64+0x38/0xb0 [ 1754.329623][T20184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1754.335508][T20184] RIP: 0033:0x7f426867cae9 [ 1754.339906][T20184] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.359502][T20184] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.367906][T20184] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) 00:31:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 11) 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5504) 00:31:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) [ 1754.375870][T20184] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1754.383823][T20184] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.391784][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.399744][T20184] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1754.407709][T20184] 00:31:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xffffffffffffff31}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xffffffffffffff31, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x6, r1}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x6, r1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socketpair(0x25, 0x3, 0xfe, &(0x7f0000000040)={0xffffffffffffffff}) getpid() ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000001c0)={@none, 0x1f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) 00:31:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 10) 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) 00:31:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) [ 1754.491284][T20206] FAULT_INJECTION: forcing a failure. [ 1754.491284][T20206] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.519887][T20206] CPU: 0 PID: 20206 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1754.529967][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1754.540017][T20206] Call Trace: [ 1754.543286][T20206] [ 1754.546207][T20206] dump_stack_lvl+0x125/0x1b0 [ 1754.550911][T20206] should_fail_ex+0x496/0x5b0 [ 1754.555590][T20206] should_failslab+0x9/0x20 [ 1754.560081][T20206] kmem_cache_alloc+0x33a/0x3b0 [ 1754.564929][T20206] __kernfs_new_node+0xd3/0x8a0 [ 1754.569767][T20206] ? __fprop_add_percpu_max+0x1b0/0x1b0 [ 1754.575300][T20206] ? kernfs_path_from_node+0x60/0x60 [ 1754.580656][T20206] ? rcu_is_watching+0x12/0xb0 [ 1754.585407][T20206] ? rcu_is_watching+0x12/0xb0 [ 1754.590155][T20206] ? rcu_is_watching+0x12/0xb0 [ 1754.594899][T20206] ? lock_acquire+0x464/0x510 [ 1754.599567][T20206] ? rcu_is_watching+0x12/0xb0 [ 1754.604315][T20206] kernfs_new_node+0x94/0x110 [ 1754.608989][T20206] __kernfs_create_file+0x53/0x340 [ 1754.614089][T20206] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1754.619454][T20206] internal_create_group+0x31c/0xb40 [ 1754.624752][T20206] ? sysfs_remove_group+0x170/0x170 [ 1754.629949][T20206] ? kernfs_create_link+0x1b6/0x230 [ 1754.635137][T20206] internal_create_groups+0x9d/0x150 [ 1754.640414][T20206] device_add+0x772/0x1ac0 [ 1754.644817][T20206] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1754.651654][T20206] ? kasan_set_track+0x25/0x30 [ 1754.656419][T20206] ? rcu_is_watching+0x12/0xb0 [ 1754.661171][T20206] input_register_device+0x7b6/0x1130 [ 1754.666544][T20206] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1754.672520][T20206] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1754.678236][T20206] ? reacquire_held_locks+0x4b0/0x4b0 [ 1754.683605][T20206] ? bit_wait_timeout+0x160/0x160 [ 1754.688624][T20206] ? __fget_files+0x279/0x410 [ 1754.693292][T20206] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1754.698223][T20206] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1754.704375][T20206] __x64_sys_ioctl+0x18f/0x210 [ 1754.709127][T20206] do_syscall_64+0x38/0xb0 [ 1754.713529][T20206] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1754.719411][T20206] RIP: 0033:0x7f394be7cae9 [ 1754.723815][T20206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.743413][T20206] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.751813][T20206] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1754.759858][T20206] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1754.767825][T20206] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.775789][T20206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.783749][T20206] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 00:31:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) [ 1754.791800][T20206] [ 1754.801938][T20218] FAULT_INJECTION: forcing a failure. [ 1754.801938][T20218] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.814792][T20218] CPU: 0 PID: 20218 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1754.824869][T20218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1754.834924][T20218] Call Trace: [ 1754.838248][T20218] 00:31:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xffffffffffffff31}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xffffffffffffff31, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x38, 0x6, r1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socketpair(0x25, 0x3, 0xfe, &(0x7f0000000040)) (async) socketpair(0x25, 0x3, 0xfe, &(0x7f0000000040)={0xffffffffffffffff}) getpid() (async) getpid() ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000001c0)={@none, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000700)) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) 00:31:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) 00:31:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 12) 00:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) [ 1754.841179][T20218] dump_stack_lvl+0x125/0x1b0 [ 1754.845862][T20218] should_fail_ex+0x496/0x5b0 [ 1754.850563][T20218] should_failslab+0x9/0x20 [ 1754.855079][T20218] kmem_cache_alloc+0x33a/0x3b0 [ 1754.859955][T20218] ? kstrdup+0x5c/0x70 [ 1754.864071][T20218] __kernfs_new_node+0xd3/0x8a0 [ 1754.868928][T20218] ? kernfs_add_one+0x3ca/0x510 [ 1754.873788][T20218] ? kernfs_path_from_node+0x60/0x60 [ 1754.879075][T20218] ? down_write+0x14f/0x200 [ 1754.883589][T20218] ? rcu_is_watching+0x12/0xb0 [ 1754.888351][T20218] ? rcu_is_watching+0x12/0xb0 [ 1754.893136][T20218] ? lock_release+0x4bf/0x680 [ 1754.897822][T20218] ? sysfs_do_create_link_sd+0x82/0x140 [ 1754.903383][T20218] kernfs_new_node+0x94/0x110 [ 1754.908073][T20218] kernfs_create_link+0xcc/0x230 [ 1754.913025][T20218] sysfs_do_create_link_sd+0x90/0x140 [ 1754.914938][T20229] FAULT_INJECTION: forcing a failure. [ 1754.914938][T20229] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.918400][T20218] sysfs_create_link+0x61/0xc0 [ 1754.918428][T20218] device_add+0x669/0x1ac0 [ 1754.918450][T20218] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1754.918473][T20218] ? kasan_set_track+0x25/0x30 [ 1754.918503][T20218] ? rcu_is_watching+0x12/0xb0 [ 1754.918523][T20218] input_register_device+0x7b6/0x1130 [ 1754.918555][T20218] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1754.918583][T20218] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1754.918608][T20218] ? reacquire_held_locks+0x4b0/0x4b0 [ 1754.918634][T20218] ? bit_wait_timeout+0x160/0x160 [ 1754.918658][T20218] ? __fget_files+0x279/0x410 00:31:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 11) 00:31:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) [ 1754.918683][T20218] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1754.918707][T20218] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1754.918733][T20218] __x64_sys_ioctl+0x18f/0x210 [ 1754.918753][T20218] do_syscall_64+0x38/0xb0 [ 1754.918772][T20218] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1754.918794][T20218] RIP: 0033:0x7f426867cae9 [ 1754.918809][T20218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.918828][T20218] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.918848][T20218] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1754.918861][T20218] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1754.918874][T20218] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.918890][T20218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.918902][T20218] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1754.918920][T20218] [ 1755.009672][T20236] FAULT_INJECTION: forcing a failure. [ 1755.009672][T20236] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.029267][T20229] CPU: 1 PID: 20229 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1755.117150][T20229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1755.127719][T20229] Call Trace: [ 1755.130986][T20229] [ 1755.133900][T20229] dump_stack_lvl+0x125/0x1b0 [ 1755.138570][T20229] should_fail_ex+0x496/0x5b0 [ 1755.143337][T20229] should_failslab+0x9/0x20 [ 1755.147838][T20229] kmem_cache_alloc+0x33a/0x3b0 [ 1755.152712][T20229] __kernfs_new_node+0xd3/0x8a0 [ 1755.157553][T20229] ? kernfs_add_one+0x3ca/0x510 [ 1755.162399][T20229] ? kernfs_path_from_node+0x60/0x60 [ 1755.167669][T20229] ? down_write+0x14f/0x200 [ 1755.172165][T20229] ? down_write+0x14f/0x200 [ 1755.176661][T20229] ? up_write+0x1b3/0x510 [ 1755.180992][T20229] kernfs_new_node+0x94/0x110 [ 1755.185663][T20229] __kernfs_create_file+0x53/0x340 [ 1755.190767][T20229] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1755.196303][T20229] internal_create_group+0x31c/0xb40 [ 1755.201581][T20229] ? sysfs_remove_group+0x170/0x170 [ 1755.206775][T20229] ? kernfs_create_link+0x1b6/0x230 [ 1755.211964][T20229] internal_create_groups+0x9d/0x150 [ 1755.217246][T20229] device_add+0x772/0x1ac0 [ 1755.221651][T20229] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1755.228666][T20229] ? kasan_set_track+0x25/0x30 [ 1755.233430][T20229] ? rcu_is_watching+0x12/0xb0 [ 1755.238183][T20229] input_register_device+0x7b6/0x1130 [ 1755.243560][T20229] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1755.249543][T20229] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1755.255266][T20229] ? reacquire_held_locks+0x4b0/0x4b0 [ 1755.260632][T20229] ? bit_wait_timeout+0x160/0x160 [ 1755.265670][T20229] ? __fget_files+0x279/0x410 [ 1755.270347][T20229] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1755.275282][T20229] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1755.281692][T20229] __x64_sys_ioctl+0x18f/0x210 [ 1755.286449][T20229] do_syscall_64+0x38/0xb0 [ 1755.290880][T20229] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1755.296765][T20229] RIP: 0033:0x7f394be7cae9 [ 1755.301165][T20229] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1755.320760][T20229] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.329165][T20229] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1755.337140][T20229] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:11 executing program 5: r0 = socket(0x9, 0x80000, 0x7ca5ac19) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x40a140, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x9, 0xa2, &(0x7f0000000180)="df327d60b41821466136f606acb8dcf9aa85519289ce635f7e47599af2d7f1f9a53b6c000658e6bb972df15c858365c5f615f099a007a4050386f3ebbd6325fc21935588d00778c79ef6df4d08dd0f3de135fe89eb782c482631dae5363633891c9eab3b03ffddbb7d2ef38e894342fc49e0e10ddab0308f7e68820d52b405b6ffceb5770927a651a5429bab48144798451484b1b1cb52330b1f44b55c1bb61ac27d", 0x7, 0x3, 0xf4, 0x4, 0x1f, 0x2, 0xffffffff, 'syz1\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r5) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) [ 1755.345098][T20229] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1755.353059][T20229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.361105][T20229] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1755.369069][T20229] 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) [ 1755.393005][T20236] CPU: 0 PID: 20236 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1755.403184][T20236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1755.413234][T20236] Call Trace: [ 1755.416511][T20236] [ 1755.419456][T20236] dump_stack_lvl+0x125/0x1b0 [ 1755.424149][T20236] should_fail_ex+0x496/0x5b0 [ 1755.428864][T20236] should_failslab+0x9/0x20 [ 1755.433383][T20236] kmem_cache_alloc+0x33a/0x3b0 [ 1755.438246][T20236] __kernfs_new_node+0xd3/0x8a0 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448dd) [ 1755.443139][T20236] ? __fprop_add_percpu_max+0x1b0/0x1b0 [ 1755.448789][T20236] ? kernfs_path_from_node+0x60/0x60 [ 1755.454081][T20236] ? rcu_is_watching+0x12/0xb0 [ 1755.458852][T20236] ? rcu_is_watching+0x12/0xb0 [ 1755.463625][T20236] ? rcu_is_watching+0x12/0xb0 [ 1755.468396][T20236] ? lock_acquire+0x464/0x510 [ 1755.473092][T20236] ? rcu_is_watching+0x12/0xb0 [ 1755.477859][T20236] kernfs_new_node+0x94/0x110 [ 1755.482548][T20236] __kernfs_create_file+0x53/0x340 [ 1755.487671][T20236] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1755.493074][T20236] internal_create_group+0x31c/0xb40 [ 1755.498370][T20236] ? sysfs_remove_group+0x170/0x170 [ 1755.503588][T20236] ? kernfs_create_link+0x1b6/0x230 [ 1755.508804][T20236] internal_create_groups+0x9d/0x150 [ 1755.514079][T20236] device_add+0x772/0x1ac0 [ 1755.518591][T20236] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1755.525418][T20236] ? kasan_set_track+0x25/0x30 [ 1755.530168][T20236] ? rcu_is_watching+0x12/0xb0 [ 1755.534929][T20236] input_register_device+0x7b6/0x1130 [ 1755.540292][T20236] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1755.546281][T20236] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1755.551982][T20236] ? reacquire_held_locks+0x4b0/0x4b0 [ 1755.557337][T20236] ? bit_wait_timeout+0x160/0x160 [ 1755.562344][T20236] ? __fget_files+0x279/0x410 [ 1755.567001][T20236] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1755.571918][T20236] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1755.578063][T20236] __x64_sys_ioctl+0x18f/0x210 [ 1755.582825][T20236] do_syscall_64+0x38/0xb0 [ 1755.587219][T20236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1755.593096][T20236] RIP: 0033:0x7f426867cae9 [ 1755.597485][T20236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1755.617071][T20236] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.625454][T20236] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1755.633406][T20236] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 00:31:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 13) 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) [ 1755.641354][T20236] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1755.649478][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.657427][T20236] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1755.665383][T20236] 00:31:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 12) 00:31:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 00:31:11 executing program 5: r0 = socket(0x9, 0x80000, 0x7ca5ac19) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x40a140, 0x0) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x9, 0xa2, &(0x7f0000000180)="df327d60b41821466136f606acb8dcf9aa85519289ce635f7e47599af2d7f1f9a53b6c000658e6bb972df15c858365c5f615f099a007a4050386f3ebbd6325fc21935588d00778c79ef6df4d08dd0f3de135fe89eb782c482631dae5363633891c9eab3b03ffddbb7d2ef38e894342fc49e0e10ddab0308f7e68820d52b405b6ffceb5770927a651a5429bab48144798451484b1b1cb52330b1f44b55c1bb61ac27d", 0x7, 0x3, 0xf4, 0x4, 0x1f, 0x2, 0xffffffff, 'syz1\x00'}) (async, rerun: 64) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 32) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r5) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) [ 1755.720468][T20259] FAULT_INJECTION: forcing a failure. [ 1755.720468][T20259] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.734348][T20259] CPU: 0 PID: 20259 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1755.744424][T20259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1755.754474][T20259] Call Trace: [ 1755.757752][T20259] [ 1755.760675][T20259] dump_stack_lvl+0x125/0x1b0 [ 1755.763544][T20262] FAULT_INJECTION: forcing a failure. 00:31:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 00:31:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) [ 1755.763544][T20262] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.765362][T20259] should_fail_ex+0x496/0x5b0 [ 1755.765404][T20259] should_failslab+0x9/0x20 [ 1755.787452][T20259] kmem_cache_alloc+0x33a/0x3b0 [ 1755.792326][T20259] __kernfs_new_node+0xd3/0x8a0 [ 1755.797175][T20259] ? kernfs_add_one+0x3ca/0x510 [ 1755.802030][T20259] ? kernfs_path_from_node+0x60/0x60 [ 1755.807411][T20259] ? down_write+0x14f/0x200 [ 1755.811924][T20259] ? down_write+0x14f/0x200 [ 1755.816445][T20259] ? up_write+0x1b3/0x510 [ 1755.820771][T20259] kernfs_new_node+0x94/0x110 [ 1755.825454][T20259] __kernfs_create_file+0x53/0x340 [ 1755.830591][T20259] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1755.836173][T20259] internal_create_group+0x31c/0xb40 [ 1755.841464][T20259] ? sysfs_remove_group+0x170/0x170 [ 1755.846748][T20259] ? kernfs_create_link+0x1b6/0x230 [ 1755.851942][T20259] internal_create_groups+0x9d/0x150 [ 1755.857216][T20259] device_add+0x772/0x1ac0 [ 1755.861623][T20259] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1755.868487][T20259] ? kasan_set_track+0x25/0x30 [ 1755.873249][T20259] ? rcu_is_watching+0x12/0xb0 [ 1755.878018][T20259] input_register_device+0x7b6/0x1130 [ 1755.883394][T20259] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1755.889399][T20259] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1755.895113][T20259] ? reacquire_held_locks+0x4b0/0x4b0 [ 1755.900480][T20259] ? bit_wait_timeout+0x160/0x160 [ 1755.905499][T20259] ? __fget_files+0x279/0x410 [ 1755.910173][T20259] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1755.915101][T20259] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1755.921253][T20259] __x64_sys_ioctl+0x18f/0x210 [ 1755.926100][T20259] do_syscall_64+0x38/0xb0 [ 1755.930507][T20259] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1755.936390][T20259] RIP: 0033:0x7f394be7cae9 [ 1755.940791][T20259] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1755.960414][T20259] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.968845][T20259] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1755.976817][T20259] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1755.984782][T20259] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1755.992746][T20259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.000710][T20259] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1756.008774][T20259] [ 1756.028062][T20262] CPU: 0 PID: 20262 Comm: syz-executor.3 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1756.038161][T20262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1756.048227][T20262] Call Trace: [ 1756.051502][T20262] [ 1756.054432][T20262] dump_stack_lvl+0x125/0x1b0 [ 1756.059116][T20262] should_fail_ex+0x496/0x5b0 [ 1756.063904][T20262] should_failslab+0x9/0x20 [ 1756.068419][T20262] kmem_cache_alloc+0x33a/0x3b0 [ 1756.073296][T20262] __kernfs_new_node+0xd3/0x8a0 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 00:31:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 00:31:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 14) [ 1756.078166][T20262] ? kernfs_add_one+0x3ca/0x510 [ 1756.083061][T20262] ? kernfs_path_from_node+0x60/0x60 [ 1756.088359][T20262] ? down_write+0x14f/0x200 [ 1756.092882][T20262] ? down_write+0x14f/0x200 [ 1756.097493][T20262] ? up_write+0x1b3/0x510 [ 1756.101838][T20262] kernfs_new_node+0x94/0x110 [ 1756.106525][T20262] __kernfs_create_file+0x53/0x340 [ 1756.111657][T20262] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1756.117061][T20262] internal_create_group+0x31c/0xb40 [ 1756.122368][T20262] ? sysfs_remove_group+0x170/0x170 [ 1756.127580][T20262] ? kernfs_create_link+0x1b6/0x230 [ 1756.129748][T20279] FAULT_INJECTION: forcing a failure. [ 1756.129748][T20279] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.132783][T20262] internal_create_groups+0x9d/0x150 [ 1756.132818][T20262] device_add+0x772/0x1ac0 [ 1756.155122][T20262] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1756.161983][T20262] ? kasan_set_track+0x25/0x30 [ 1756.166757][T20262] ? rcu_is_watching+0x12/0xb0 [ 1756.171529][T20262] input_register_device+0x7b6/0x1130 [ 1756.176920][T20262] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1756.182910][T20262] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1756.188662][T20262] ? reacquire_held_locks+0x4b0/0x4b0 [ 1756.194047][T20262] ? bit_wait_timeout+0x160/0x160 [ 1756.199072][T20262] ? __fget_files+0x279/0x410 [ 1756.203760][T20262] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1756.208712][T20262] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1756.214875][T20262] __x64_sys_ioctl+0x18f/0x210 [ 1756.219644][T20262] do_syscall_64+0x38/0xb0 [ 1756.224056][T20262] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1756.229949][T20262] RIP: 0033:0x7f426867cae9 [ 1756.234362][T20262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1756.253963][T20262] RSP: 002b:00007f42671fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.262366][T20262] RAX: ffffffffffffffda RBX: 00007f426879bf80 RCX: 00007f426867cae9 [ 1756.270324][T20262] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1756.278301][T20262] RBP: 00007f42671fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1756.286276][T20262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.294243][T20262] R13: 000000000000000b R14: 00007f426879bf80 R15: 00007ffeaed5b7e8 [ 1756.302221][T20262] 00:31:12 executing program 5: r0 = socket(0x9, 0x80000, 0x7ca5ac19) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x40a140, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x9, 0xa2, &(0x7f0000000180)="df327d60b41821466136f606acb8dcf9aa85519289ce635f7e47599af2d7f1f9a53b6c000658e6bb972df15c858365c5f615f099a007a4050386f3ebbd6325fc21935588d00778c79ef6df4d08dd0f3de135fe89eb782c482631dae5363633891c9eab3b03ffddbb7d2ef38e894342fc49e0e10ddab0308f7e68820d52b405b6ffceb5770927a651a5429bab48144798451484b1b1cb52330b1f44b55c1bb61ac27d", 0x7, 0x3, 0xf4, 0x4, 0x1f, 0x2, 0xffffffff, 'syz1\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r5) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) socket(0x9, 0x80000, 0x7ca5ac19) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x40a140, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r3, 0x9, 0xa2, &(0x7f0000000180)="df327d60b41821466136f606acb8dcf9aa85519289ce635f7e47599af2d7f1f9a53b6c000658e6bb972df15c858365c5f615f099a007a4050386f3ebbd6325fc21935588d00778c79ef6df4d08dd0f3de135fe89eb782c482631dae5363633891c9eab3b03ffddbb7d2ef38e894342fc49e0e10ddab0308f7e68820d52b405b6ffceb5770927a651a5429bab48144798451484b1b1cb52330b1f44b55c1bb61ac27d", 0x7, 0x3, 0xf4, 0x4, 0x1f, 0x2, 0xffffffff, 'syz1\x00'}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r5) (async) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 00:31:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) [ 1756.324283][T20279] CPU: 0 PID: 20279 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1756.334388][T20279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1756.344446][T20279] Call Trace: [ 1756.347732][T20279] [ 1756.350682][T20279] dump_stack_lvl+0x125/0x1b0 [ 1756.355369][T20279] should_fail_ex+0x496/0x5b0 [ 1756.360068][T20279] should_failslab+0x9/0x20 [ 1756.364574][T20279] kmem_cache_alloc+0x33a/0x3b0 [ 1756.369429][T20279] __kernfs_new_node+0xd3/0x8a0 [ 1756.374299][T20279] ? kernfs_add_one+0x3ca/0x510 [ 1756.379140][T20279] ? kernfs_path_from_node+0x60/0x60 [ 1756.384434][T20279] ? down_write+0x14f/0x200 [ 1756.388933][T20279] ? down_write+0x14f/0x200 [ 1756.393434][T20279] ? up_write+0x1b3/0x510 [ 1756.397758][T20279] kernfs_new_node+0x94/0x110 [ 1756.402435][T20279] __kernfs_create_file+0x53/0x340 [ 1756.407543][T20279] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1756.412911][T20279] internal_create_group+0x31c/0xb40 [ 1756.418201][T20279] ? sysfs_remove_group+0x170/0x170 [ 1756.423401][T20279] ? kernfs_create_link+0x1b6/0x230 [ 1756.428593][T20279] internal_create_groups+0x9d/0x150 [ 1756.433884][T20279] device_add+0x772/0x1ac0 [ 1756.438293][T20279] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1756.445136][T20279] ? kasan_set_track+0x25/0x30 [ 1756.449897][T20279] ? rcu_is_watching+0x12/0xb0 [ 1756.454666][T20279] input_register_device+0x7b6/0x1130 [ 1756.460034][T20279] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1756.466014][T20279] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1756.471731][T20279] ? reacquire_held_locks+0x4b0/0x4b0 [ 1756.477130][T20279] ? bit_wait_timeout+0x160/0x160 [ 1756.482146][T20279] ? __fget_files+0x279/0x410 [ 1756.486835][T20279] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1756.491772][T20279] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1756.497918][T20279] __x64_sys_ioctl+0x18f/0x210 [ 1756.502672][T20279] do_syscall_64+0x38/0xb0 [ 1756.507096][T20279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1756.512982][T20279] RIP: 0033:0x7f394be7cae9 [ 1756.517397][T20279] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1756.536997][T20279] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.545402][T20279] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1756.553391][T20279] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1756.561373][T20279] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1756.569370][T20279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) [ 1756.577420][T20279] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1756.585395][T20279] 00:31:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 00:31:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 00:31:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 00:31:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 00:31:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) 00:31:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 15) 00:31:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40086602) [ 1756.692029][T20306] input: syz0 as /devices/virtual/input/input12703 00:31:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x2) 00:31:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 00:31:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) [ 1756.767192][T20308] FAULT_INJECTION: forcing a failure. [ 1756.767192][T20308] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.797132][T20308] CPU: 1 PID: 20308 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1756.807342][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1756.817405][T20308] Call Trace: [ 1756.820686][T20308] [ 1756.823629][T20308] dump_stack_lvl+0x125/0x1b0 [ 1756.828301][T20308] should_fail_ex+0x496/0x5b0 [ 1756.832980][T20308] should_failslab+0x9/0x20 [ 1756.837471][T20308] kmem_cache_alloc+0x33a/0x3b0 [ 1756.842329][T20308] __kernfs_new_node+0xd3/0x8a0 [ 1756.847167][T20308] ? kernfs_add_one+0x3ca/0x510 [ 1756.852008][T20308] ? kernfs_path_from_node+0x60/0x60 [ 1756.857282][T20308] ? down_write+0x14f/0x200 [ 1756.861793][T20308] ? down_write+0x14f/0x200 [ 1756.866295][T20308] ? up_write+0x1b3/0x510 [ 1756.870619][T20308] kernfs_new_node+0x94/0x110 [ 1756.875289][T20308] __kernfs_create_file+0x53/0x340 [ 1756.880401][T20308] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1756.885770][T20308] internal_create_group+0x31c/0xb40 [ 1756.891050][T20308] ? sysfs_remove_group+0x170/0x170 [ 1756.896333][T20308] ? kernfs_create_link+0x1b6/0x230 [ 1756.901523][T20308] internal_create_groups+0x9d/0x150 [ 1756.906831][T20308] device_add+0x772/0x1ac0 [ 1756.911251][T20308] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1756.918092][T20308] ? kasan_set_track+0x25/0x30 [ 1756.922857][T20308] ? rcu_is_watching+0x12/0xb0 [ 1756.927612][T20308] input_register_device+0x7b6/0x1130 [ 1756.932985][T20308] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1756.938967][T20308] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1756.944692][T20308] ? reacquire_held_locks+0x4b0/0x4b0 [ 1756.950079][T20308] ? bit_wait_timeout+0x160/0x160 [ 1756.955091][T20308] ? __fget_files+0x279/0x410 [ 1756.959758][T20308] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1756.964688][T20308] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1756.970837][T20308] __x64_sys_ioctl+0x18f/0x210 [ 1756.975640][T20308] do_syscall_64+0x38/0xb0 [ 1756.980069][T20308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1756.985956][T20308] RIP: 0033:0x7f394be7cae9 [ 1756.990358][T20308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1757.009956][T20308] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x10) 00:31:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) (fail_nth: 1) [ 1757.018367][T20308] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1757.026414][T20308] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1757.034369][T20308] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1757.042331][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.050292][T20308] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1757.058258][T20308] 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x541b) 00:31:13 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x3226}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)={'geneve1\x00'}) syz_open_dev$rtc(&(0x7f00000000c0), 0x6, 0x202000) 00:31:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 16) 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) 00:31:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) 00:31:13 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x3226}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)={'geneve1\x00'}) (async) syz_open_dev$rtc(&(0x7f00000000c0), 0x6, 0x202000) [ 1757.136501][T20328] FAULT_INJECTION: forcing a failure. [ 1757.136501][T20328] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.179902][T20340] input: syz0 as /devices/virtual/input/input12711 [ 1757.197862][T20328] CPU: 0 PID: 20328 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1757.207942][T20328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1757.218009][T20328] Call Trace: [ 1757.221305][T20328] [ 1757.224253][T20328] dump_stack_lvl+0x125/0x1b0 [ 1757.229023][T20328] should_fail_ex+0x496/0x5b0 [ 1757.233718][T20328] should_failslab+0x9/0x20 [ 1757.238229][T20328] __kmem_cache_alloc_node+0x2fd/0x350 [ 1757.243720][T20328] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1757.249469][T20328] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1757.255202][T20328] __kmalloc+0x4f/0x100 [ 1757.259366][T20328] tomoyo_realpath_from_path+0xb9/0x710 [ 1757.264936][T20328] ? lock_release+0x4bf/0x680 [ 1757.269649][T20328] ? tomoyo_profile+0x47/0x60 [ 1757.274328][T20328] tomoyo_path_number_perm+0x243/0x590 00:31:13 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x3226}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)={'geneve1\x00'}) syz_open_dev$rtc(&(0x7f00000000c0), 0x6, 0x202000) 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5421) 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5450) [ 1757.279813][T20328] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1757.285451][T20328] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1757.291268][T20328] ? lock_release+0x4bf/0x680 [ 1757.295971][T20328] ? reacquire_held_locks+0x4b0/0x4b0 [ 1757.301448][T20328] ? bit_wait_timeout+0x160/0x160 [ 1757.306476][T20328] ? __fget_files+0x279/0x410 [ 1757.311149][T20328] ? __fget_files+0x279/0x410 [ 1757.315838][T20328] security_file_ioctl+0x72/0xb0 [ 1757.320778][T20328] __x64_sys_ioctl+0xbb/0x210 [ 1757.325457][T20328] do_syscall_64+0x38/0xb0 [ 1757.329884][T20328] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1757.335777][T20328] RIP: 0033:0x7ff11927cae9 [ 1757.340178][T20328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1757.359772][T20328] RSP: 002b:00007ff119f260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.368174][T20328] RAX: ffffffffffffffda RBX: 00007ff11939bf80 RCX: 00007ff11927cae9 [ 1757.376156][T20328] RDX: 0000000020000040 RSI: 000000004008af20 RDI: 0000000000000003 [ 1757.384145][T20328] RBP: 00007ff119f26120 R08: 0000000000000000 R09: 0000000000000000 [ 1757.392103][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.400059][T20328] R13: 000000000000000b R14: 00007ff11939bf80 R15: 00007ffc43b2d9e8 [ 1757.408032][T20328] [ 1757.416423][T20328] ERROR: Out of memory at tomoyo_realpath_from_path. 00:31:13 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) (fail_nth: 2) 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5451) 00:31:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 17) 00:31:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x401c5820) 00:31:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5452) 00:31:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x200000001}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000380)={r9, 0x0, 0x0, 0x9, 0x1, 0x5, 0x0, 0x4, 0x4, 0x800, 0x76, 0x5}) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000280)={0x4000}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r11}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r11, r12, 0x0, 0x2, 0x6, 0x180000, 0x6, 0x2, 0xffffff08, 0x4, 0x0, 0xffff}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x200040c0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) keyctl$negate(0xd, r2, 0x80, r3) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) [ 1757.496937][T20369] FAULT_INJECTION: forcing a failure. [ 1757.496937][T20369] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.524015][T20369] CPU: 1 PID: 20369 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1757.534113][T20369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1757.544173][T20369] Call Trace: [ 1757.545206][T20374] FAULT_INJECTION: forcing a failure. [ 1757.545206][T20374] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.547457][T20369] [ 1757.547471][T20369] dump_stack_lvl+0x125/0x1b0 [ 1757.547498][T20369] should_fail_ex+0x496/0x5b0 [ 1757.547529][T20369] should_failslab+0x9/0x20 [ 1757.547547][T20369] __kmem_cache_alloc_node+0x2fd/0x350 [ 1757.547574][T20369] ? tomoyo_encode2+0x100/0x3d0 [ 1757.587303][T20369] ? tomoyo_encode2+0x100/0x3d0 [ 1757.592164][T20369] __kmalloc+0x4f/0x100 [ 1757.596311][T20369] tomoyo_encode2+0x100/0x3d0 [ 1757.600990][T20369] ? rcu_is_watching+0x12/0xb0 [ 1757.605741][T20369] tomoyo_encode+0x29/0x50 [ 1757.610151][T20369] tomoyo_realpath_from_path+0x196/0x710 [ 1757.615777][T20369] tomoyo_path_number_perm+0x243/0x590 [ 1757.621228][T20369] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1757.626856][T20369] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1757.632656][T20369] ? lock_release+0x4bf/0x680 [ 1757.637347][T20369] ? reacquire_held_locks+0x4b0/0x4b0 [ 1757.642718][T20369] ? bit_wait_timeout+0x160/0x160 [ 1757.647733][T20369] ? __fget_files+0x279/0x410 [ 1757.652403][T20369] ? __fget_files+0x279/0x410 [ 1757.657068][T20369] security_file_ioctl+0x72/0xb0 [ 1757.661997][T20369] __x64_sys_ioctl+0xbb/0x210 [ 1757.666687][T20369] do_syscall_64+0x38/0xb0 [ 1757.671095][T20369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1757.676984][T20369] RIP: 0033:0x7ff11927cae9 [ 1757.681397][T20369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1757.701015][T20369] RSP: 002b:00007ff119f260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.709420][T20369] RAX: ffffffffffffffda RBX: 00007ff11939bf80 RCX: 00007ff11927cae9 [ 1757.717386][T20369] RDX: 0000000020000040 RSI: 000000004008af20 RDI: 0000000000000003 [ 1757.725344][T20369] RBP: 00007ff119f26120 R08: 0000000000000000 R09: 0000000000000000 [ 1757.733351][T20369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:31:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5460) [ 1757.741318][T20369] R13: 000000000000000b R14: 00007ff11939bf80 R15: 00007ffc43b2d9e8 [ 1757.749286][T20369] [ 1757.765182][T20374] CPU: 0 PID: 20374 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1757.775301][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1757.785369][T20374] Call Trace: [ 1757.788653][T20374] [ 1757.791580][T20374] dump_stack_lvl+0x125/0x1b0 [ 1757.796272][T20374] should_fail_ex+0x496/0x5b0 [ 1757.797559][T20369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1757.800965][T20374] should_failslab+0x9/0x20 [ 1757.800988][T20374] kmem_cache_alloc+0x33a/0x3b0 [ 1757.816997][T20374] __kernfs_new_node+0xd3/0x8a0 [ 1757.821849][T20374] ? kernfs_add_one+0x3ca/0x510 [ 1757.826708][T20374] ? kernfs_path_from_node+0x60/0x60 [ 1757.831981][T20374] ? down_write+0x14f/0x200 [ 1757.836503][T20374] ? down_write+0x14f/0x200 [ 1757.840998][T20374] ? up_write+0x1b3/0x510 [ 1757.845320][T20374] kernfs_new_node+0x94/0x110 [ 1757.849999][T20374] __kernfs_create_file+0x53/0x340 [ 1757.855120][T20374] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1757.860490][T20374] internal_create_group+0x31c/0xb40 [ 1757.865771][T20374] ? sysfs_remove_group+0x170/0x170 [ 1757.870961][T20374] ? kernfs_create_link+0x1b6/0x230 [ 1757.876152][T20374] internal_create_groups+0x9d/0x150 [ 1757.881431][T20374] device_add+0x772/0x1ac0 [ 1757.885928][T20374] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1757.892765][T20374] ? kasan_set_track+0x25/0x30 [ 1757.897523][T20374] ? rcu_is_watching+0x12/0xb0 [ 1757.902289][T20374] input_register_device+0x7b6/0x1130 [ 1757.907661][T20374] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1757.913636][T20374] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1757.919372][T20374] ? reacquire_held_locks+0x4b0/0x4b0 [ 1757.924739][T20374] ? bit_wait_timeout+0x160/0x160 [ 1757.929757][T20374] ? __fget_files+0x279/0x410 [ 1757.934428][T20374] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1757.939363][T20374] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1757.945520][T20374] __x64_sys_ioctl+0x18f/0x210 [ 1757.950281][T20374] do_syscall_64+0x38/0xb0 [ 1757.954688][T20374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1757.960571][T20374] RIP: 0033:0x7f394be7cae9 [ 1757.964995][T20374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1757.984593][T20374] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:31:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 00:31:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) [ 1757.992993][T20374] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1758.000951][T20374] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1758.008909][T20374] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1758.016873][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.024830][T20374] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1758.032795][T20374] 00:31:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) (fail_nth: 3) 00:31:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x7}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x200000001}) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000380)={r9, 0x0, 0x0, 0x9, 0x1, 0x5, 0x0, 0x4, 0x4, 0x800, 0x76, 0x5}) (async) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000280)={0x4000}) (async) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r11}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r11, r12, 0x0, 0x2, 0x6, 0x180000, 0x6, 0x2, 0xffffff08, 0x4, 0x0, 0xffff}) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x200040c0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) keyctl$negate(0xd, r2, 0x80, r3) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5502) 00:31:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 18) 00:31:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) [ 1758.127825][T20389] FAULT_INJECTION: forcing a failure. [ 1758.127825][T20389] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.157572][T20391] FAULT_INJECTION: forcing a failure. [ 1758.157572][T20391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.163562][T20389] CPU: 1 PID: 20389 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1758.180774][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1758.190834][T20389] Call Trace: [ 1758.194117][T20389] [ 1758.197056][T20389] dump_stack_lvl+0x125/0x1b0 [ 1758.201741][T20389] should_fail_ex+0x496/0x5b0 [ 1758.206540][T20389] should_failslab+0x9/0x20 [ 1758.211049][T20389] kmem_cache_alloc+0x33a/0x3b0 [ 1758.215909][T20389] ? rcu_is_watching+0x12/0xb0 [ 1758.220671][T20389] __kernfs_new_node+0xd3/0x8a0 00:31:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5503) 00:31:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5504) [ 1758.225556][T20389] ? kernfs_path_from_node+0x60/0x60 [ 1758.230865][T20389] ? kernfs_link_sibling+0x3f5/0x540 [ 1758.236158][T20389] ? rcu_is_watching+0x12/0xb0 [ 1758.240930][T20389] ? lock_release+0x4bf/0x680 [ 1758.245629][T20389] ? kernfs_add_one+0x3ca/0x510 [ 1758.250496][T20389] ? reacquire_held_locks+0x4b0/0x4b0 [ 1758.255873][T20389] ? down_write+0x14f/0x200 [ 1758.260389][T20389] kernfs_new_node+0x94/0x110 [ 1758.265079][T20389] __kernfs_create_file+0x53/0x340 [ 1758.270210][T20389] sysfs_add_file_mode_ns+0x1ff/0x3b0 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5507) [ 1758.275589][T20389] internal_create_group+0x31c/0xb40 [ 1758.280892][T20389] ? sysfs_remove_group+0x170/0x170 [ 1758.286100][T20389] ? kernfs_create_link+0x1b6/0x230 [ 1758.291316][T20389] internal_create_groups+0x9d/0x150 [ 1758.296630][T20389] device_add+0x772/0x1ac0 [ 1758.301059][T20389] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1758.308001][T20389] ? kasan_set_track+0x25/0x30 [ 1758.312806][T20389] ? rcu_is_watching+0x12/0xb0 [ 1758.317566][T20389] input_register_device+0x7b6/0x1130 [ 1758.322962][T20389] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1758.328952][T20389] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1758.334697][T20389] ? reacquire_held_locks+0x4b0/0x4b0 [ 1758.340075][T20389] ? bit_wait_timeout+0x160/0x160 [ 1758.345122][T20389] ? __fget_files+0x279/0x410 [ 1758.349803][T20389] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1758.354781][T20389] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1758.360940][T20389] __x64_sys_ioctl+0x18f/0x210 [ 1758.365757][T20389] do_syscall_64+0x38/0xb0 [ 1758.370179][T20389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1758.376079][T20389] RIP: 0033:0x7f394be7cae9 [ 1758.380490][T20389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1758.400187][T20389] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.408593][T20389] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1758.416584][T20389] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550b) [ 1758.424565][T20389] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1758.432529][T20389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.440500][T20389] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1758.448481][T20389] 00:31:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40086602) [ 1758.475980][T20391] CPU: 1 PID: 20391 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1758.486077][T20391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1758.496122][T20391] Call Trace: [ 1758.499389][T20391] [ 1758.502308][T20391] dump_stack_lvl+0x125/0x1b0 [ 1758.506984][T20391] should_fail_ex+0x496/0x5b0 [ 1758.511665][T20391] _copy_from_user+0x30/0xf0 [ 1758.516257][T20391] vhost_vring_ioctl+0x618/0x1390 [ 1758.521283][T20391] ? vhost_poll_start+0x320/0x320 [ 1758.526305][T20391] ? vhost_dev_ioctl+0x132/0xdb0 [ 1758.531235][T20391] ? vhost_dev_set_owner+0xa70/0xa70 [ 1758.536521][T20391] vhost_vsock_dev_ioctl+0x8c9/0xb50 [ 1758.541805][T20391] ? vhost_vsock_stop+0x110/0x110 [ 1758.546827][T20391] ? __fget_files+0x279/0x410 [ 1758.551498][T20391] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1758.556430][T20391] ? vhost_vsock_stop+0x110/0x110 [ 1758.561459][T20391] __x64_sys_ioctl+0x18f/0x210 [ 1758.566218][T20391] do_syscall_64+0x38/0xb0 [ 1758.570622][T20391] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1758.576507][T20391] RIP: 0033:0x7ff11927cae9 [ 1758.580936][T20391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1758.600533][T20391] RSP: 002b:00007ff119f260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.608938][T20391] RAX: ffffffffffffffda RBX: 00007ff11939bf80 RCX: 00007ff11927cae9 [ 1758.616895][T20391] RDX: 0000000020000040 RSI: 000000004008af20 RDI: 0000000000000003 [ 1758.624855][T20391] RBP: 00007ff119f26120 R08: 0000000000000000 R09: 0000000000000000 [ 1758.632819][T20391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.640778][T20391] R13: 000000000000000b R14: 00007ff11939bf80 R15: 00007ffc43b2d9e8 [ 1758.648745][T20391] 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x550f) 00:31:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 00:31:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 19) 00:31:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 00:31:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x7}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x7}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000700)) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) r6 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r6, 0x40106439, &(0x7f0000000600)={0x200000001}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000400)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000380)={r9, 0x0, 0x0, 0x9, 0x1, 0x5, 0x0, 0x4, 0x4, 0x800, 0x76, 0x5}) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000280)={0x4000}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r10, 0x4004556a, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000cc0)={&(0x7f0000000c00)=[0x0, 0x0], 0x2, r11}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000240)={r11, r12, 0x0, 0x2, 0x6, 0x180000, 0x6, 0x2, 0xffffff08, 0x4, 0x0, 0xffff}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x200040c0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='d', 0x1, r3) keyctl$negate(0xd, r2, 0x80, r3) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 00:31:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5510) 00:31:14 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) (fail_nth: 4) [ 1758.702491][T20422] FAULT_INJECTION: forcing a failure. [ 1758.702491][T20422] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.736682][T20422] CPU: 1 PID: 20422 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 00:31:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) 00:31:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086601) [ 1758.746792][T20422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1758.756859][T20422] Call Trace: [ 1758.760142][T20422] [ 1758.763074][T20422] dump_stack_lvl+0x125/0x1b0 [ 1758.767754][T20422] should_fail_ex+0x496/0x5b0 [ 1758.772436][T20422] should_failslab+0x9/0x20 [ 1758.776929][T20422] kmem_cache_alloc+0x33a/0x3b0 [ 1758.781783][T20422] ? rcu_is_watching+0x12/0xb0 [ 1758.786534][T20422] __kernfs_new_node+0xd3/0x8a0 [ 1758.791381][T20422] ? kernfs_path_from_node+0x60/0x60 [ 1758.796650][T20422] ? kernfs_link_sibling+0x3f5/0x540 [ 1758.801943][T20422] ? rcu_is_watching+0x12/0xb0 [ 1758.806693][T20422] ? lock_release+0x4bf/0x680 [ 1758.811362][T20422] ? kernfs_add_one+0x3ca/0x510 [ 1758.816216][T20422] ? reacquire_held_locks+0x4b0/0x4b0 [ 1758.821612][T20422] ? down_write+0x14f/0x200 [ 1758.826115][T20422] kernfs_new_node+0x94/0x110 [ 1758.830784][T20422] __kernfs_create_file+0x53/0x340 [ 1758.835898][T20422] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1758.841263][T20422] internal_create_group+0x31c/0xb40 [ 1758.846548][T20422] ? sysfs_remove_group+0x170/0x170 [ 1758.851835][T20422] ? kernfs_create_link+0x1b6/0x230 [ 1758.857032][T20422] internal_create_groups+0x9d/0x150 [ 1758.862315][T20422] device_add+0x772/0x1ac0 [ 1758.866733][T20422] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1758.873572][T20422] ? kasan_set_track+0x25/0x30 [ 1758.878334][T20422] ? rcu_is_watching+0x12/0xb0 [ 1758.883090][T20422] input_register_device+0x7b6/0x1130 [ 1758.888465][T20422] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1758.894530][T20422] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1758.900435][T20422] ? reacquire_held_locks+0x4b0/0x4b0 [ 1758.905891][T20422] ? bit_wait_timeout+0x160/0x160 [ 1758.912037][T20422] ? __fget_files+0x279/0x410 [ 1758.916710][T20422] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1758.921642][T20422] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1758.927802][T20422] __x64_sys_ioctl+0x18f/0x210 [ 1758.932559][T20422] do_syscall_64+0x38/0xb0 [ 1758.936974][T20422] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1758.942860][T20422] RIP: 0033:0x7f394be7cae9 [ 1758.947265][T20422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1758.966952][T20422] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.975616][T20422] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1758.983600][T20422] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1758.991558][T20422] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x401c5820) [ 1758.999603][T20422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1759.007564][T20422] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1759.015547][T20422] 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 00:31:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000100)) [ 1759.055582][T20438] FAULT_INJECTION: forcing a failure. [ 1759.055582][T20438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.093571][T20438] CPU: 1 PID: 20438 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1759.103683][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1759.113737][T20438] Call Trace: [ 1759.117015][T20438] [ 1759.119947][T20438] dump_stack_lvl+0x125/0x1b0 [ 1759.124635][T20438] should_fail_ex+0x496/0x5b0 [ 1759.129337][T20438] _copy_to_user+0x30/0xb0 [ 1759.133770][T20438] simple_read_from_buffer+0xd0/0x150 [ 1759.139128][T20438] proc_fail_nth_read+0x1b0/0x290 [ 1759.144152][T20438] ? proc_sessionid_read+0x290/0x290 [ 1759.149435][T20438] ? security_file_permission+0xdc/0x100 [ 1759.155071][T20438] ? proc_sessionid_read+0x290/0x290 [ 1759.160359][T20438] vfs_read+0x1ce/0x930 [ 1759.164517][T20438] ? kernel_read+0x1b0/0x1b0 [ 1759.169101][T20438] ? __fget_files+0x279/0x410 [ 1759.173770][T20438] ksys_read+0x12f/0x250 [ 1759.178089][T20438] ? vfs_write+0xe40/0xe40 [ 1759.182491][T20438] ? rcu_is_watching+0x12/0xb0 [ 1759.187245][T20438] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 1759.193222][T20438] do_syscall_64+0x38/0xb0 [ 1759.197628][T20438] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1759.203688][T20438] RIP: 0033:0x7ff11927b78c [ 1759.208092][T20438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1759.227693][T20438] RSP: 002b:00007ff119f260c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1759.236096][T20438] RAX: ffffffffffffffda RBX: 00007ff11939bf80 RCX: 00007ff11927b78c [ 1759.244063][T20438] RDX: 000000000000000f RSI: 00007ff119f26130 RDI: 0000000000000004 00:31:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 00:31:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 20) 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) 00:31:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x801c581f) 00:31:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5525) 00:31:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000100)) (async) [ 1759.252046][T20438] RBP: 00007ff119f26120 R08: 0000000000000000 R09: 0000000000000000 [ 1759.260007][T20438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.267973][T20438] R13: 000000000000000b R14: 00007ff11939bf80 R15: 00007ffc43b2d9e8 [ 1759.275940][T20438] 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 00:31:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8933) 00:31:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x2, &(0x7f0000000040)) 00:31:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000700)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000100)) [ 1759.354389][T20463] FAULT_INJECTION: forcing a failure. [ 1759.354389][T20463] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.403928][T20463] CPU: 0 PID: 20463 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1759.414902][T20463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1759.425311][T20463] Call Trace: [ 1759.428596][T20463] [ 1759.431532][T20463] dump_stack_lvl+0x125/0x1b0 [ 1759.436237][T20463] should_fail_ex+0x496/0x5b0 [ 1759.440929][T20463] should_failslab+0x9/0x20 [ 1759.445452][T20463] kmem_cache_alloc+0x33a/0x3b0 [ 1759.450328][T20463] __kernfs_new_node+0xd3/0x8a0 [ 1759.455187][T20463] ? kernfs_add_one+0x3ca/0x510 [ 1759.460038][T20463] ? kernfs_path_from_node+0x60/0x60 [ 1759.465311][T20463] ? down_write+0x14f/0x200 [ 1759.469810][T20463] ? down_write+0x14f/0x200 [ 1759.474312][T20463] ? up_write+0x1b3/0x510 [ 1759.478654][T20463] kernfs_new_node+0x94/0x110 [ 1759.483342][T20463] __kernfs_create_file+0x53/0x340 [ 1759.488446][T20463] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1759.493815][T20463] internal_create_group+0x31c/0xb40 [ 1759.499301][T20463] ? sysfs_remove_group+0x170/0x170 [ 1759.504506][T20463] ? kernfs_create_link+0x1b6/0x230 [ 1759.510571][T20463] internal_create_groups+0x9d/0x150 [ 1759.515859][T20463] device_add+0x772/0x1ac0 [ 1759.520274][T20463] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1759.527131][T20463] ? kasan_set_track+0x25/0x30 [ 1759.531893][T20463] ? rcu_is_watching+0x12/0xb0 [ 1759.536653][T20463] input_register_device+0x7b6/0x1130 [ 1759.542043][T20463] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1759.548036][T20463] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1759.553780][T20463] ? reacquire_held_locks+0x4b0/0x4b0 [ 1759.559179][T20463] ? bit_wait_timeout+0x160/0x160 [ 1759.564211][T20463] ? __fget_files+0x279/0x410 [ 1759.568898][T20463] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1759.573834][T20463] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1759.579998][T20463] __x64_sys_ioctl+0x18f/0x210 [ 1759.585020][T20463] do_syscall_64+0x38/0xb0 [ 1759.589429][T20463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1759.595427][T20463] RIP: 0033:0x7f394be7cae9 [ 1759.599839][T20463] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1759.619704][T20463] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.628114][T20463] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1759.636075][T20463] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1759.644036][T20463] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x10, &(0x7f0000000040)) 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 00:31:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xff02) 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 00:31:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) [ 1759.651995][T20463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1759.659957][T20463] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1759.667927][T20463] 00:31:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 21) 00:31:15 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3}) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x541b, &(0x7f0000000040)) 00:31:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448c9) 00:31:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 00:31:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086601) 00:31:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400448dd) 00:31:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5421, &(0x7f0000000040)) [ 1759.779893][T20493] FAULT_INJECTION: forcing a failure. [ 1759.779893][T20493] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.815603][T20493] CPU: 1 PID: 20493 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1759.825726][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1759.835780][T20493] Call Trace: [ 1759.839055][T20493] [ 1759.841999][T20493] dump_stack_lvl+0x125/0x1b0 [ 1759.846685][T20493] should_fail_ex+0x496/0x5b0 [ 1759.851482][T20493] should_failslab+0x9/0x20 [ 1759.856066][T20493] kmem_cache_alloc+0x33a/0x3b0 [ 1759.861089][T20493] __kernfs_new_node+0xd3/0x8a0 [ 1759.865937][T20493] ? kernfs_add_one+0x3ca/0x510 [ 1759.870785][T20493] ? kernfs_path_from_node+0x60/0x60 [ 1759.876068][T20493] ? down_write+0x14f/0x200 [ 1759.880569][T20493] ? down_write+0x14f/0x200 [ 1759.885068][T20493] ? up_write+0x1b3/0x510 [ 1759.889394][T20493] kernfs_new_node+0x94/0x110 [ 1759.894084][T20493] __kernfs_create_file+0x53/0x340 [ 1759.899212][T20493] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1759.904582][T20493] internal_create_group+0x31c/0xb40 [ 1759.910041][T20493] ? sysfs_remove_group+0x170/0x170 [ 1759.915237][T20493] ? kernfs_create_link+0x1b6/0x230 [ 1759.920431][T20493] internal_create_groups+0x9d/0x150 [ 1759.925985][T20493] device_add+0x772/0x1ac0 [ 1759.930397][T20493] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1759.937267][T20493] ? kasan_set_track+0x25/0x30 [ 1759.942060][T20493] ? rcu_is_watching+0x12/0xb0 [ 1759.946815][T20493] input_register_device+0x7b6/0x1130 [ 1759.952192][T20493] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1759.958173][T20493] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1759.963887][T20493] ? reacquire_held_locks+0x4b0/0x4b0 [ 1759.969429][T20493] ? bit_wait_timeout+0x160/0x160 [ 1759.974457][T20493] ? __fget_files+0x279/0x410 [ 1759.979131][T20493] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1759.984069][T20493] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1759.990221][T20493] __x64_sys_ioctl+0x18f/0x210 [ 1759.996021][T20493] do_syscall_64+0x38/0xb0 [ 1760.000516][T20493] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.006402][T20493] RIP: 0033:0x7f394be7cae9 [ 1760.010809][T20493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1760.030412][T20493] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.038819][T20493] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1760.046782][T20493] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1760.054738][T20493] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.062713][T20493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.070761][T20493] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1760.079349][T20493] 00:31:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 22) 00:31:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x3}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 00:31:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x801c581f) 00:31:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400454ca) 00:31:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 00:31:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5450, &(0x7f0000000040)) 00:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045564) 00:31:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 00:31:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) [ 1760.210694][T20529] FAULT_INJECTION: forcing a failure. [ 1760.210694][T20529] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.239621][T20529] CPU: 0 PID: 20529 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1760.249798][T20529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 00:31:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) [ 1760.259856][T20529] Call Trace: [ 1760.263153][T20529] [ 1760.266086][T20529] dump_stack_lvl+0x125/0x1b0 [ 1760.270779][T20529] should_fail_ex+0x496/0x5b0 [ 1760.275560][T20529] should_failslab+0x9/0x20 [ 1760.280060][T20529] kmem_cache_alloc+0x33a/0x3b0 [ 1760.284900][T20529] __kernfs_new_node+0xd3/0x8a0 [ 1760.289735][T20529] ? kernfs_add_one+0x3ca/0x510 [ 1760.294593][T20529] ? kernfs_path_from_node+0x60/0x60 [ 1760.299910][T20529] ? down_write+0x14f/0x200 [ 1760.304401][T20529] ? down_write+0x14f/0x200 [ 1760.308888][T20529] ? up_write+0x1b3/0x510 [ 1760.313209][T20529] kernfs_new_node+0x94/0x110 [ 1760.317897][T20529] __kernfs_create_file+0x53/0x340 [ 1760.322996][T20529] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1760.328373][T20529] internal_create_group+0x31c/0xb40 [ 1760.333668][T20529] ? sysfs_remove_group+0x170/0x170 [ 1760.338852][T20529] ? kernfs_create_link+0x1b6/0x230 [ 1760.344041][T20529] internal_create_groups+0x9d/0x150 [ 1760.349351][T20529] device_add+0x772/0x1ac0 [ 1760.353800][T20529] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1760.360634][T20529] ? kasan_set_track+0x25/0x30 [ 1760.365386][T20529] ? rcu_is_watching+0x12/0xb0 [ 1760.370139][T20529] input_register_device+0x7b6/0x1130 [ 1760.375515][T20529] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1760.381485][T20529] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1760.387219][T20529] ? reacquire_held_locks+0x4b0/0x4b0 [ 1760.392577][T20529] ? bit_wait_timeout+0x160/0x160 [ 1760.397588][T20529] ? __fget_files+0x279/0x410 [ 1760.402260][T20529] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1760.407186][T20529] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1760.413332][T20529] __x64_sys_ioctl+0x18f/0x210 [ 1760.418125][T20529] do_syscall_64+0x38/0xb0 [ 1760.422531][T20529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.428409][T20529] RIP: 0033:0x7f394be7cae9 [ 1760.432806][T20529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1760.452410][T20529] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:31:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 23) 00:31:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) [ 1760.460808][T20529] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1760.468851][T20529] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1760.476809][T20529] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.484763][T20529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.492721][T20529] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1760.500925][T20529] 00:31:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 00:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045565) 00:31:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5451, &(0x7f0000000040)) 00:31:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000040)) 00:31:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5452, &(0x7f0000000040)) 00:31:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 00:31:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045566) 00:31:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x2, 0x4, 0x2}}, 0x2e) 00:31:16 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x5460, &(0x7f0000000040)) [ 1760.625119][T20562] input: syz0 as /devices/virtual/input/input12783 [ 1760.657657][T20568] FAULT_INJECTION: forcing a failure. [ 1760.657657][T20568] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.671383][T20568] CPU: 0 PID: 20568 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1760.681523][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1760.691585][T20568] Call Trace: [ 1760.694851][T20568] [ 1760.697771][T20568] dump_stack_lvl+0x125/0x1b0 [ 1760.702476][T20568] should_fail_ex+0x496/0x5b0 [ 1760.707156][T20568] should_failslab+0x9/0x20 [ 1760.711683][T20568] kmem_cache_alloc+0x33a/0x3b0 [ 1760.716525][T20568] ? rcu_is_watching+0x12/0xb0 [ 1760.721273][T20568] __kernfs_new_node+0xd3/0x8a0 [ 1760.727069][T20568] ? kernfs_path_from_node+0x60/0x60 [ 1760.732386][T20568] ? kernfs_link_sibling+0x3f5/0x540 [ 1760.737719][T20568] ? rcu_is_watching+0x12/0xb0 [ 1760.742468][T20568] ? lock_release+0x4bf/0x680 [ 1760.747133][T20568] ? kernfs_add_one+0x3ca/0x510 [ 1760.751972][T20568] ? reacquire_held_locks+0x4b0/0x4b0 [ 1760.757332][T20568] ? down_write+0x14f/0x200 [ 1760.761826][T20568] kernfs_new_node+0x94/0x110 [ 1760.766487][T20568] __kernfs_create_file+0x53/0x340 [ 1760.771599][T20568] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1760.776981][T20568] internal_create_group+0x31c/0xb40 [ 1760.782389][T20568] ? sysfs_remove_group+0x170/0x170 [ 1760.787579][T20568] ? kernfs_create_link+0x1b6/0x230 [ 1760.792772][T20568] internal_create_groups+0x9d/0x150 [ 1760.798775][T20568] device_add+0x772/0x1ac0 [ 1760.803195][T20568] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1760.810031][T20568] ? kasan_set_track+0x25/0x30 [ 1760.814791][T20568] ? rcu_is_watching+0x12/0xb0 [ 1760.819544][T20568] input_register_device+0x7b6/0x1130 [ 1760.824931][T20568] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1760.830912][T20568] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1760.836634][T20568] ? reacquire_held_locks+0x4b0/0x4b0 [ 1760.841998][T20568] ? bit_wait_timeout+0x160/0x160 [ 1760.847014][T20568] ? __fget_files+0x279/0x410 [ 1760.851682][T20568] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1760.856631][T20568] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1760.862801][T20568] __x64_sys_ioctl+0x18f/0x210 [ 1760.867574][T20568] do_syscall_64+0x38/0xb0 [ 1760.871978][T20568] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1760.877866][T20568] RIP: 0033:0x7f394be7cae9 [ 1760.882282][T20568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1760.901894][T20568] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.910290][T20568] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1760.918259][T20568] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045567) 00:31:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 24) 00:31:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8933, &(0x7f0000000040)) 00:31:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x2, 0x4, 0x2}}, 0x2e) [ 1760.926227][T20568] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.934206][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.942266][T20568] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1760.950239][T20568] 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xaf01, &(0x7f0000000040)) [ 1761.004615][T20581] FAULT_INJECTION: forcing a failure. [ 1761.004615][T20581] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.027982][T20573] input: syz0 as /devices/virtual/input/input12785 [ 1761.029277][T20581] CPU: 0 PID: 20581 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1761.044571][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1761.054627][T20581] Call Trace: [ 1761.058000][T20581] [ 1761.060944][T20581] dump_stack_lvl+0x125/0x1b0 [ 1761.065641][T20581] should_fail_ex+0x496/0x5b0 [ 1761.070341][T20581] should_failslab+0x9/0x20 [ 1761.076441][T20581] kmem_cache_alloc+0x33a/0x3b0 [ 1761.076473][T20581] ? rcu_is_watching+0x12/0xb0 [ 1761.076496][T20581] __kernfs_new_node+0xd3/0x8a0 [ 1761.090930][T20581] ? kernfs_path_from_node+0x60/0x60 [ 1761.090953][T20581] ? kernfs_link_sibling+0x3f5/0x540 [ 1761.101508][T20581] ? rcu_is_watching+0x12/0xb0 [ 1761.106265][T20581] ? lock_release+0x4bf/0x680 [ 1761.110963][T20581] ? kernfs_add_one+0x3ca/0x510 [ 1761.115894][T20581] ? reacquire_held_locks+0x4b0/0x4b0 [ 1761.121283][T20581] ? down_write+0x14f/0x200 [ 1761.125783][T20581] kernfs_new_node+0x94/0x110 [ 1761.130475][T20581] __kernfs_create_file+0x53/0x340 [ 1761.135583][T20581] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1761.140963][T20581] internal_create_group+0x31c/0xb40 [ 1761.146250][T20581] ? sysfs_remove_group+0x170/0x170 [ 1761.151447][T20581] ? kernfs_create_link+0x1b6/0x230 [ 1761.156682][T20581] internal_create_groups+0x9d/0x150 [ 1761.161966][T20581] device_add+0x772/0x1ac0 [ 1761.166376][T20581] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1761.173238][T20581] ? kasan_set_track+0x25/0x30 [ 1761.178178][T20581] ? rcu_is_watching+0x12/0xb0 [ 1761.182953][T20581] input_register_device+0x7b6/0x1130 [ 1761.188350][T20581] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1761.194355][T20581] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1761.200075][T20581] ? reacquire_held_locks+0x4b0/0x4b0 [ 1761.205468][T20581] ? bit_wait_timeout+0x160/0x160 [ 1761.210496][T20581] ? __fget_files+0x279/0x410 [ 1761.215172][T20581] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1761.220106][T20581] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1761.226363][T20581] __x64_sys_ioctl+0x18f/0x210 [ 1761.231129][T20581] do_syscall_64+0x38/0xb0 [ 1761.235541][T20581] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.241451][T20581] RIP: 0033:0x7f394be7cae9 [ 1761.245892][T20581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1761.266013][T20581] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.274418][T20581] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1761.282387][T20581] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1761.290362][T20581] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 00:31:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x2, 0x4, 0x2}}, 0x2e) 00:31:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xfffe}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045568) 00:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400448c9, &(0x7f0000000040)) [ 1761.298412][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1761.306375][T20581] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1761.314347][T20581] 00:31:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 25) 00:31:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400448dd, &(0x7f0000000040)) 00:31:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40045569) [ 1761.370933][T20599] input: syz0 as /devices/virtual/input/input12790 [ 1761.410345][T20603] input: syz0 as /devices/virtual/input/input12792 00:31:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xfffe}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x400454ca, &(0x7f0000000040)) 00:31:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) [ 1761.469338][T20606] input: syz0 as /devices/virtual/input/input12793 00:31:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x100000001) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40049409, &(0x7f0000000040)) 00:31:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556a) [ 1761.521191][T20615] input: syz0 as /devices/virtual/input/input12795 [ 1761.555111][T20612] FAULT_INJECTION: forcing a failure. [ 1761.555111][T20612] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.555368][T20622] input: syz0 as /devices/virtual/input/input12797 [ 1761.575132][T20612] CPU: 0 PID: 20612 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1761.585210][T20612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1761.595262][T20612] Call Trace: [ 1761.598530][T20612] [ 1761.601544][T20612] dump_stack_lvl+0x125/0x1b0 [ 1761.606307][T20612] should_fail_ex+0x496/0x5b0 [ 1761.610986][T20612] should_failslab+0x9/0x20 [ 1761.615503][T20612] kmem_cache_alloc+0x33a/0x3b0 [ 1761.620377][T20612] __kernfs_new_node+0xd3/0x8a0 [ 1761.625239][T20612] ? kernfs_add_one+0x3ca/0x510 [ 1761.630093][T20612] ? kernfs_path_from_node+0x60/0x60 [ 1761.635377][T20612] ? down_write+0x14f/0x200 [ 1761.639885][T20612] ? down_write+0x14f/0x200 [ 1761.644742][T20612] ? up_write+0x1b3/0x510 [ 1761.649073][T20612] kernfs_new_node+0x94/0x110 [ 1761.653749][T20612] __kernfs_create_file+0x53/0x340 [ 1761.658883][T20612] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1761.664264][T20612] internal_create_group+0x31c/0xb40 [ 1761.669555][T20612] ? sysfs_remove_group+0x170/0x170 [ 1761.674751][T20612] ? kernfs_create_link+0x1b6/0x230 [ 1761.679952][T20612] internal_create_groups+0x9d/0x150 [ 1761.685265][T20612] device_add+0x772/0x1ac0 [ 1761.689678][T20612] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1761.696523][T20612] ? kasan_set_track+0x25/0x30 [ 1761.701300][T20612] ? rcu_is_watching+0x12/0xb0 [ 1761.706065][T20612] input_register_device+0x7b6/0x1130 [ 1761.711530][T20612] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1761.717599][T20612] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1761.723318][T20612] ? reacquire_held_locks+0x4b0/0x4b0 [ 1761.728697][T20612] ? bit_wait_timeout+0x160/0x160 [ 1761.733750][T20612] ? __fget_files+0x279/0x410 [ 1761.738434][T20612] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1761.743397][T20612] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1761.749570][T20612] __x64_sys_ioctl+0x18f/0x210 [ 1761.754439][T20612] do_syscall_64+0x38/0xb0 [ 1761.758858][T20612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1761.764775][T20612] RIP: 0033:0x7f394be7cae9 [ 1761.769208][T20612] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1761.788828][T20612] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.797269][T20612] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1761.805237][T20612] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1761.813206][T20612] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1761.821174][T20612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1761.829148][T20612] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1761.837149][T20612] 00:31:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 00:31:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 26) 00:31:17 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f0000000040)) 00:31:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xfffe}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xfffe}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) [ 1761.869837][T20624] input: syz0 as /devices/virtual/input/input12799 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x100000001) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) [ 1761.952317][T20632] FAULT_INJECTION: forcing a failure. [ 1761.952317][T20632] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.970723][T20637] input: syz0 as /devices/virtual/input/input12803 [ 1761.990819][T20632] CPU: 1 PID: 20632 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1761.993060][T20642] input: syz0 as /devices/virtual/input/input12804 [ 1762.000915][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1762.000928][T20632] Call Trace: [ 1762.000936][T20632] [ 1762.000943][T20632] dump_stack_lvl+0x125/0x1b0 [ 1762.000966][T20632] should_fail_ex+0x496/0x5b0 [ 1762.000996][T20632] should_failslab+0x9/0x20 [ 1762.001015][T20632] kmem_cache_alloc+0x33a/0x3b0 [ 1762.001044][T20632] __kernfs_new_node+0xd3/0x8a0 [ 1762.001063][T20632] ? kernfs_add_one+0x3ca/0x510 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af61, &(0x7f0000000040)) [ 1762.001080][T20632] ? kernfs_path_from_node+0x60/0x60 [ 1762.001098][T20632] ? down_write+0x14f/0x200 [ 1762.017634][T20632] ? down_write+0x14f/0x200 [ 1762.041392][T20647] input: syz0 as /devices/virtual/input/input12807 [ 1762.042484][T20632] ? up_write+0x1b3/0x510 [ 1762.078085][T20632] kernfs_new_node+0x94/0x110 [ 1762.082784][T20632] __kernfs_create_file+0x53/0x340 [ 1762.087927][T20632] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1762.093318][T20632] internal_create_group+0x31c/0xb40 [ 1762.098746][T20632] ? sysfs_remove_group+0x170/0x170 [ 1762.104057][T20632] ? kernfs_create_link+0x1b6/0x230 [ 1762.109246][T20632] internal_create_groups+0x9d/0x150 [ 1762.114547][T20632] device_add+0x772/0x1ac0 [ 1762.118959][T20632] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1762.125812][T20632] ? kasan_set_track+0x25/0x30 [ 1762.130596][T20632] ? rcu_is_watching+0x12/0xb0 [ 1762.135353][T20632] input_register_device+0x7b6/0x1130 [ 1762.140738][T20632] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1762.146717][T20632] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1762.152467][T20632] ? reacquire_held_locks+0x4b0/0x4b0 [ 1762.157826][T20632] ? bit_wait_timeout+0x160/0x160 [ 1762.162983][T20632] ? __fget_files+0x279/0x410 [ 1762.167685][T20632] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1762.172635][T20632] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1762.178777][T20632] __x64_sys_ioctl+0x18f/0x210 [ 1762.183532][T20632] do_syscall_64+0x38/0xb0 [ 1762.187937][T20632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.193825][T20632] RIP: 0033:0x7f394be7cae9 [ 1762.198231][T20632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1762.217858][T20632] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.228088][T20632] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1762.236052][T20632] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1762.244095][T20632] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 00:31:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 27) 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40086602, &(0x7f0000000040)) [ 1762.252857][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.260821][T20632] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1762.268788][T20632] 00:31:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x800}, 'syz1\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2c) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x100000001) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x100000001) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) (async) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 00:31:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x800}, 'syz1\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2c) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1762.344969][T20658] FAULT_INJECTION: forcing a failure. [ 1762.344969][T20658] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.363888][T20662] input: syz0 as /devices/virtual/input/input12811 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af00, &(0x7f0000000040)) 00:31:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0xfffc}, 'syz0\x00', 0x34}) keyctl$session_to_parent(0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) [ 1762.463160][T20658] CPU: 1 PID: 20658 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1762.465980][T20673] input: syz0 as /devices/virtual/input/input12821 [ 1762.473270][T20658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1762.473283][T20658] Call Trace: [ 1762.473290][T20658] [ 1762.473297][T20658] dump_stack_lvl+0x125/0x1b0 [ 1762.493106][T20658] should_fail_ex+0x496/0x5b0 [ 1762.505439][T20658] should_failslab+0x9/0x20 [ 1762.510128][T20658] kmem_cache_alloc+0x33a/0x3b0 [ 1762.515003][T20658] __kernfs_new_node+0xd3/0x8a0 [ 1762.519867][T20658] ? kernfs_add_one+0x3ca/0x510 [ 1762.524729][T20658] ? kernfs_path_from_node+0x60/0x60 [ 1762.530020][T20658] ? down_write+0x14f/0x200 [ 1762.534539][T20658] ? down_write+0x14f/0x200 [ 1762.539050][T20658] ? up_write+0x1b3/0x510 [ 1762.543401][T20658] kernfs_new_node+0x94/0x110 [ 1762.548087][T20658] __kernfs_create_file+0x53/0x340 [ 1762.548117][T20658] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1762.548147][T20658] internal_create_group+0x31c/0xb40 [ 1762.564030][T20658] ? sysfs_remove_group+0x170/0x170 [ 1762.569330][T20658] ? kernfs_create_link+0x1b6/0x230 [ 1762.574515][T20658] internal_create_groups+0x9d/0x150 [ 1762.579791][T20658] device_add+0x772/0x1ac0 [ 1762.584196][T20658] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1762.591118][T20658] ? kasan_set_track+0x25/0x30 [ 1762.595878][T20658] ? rcu_is_watching+0x12/0xb0 [ 1762.600651][T20658] input_register_device+0x7b6/0x1130 [ 1762.606031][T20658] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1762.612024][T20658] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1762.617733][T20658] ? reacquire_held_locks+0x4b0/0x4b0 [ 1762.623109][T20658] ? bit_wait_timeout+0x160/0x160 [ 1762.628147][T20658] ? __fget_files+0x279/0x410 [ 1762.632818][T20658] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1762.637743][T20658] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1762.643894][T20658] __x64_sys_ioctl+0x18f/0x210 [ 1762.648666][T20658] do_syscall_64+0x38/0xb0 [ 1762.653092][T20658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1762.658980][T20658] RIP: 0033:0x7f394be7cae9 [ 1762.663380][T20658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1762.682976][T20658] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.691372][T20658] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1762.699355][T20658] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 28) 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af03, &(0x7f0000000040)) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x800}, 'syz1\x00'}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x800}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x2c) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40049409) 00:31:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0xfffc}, 'syz0\x00', 0x34}) (async) keyctl$session_to_parent(0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1762.707313][T20658] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1762.715275][T20658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1762.723266][T20658] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1762.731525][T20658] 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000040)) 00:31:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 00:31:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x500000b, 0x130, 0xffffffffffffffff, 0x553) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1762.801132][T20690] input: syz0 as /devices/virtual/input/input12832 00:31:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0xfffc}, 'syz0\x00', 0x34}) keyctl$session_to_parent(0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) (async) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0xfffc}, 'syz0\x00', 0x34}) (async) keyctl$session_to_parent(0x12) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 00:31:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af10, &(0x7f0000000040)) [ 1762.864223][T20698] FAULT_INJECTION: forcing a failure. [ 1762.864223][T20698] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.898544][T20708] input: syz0 as /devices/virtual/input/input12839 [ 1762.901653][T20698] CPU: 1 PID: 20698 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1762.915137][T20698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1762.922276][T20707] input: syz0 as /devices/virtual/input/input12842 [ 1762.925282][T20698] Call Trace: [ 1762.925291][T20698] [ 1762.938129][T20698] dump_stack_lvl+0x125/0x1b0 [ 1762.942828][T20698] should_fail_ex+0x496/0x5b0 [ 1762.947529][T20698] should_failslab+0x9/0x20 [ 1762.952041][T20698] kmem_cache_alloc+0x33a/0x3b0 [ 1762.956917][T20698] __kernfs_new_node+0xd3/0x8a0 [ 1762.961782][T20698] ? kernfs_add_one+0x3ca/0x510 [ 1762.966623][T20698] ? kernfs_path_from_node+0x60/0x60 [ 1762.971920][T20698] ? down_write+0x14f/0x200 [ 1762.976427][T20698] ? down_write+0x14f/0x200 [ 1762.980925][T20698] ? up_write+0x1b3/0x510 [ 1762.985262][T20698] kernfs_new_node+0x94/0x110 [ 1762.989932][T20698] __kernfs_create_file+0x53/0x340 [ 1762.995066][T20698] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1763.000433][T20698] internal_create_group+0x31c/0xb40 [ 1763.005721][T20698] ? sysfs_remove_group+0x170/0x170 [ 1763.010914][T20698] ? kernfs_create_link+0x1b6/0x230 [ 1763.016103][T20698] internal_create_groups+0x9d/0x150 [ 1763.021385][T20698] device_add+0x772/0x1ac0 [ 1763.025793][T20698] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1763.032632][T20698] ? kasan_set_track+0x25/0x30 [ 1763.037391][T20698] ? rcu_is_watching+0x12/0xb0 [ 1763.042145][T20698] input_register_device+0x7b6/0x1130 [ 1763.047519][T20698] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1763.053503][T20698] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1763.059228][T20698] ? reacquire_held_locks+0x4b0/0x4b0 [ 1763.064597][T20698] ? bit_wait_timeout+0x160/0x160 [ 1763.069613][T20698] ? __fget_files+0x279/0x410 [ 1763.074288][T20698] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1763.079223][T20698] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1763.085374][T20698] __x64_sys_ioctl+0x18f/0x210 [ 1763.090136][T20698] do_syscall_64+0x38/0xb0 [ 1763.094541][T20698] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1763.100425][T20698] RIP: 0033:0x7f394be7cae9 [ 1763.104826][T20698] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1763.124610][T20698] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.133033][T20698] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1763.141003][T20698] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1763.148970][T20698] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1763.156935][T20698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:31:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 29) 00:31:19 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) 00:31:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af12, &(0x7f0000000040)) 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40086602) 00:31:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x500000b, 0x130, 0xffffffffffffffff, 0x553) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x500000b, 0x130, 0xffffffffffffffff, 0x553) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) [ 1763.164899][T20698] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1763.172871][T20698] 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 00:31:19 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x40186366) [ 1763.223673][T20725] input: syz0 as /devices/virtual/input/input12843 00:31:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x500000b, 0x130, 0xffffffffffffffff, 0x553) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 32) 00:31:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x2, 0x1, {0x55, 0x5, 0x20, {0x8000, 0x3ff}, {0x1, 0x1}, @rumble={0xd2, 0xfffd}}, {0x56, 0x80, 0x2, {0xfafb, 0x401}, {0x6, 0x1ff}, @ramp={0x6a, 0x1ff, {0x4, 0x0, 0x0, 0x9}}}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:19 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) 00:31:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af13, &(0x7f0000000040)) [ 1763.332306][T20743] input: syz0 as /devices/virtual/input/input12846 [ 1763.341640][T20744] input: syz0 as /devices/virtual/input/input12848 [ 1763.355858][T20737] FAULT_INJECTION: forcing a failure. [ 1763.355858][T20737] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.408054][T20737] CPU: 1 PID: 20737 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1763.418338][T20737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1763.428399][T20737] Call Trace: [ 1763.431685][T20737] [ 1763.434620][T20737] dump_stack_lvl+0x125/0x1b0 [ 1763.439311][T20737] should_fail_ex+0x496/0x5b0 [ 1763.444011][T20737] should_failslab+0x9/0x20 [ 1763.448527][T20737] kmem_cache_alloc+0x33a/0x3b0 [ 1763.453421][T20737] __kernfs_new_node+0xd3/0x8a0 [ 1763.458264][T20737] ? kernfs_add_one+0x3ca/0x510 [ 1763.463191][T20737] ? kernfs_path_from_node+0x60/0x60 [ 1763.468483][T20737] ? down_write+0x14f/0x200 [ 1763.472974][T20737] ? down_write+0x14f/0x200 [ 1763.477461][T20737] ? up_write+0x1b3/0x510 [ 1763.481777][T20737] kernfs_new_node+0x94/0x110 [ 1763.486460][T20737] __kernfs_create_file+0x53/0x340 [ 1763.491557][T20737] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1763.496919][T20737] internal_create_group+0x31c/0xb40 [ 1763.502199][T20737] ? sysfs_remove_group+0x170/0x170 [ 1763.507413][T20737] ? kernfs_create_link+0x1b6/0x230 [ 1763.512630][T20737] internal_create_groups+0x9d/0x150 [ 1763.517937][T20737] device_add+0x772/0x1ac0 [ 1763.522338][T20737] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1763.529172][T20737] ? kasan_set_track+0x25/0x30 [ 1763.533927][T20737] ? rcu_is_watching+0x12/0xb0 [ 1763.538707][T20737] input_register_device+0x7b6/0x1130 [ 1763.544079][T20737] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1763.550078][T20737] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1763.555793][T20737] ? reacquire_held_locks+0x4b0/0x4b0 [ 1763.561186][T20737] ? bit_wait_timeout+0x160/0x160 [ 1763.566203][T20737] ? __fget_files+0x279/0x410 [ 1763.570885][T20737] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1763.575821][T20737] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1763.582008][T20737] __x64_sys_ioctl+0x18f/0x210 [ 1763.586781][T20737] do_syscall_64+0x38/0xb0 [ 1763.591183][T20737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1763.597059][T20737] RIP: 0033:0x7f394be7cae9 [ 1763.601455][T20737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1763.621049][T20737] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.629464][T20737] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1763.637426][T20737] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1763.645387][T20737] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 30) 00:31:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x2, 0x1, {0x55, 0x5, 0x20, {0x8000, 0x3ff}, {0x1, 0x1}, @rumble={0xd2, 0xfffd}}, {0x56, 0x80, 0x2, {0xfafb, 0x401}, {0x6, 0x1ff}, @ramp={0x6a, 0x1ff, {0x4, 0x0, 0x0, 0x9}}}}) (async) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x2, 0x1, {0x55, 0x5, 0x20, {0x8000, 0x3ff}, {0x1, 0x1}, @rumble={0xd2, 0xfffd}}, {0x56, 0x80, 0x2, {0xfafb, 0x401}, {0x6, 0x1ff}, @ramp={0x6a, 0x1ff, {0x4, 0x0, 0x0, 0x9}}}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x401c5820) 00:31:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x0, 0x9, {0x3, 0x81, 0x20, {0xf535, 0x3ff}, {0x1, 0x474}, @cond=[{0x0, 0x54, 0x200, 0x1, 0x1000, 0x3f}, {0x5, 0x2, 0x200, 0x60b, 0x2, 0x401}]}, {0x52, 0x5, 0x6, {0x6, 0x54}, {0x6, 0x4}, @period={0x5b, 0x0, 0xffff, 0x9b4, 0x7, {0x400, 0x2, 0x3, 0xa7}, 0x6, &(0x7f00000000c0)=[0x2, 0x3, 0xa3, 0x5, 0x2, 0xe546]}}}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3}, 'syz0\x00'}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f0000000040)) [ 1763.653339][T20737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.661293][T20737] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1763.669260][T20737] 00:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x4020940d) 00:31:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f0000000040)) 00:31:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x0, 0x9, {0x3, 0x81, 0x20, {0xf535, 0x3ff}, {0x1, 0x474}, @cond=[{0x0, 0x54, 0x200, 0x1, 0x1000, 0x3f}, {0x5, 0x2, 0x200, 0x60b, 0x2, 0x401}]}, {0x52, 0x5, 0x6, {0x6, 0x54}, {0x6, 0x4}, @period={0x5b, 0x0, 0xffff, 0x9b4, 0x7, {0x400, 0x2, 0x3, 0xa7}, 0x6, &(0x7f00000000c0)=[0x2, 0x3, 0xa3, 0x5, 0x2, 0xe546]}}}) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3}, 'syz0\x00'}) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1763.719888][T20759] input: syz0 as /devices/virtual/input/input12852 [ 1763.723990][T20760] FAULT_INJECTION: forcing a failure. [ 1763.723990][T20760] name failslab, interval 1, probability 0, space 0, times 0 00:31:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) [ 1763.767503][T20760] CPU: 1 PID: 20760 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1763.777697][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1763.787755][T20760] Call Trace: [ 1763.791037][T20760] [ 1763.793976][T20760] dump_stack_lvl+0x125/0x1b0 [ 1763.798658][T20760] should_fail_ex+0x496/0x5b0 [ 1763.803352][T20760] should_failslab+0x9/0x20 [ 1763.807949][T20760] kmem_cache_alloc+0x33a/0x3b0 [ 1763.812833][T20760] __kernfs_new_node+0xd3/0x8a0 00:31:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 1763.817703][T20760] ? kernfs_add_one+0x3ca/0x510 [ 1763.822573][T20760] ? kernfs_path_from_node+0x60/0x60 [ 1763.827883][T20760] ? down_write+0x14f/0x200 [ 1763.832420][T20760] ? down_write+0x14f/0x200 [ 1763.836932][T20760] ? up_write+0x1b3/0x510 [ 1763.841269][T20760] kernfs_new_node+0x94/0x110 [ 1763.845963][T20760] __kernfs_create_file+0x53/0x340 [ 1763.851080][T20760] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1763.856446][T20760] internal_create_group+0x31c/0xb40 [ 1763.861763][T20760] ? sysfs_remove_group+0x170/0x170 [ 1763.866960][T20760] ? kernfs_create_link+0x1b6/0x230 [ 1763.872155][T20760] internal_create_groups+0x9d/0x150 [ 1763.877466][T20760] device_add+0x772/0x1ac0 [ 1763.881873][T20760] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1763.888708][T20760] ? kasan_set_track+0x25/0x30 [ 1763.893483][T20760] ? rcu_is_watching+0x12/0xb0 [ 1763.898250][T20760] input_register_device+0x7b6/0x1130 [ 1763.903621][T20760] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1763.909777][T20760] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1763.915497][T20760] ? reacquire_held_locks+0x4b0/0x4b0 [ 1763.920889][T20760] ? bit_wait_timeout+0x160/0x160 [ 1763.925905][T20760] ? __fget_files+0x279/0x410 [ 1763.930579][T20760] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1763.935508][T20760] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1763.941656][T20760] __x64_sys_ioctl+0x18f/0x210 [ 1763.946431][T20760] do_syscall_64+0x38/0xb0 [ 1763.950833][T20760] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1763.956720][T20760] RIP: 0033:0x7f394be7cae9 [ 1763.961124][T20760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1763.980725][T20760] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.989131][T20760] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1763.997088][T20760] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1764.005130][T20760] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1764.013090][T20760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.021047][T20760] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1764.029015][T20760] 00:31:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 31) 00:31:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x2, 0x1, {0x55, 0x5, 0x20, {0x8000, 0x3ff}, {0x1, 0x1}, @rumble={0xd2, 0xfffd}}, {0x56, 0x80, 0x2, {0xfafb, 0x401}, {0x6, 0x1ff}, @ramp={0x6a, 0x1ff, {0x4, 0x0, 0x0, 0x9}}}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000100)={0x0, 0x9, {0x3, 0x81, 0x20, {0xf535, 0x3ff}, {0x1, 0x474}, @cond=[{0x0, 0x54, 0x200, 0x1, 0x1000, 0x3f}, {0x5, 0x2, 0x200, 0x60b, 0x2, 0x401}]}, {0x52, 0x5, 0x6, {0x6, 0x54}, {0x6, 0x4}, @period={0x5b, 0x0, 0xffff, 0x9b4, 0x7, {0x400, 0x2, 0x3, 0xa7}, 0x6, &(0x7f00000000c0)=[0x2, 0x3, 0xa3, 0x5, 0x2, 0xe546]}}}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3}, 'syz0\x00'}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 00:31:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af22, &(0x7f0000000040)) 00:31:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af23, &(0x7f0000000040)) [ 1764.073566][T20764] input: syz0 as /devices/virtual/input/input12855 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 00:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) [ 1764.139811][T20789] input: syz0 as /devices/virtual/input/input12861 [ 1764.160564][T20792] FAULT_INJECTION: forcing a failure. [ 1764.160564][T20792] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.193810][T20792] CPU: 0 PID: 20792 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1764.203940][T20792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1764.208465][T20799] input: syz0 as /devices/virtual/input/input12864 [ 1764.213989][T20792] Call Trace: [ 1764.213998][T20792] [ 1764.214005][T20792] dump_stack_lvl+0x125/0x1b0 [ 1764.226676][T20792] should_fail_ex+0x496/0x5b0 [ 1764.236031][T20792] should_failslab+0x9/0x20 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086301) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x80086601) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x801c581f) [ 1764.240536][T20792] kmem_cache_alloc+0x33a/0x3b0 [ 1764.245406][T20792] __kernfs_new_node+0xd3/0x8a0 [ 1764.250268][T20792] ? kernfs_add_one+0x3ca/0x510 [ 1764.255127][T20792] ? kernfs_path_from_node+0x60/0x60 [ 1764.260418][T20792] ? down_write+0x14f/0x200 [ 1764.264931][T20792] ? down_write+0x14f/0x200 [ 1764.269445][T20792] ? up_write+0x1b3/0x510 [ 1764.273789][T20792] kernfs_new_node+0x94/0x110 [ 1764.278479][T20792] __kernfs_create_file+0x53/0x340 [ 1764.283599][T20792] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1764.289006][T20792] internal_create_group+0x31c/0xb40 [ 1764.294304][T20792] ? sysfs_remove_group+0x170/0x170 [ 1764.299521][T20792] ? kernfs_create_link+0x1b6/0x230 [ 1764.304715][T20792] internal_create_groups+0x9d/0x150 [ 1764.310081][T20792] device_add+0x772/0x1ac0 [ 1764.314487][T20792] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1764.321323][T20792] ? kasan_set_track+0x25/0x30 [ 1764.326084][T20792] ? rcu_is_watching+0x12/0xb0 [ 1764.330837][T20792] input_register_device+0x7b6/0x1130 [ 1764.336469][T20792] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1764.342451][T20792] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1764.348166][T20792] ? reacquire_held_locks+0x4b0/0x4b0 [ 1764.353530][T20792] ? bit_wait_timeout+0x160/0x160 [ 1764.358549][T20792] ? __fget_files+0x279/0x410 [ 1764.363221][T20792] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1764.368151][T20792] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1764.374297][T20792] __x64_sys_ioctl+0x18f/0x210 [ 1764.379049][T20792] do_syscall_64+0x38/0xb0 [ 1764.383458][T20792] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1764.389341][T20792] RIP: 0033:0x7f394be7cae9 [ 1764.393744][T20792] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1764.413346][T20792] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.421749][T20792] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1764.429707][T20792] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1764.437664][T20792] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1764.445626][T20792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.453588][T20792] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1764.461557][T20792] 00:31:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 32) [ 1764.522423][T20809] FAULT_INJECTION: forcing a failure. [ 1764.522423][T20809] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.536533][T20809] CPU: 1 PID: 20809 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1764.546618][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1764.556657][T20809] Call Trace: [ 1764.559920][T20809] [ 1764.562839][T20809] dump_stack_lvl+0x125/0x1b0 [ 1764.567505][T20809] should_fail_ex+0x496/0x5b0 [ 1764.572185][T20809] should_failslab+0x9/0x20 [ 1764.576687][T20809] kmem_cache_alloc+0x33a/0x3b0 [ 1764.581522][T20809] __kernfs_new_node+0xd3/0x8a0 [ 1764.586359][T20809] ? kernfs_path_from_node+0x60/0x60 [ 1764.591624][T20809] ? kernfs_add_one+0x17f/0x510 [ 1764.596455][T20809] ? __kernfs_create_file+0x29d/0x340 [ 1764.601810][T20809] kernfs_create_dir_ns+0x9a/0x210 [ 1764.606909][T20809] internal_create_group+0x780/0xb40 [ 1764.612183][T20809] ? sysfs_remove_group+0x170/0x170 [ 1764.617365][T20809] ? sysfs_remove_group+0x170/0x170 [ 1764.622634][T20809] ? panel_show+0xf0/0xf0 [ 1764.626970][T20809] ? bus_to_subsys+0x129/0x160 [ 1764.631715][T20809] dpm_sysfs_add+0x7c/0x280 [ 1764.636200][T20809] device_add+0x9e7/0x1ac0 [ 1764.640601][T20809] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1764.647440][T20809] ? kasan_set_track+0x25/0x30 [ 1764.652192][T20809] ? rcu_is_watching+0x12/0xb0 [ 1764.656942][T20809] input_register_device+0x7b6/0x1130 [ 1764.662322][T20809] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1764.668300][T20809] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1764.674034][T20809] ? reacquire_held_locks+0x4b0/0x4b0 [ 1764.679395][T20809] ? bit_wait_timeout+0x160/0x160 [ 1764.684432][T20809] ? __fget_files+0x279/0x410 [ 1764.689093][T20809] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1764.694014][T20809] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1764.700151][T20809] __x64_sys_ioctl+0x18f/0x210 [ 1764.704902][T20809] do_syscall_64+0x38/0xb0 [ 1764.709332][T20809] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1764.715210][T20809] RIP: 0033:0x7f394be7cae9 [ 1764.719605][T20809] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1764.740152][T20809] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.748545][T20809] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1764.756519][T20809] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1764.764471][T20809] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 00:31:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x25d) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) 00:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af24, &(0x7f0000000040)) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 33) [ 1764.772430][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.780380][T20809] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1764.788364][T20809] 00:31:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 00:31:20 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af25, &(0x7f0000000040)) 00:31:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x25d) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x2}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x25d) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) (async) 00:31:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) [ 1764.829315][T20816] input: syz0 as /devices/virtual/input/input12871 [ 1764.892215][T20823] FAULT_INJECTION: forcing a failure. [ 1764.892215][T20823] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.928097][T20831] input: syz0 as /devices/virtual/input/input12876 00:31:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc0189436) [ 1764.941265][T20832] input: syz0 as /devices/virtual/input/input12877 [ 1764.949933][T20823] CPU: 1 PID: 20823 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1764.960012][T20823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1764.970067][T20823] Call Trace: [ 1764.973340][T20823] [ 1764.976439][T20823] dump_stack_lvl+0x125/0x1b0 [ 1764.981119][T20823] should_fail_ex+0x496/0x5b0 [ 1764.985815][T20823] should_failslab+0x9/0x20 [ 1764.990323][T20823] kmem_cache_alloc+0x33a/0x3b0 [ 1764.995190][T20823] __kernfs_new_node+0xd3/0x8a0 [ 1765.000047][T20823] ? kernfs_path_from_node+0x60/0x60 [ 1765.005327][T20823] ? kernfs_add_one+0x17f/0x510 [ 1765.010160][T20823] ? __kernfs_create_file+0x29d/0x340 [ 1765.015524][T20823] kernfs_create_dir_ns+0x9a/0x210 [ 1765.020635][T20823] internal_create_group+0x780/0xb40 [ 1765.025916][T20823] ? sysfs_remove_group+0x170/0x170 [ 1765.031105][T20823] ? sysfs_remove_group+0x170/0x170 [ 1765.036297][T20823] ? panel_show+0xf0/0xf0 [ 1765.040744][T20823] ? bus_to_subsys+0x129/0x160 [ 1765.045505][T20823] dpm_sysfs_add+0x7c/0x280 [ 1765.049995][T20823] device_add+0x9e7/0x1ac0 [ 1765.054399][T20823] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1765.061241][T20823] ? kasan_set_track+0x25/0x30 [ 1765.066112][T20823] ? rcu_is_watching+0x12/0xb0 [ 1765.070869][T20823] input_register_device+0x7b6/0x1130 [ 1765.076245][T20823] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1765.082219][T20823] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1765.087932][T20823] ? reacquire_held_locks+0x4b0/0x4b0 [ 1765.093297][T20823] ? bit_wait_timeout+0x160/0x160 [ 1765.098329][T20823] ? __fget_files+0x279/0x410 [ 1765.103000][T20823] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1765.107936][T20823] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1765.114082][T20823] __x64_sys_ioctl+0x18f/0x210 [ 1765.118921][T20823] do_syscall_64+0x38/0xb0 [ 1765.123325][T20823] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1765.129206][T20823] RIP: 0033:0x7f394be7cae9 [ 1765.133604][T20823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.153219][T20823] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.161620][T20823] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1765.169578][T20823] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1765.177640][T20823] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1765.185640][T20823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:31:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 00:31:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 00:31:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af2f, &(0x7f0000000040)) 00:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 34) [ 1765.193603][T20823] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1765.201570][T20823] 00:31:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x2}) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x25d) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) 00:31:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 00:31:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af60, &(0x7f0000000040)) [ 1765.265088][T20844] input: syz0 as /devices/virtual/input/input12881 00:31:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 00:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) [ 1765.310572][T20855] input: syz0 as /devices/virtual/input/input12883 [ 1765.324908][T20853] FAULT_INJECTION: forcing a failure. [ 1765.324908][T20853] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.375949][T20863] input: syz0 as /devices/virtual/input/input12886 [ 1765.395710][T20853] CPU: 1 PID: 20853 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1765.405778][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1765.405792][T20853] Call Trace: [ 1765.405799][T20853] 00:31:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40186366, &(0x7f0000000040)) [ 1765.405806][T20853] dump_stack_lvl+0x125/0x1b0 [ 1765.405832][T20853] should_fail_ex+0x496/0x5b0 [ 1765.405863][T20853] should_failslab+0x9/0x20 [ 1765.405882][T20853] kmem_cache_alloc+0x33a/0x3b0 [ 1765.405908][T20853] ? lock_acquire+0x464/0x510 [ 1765.422153][T20853] __kernfs_new_node+0xd3/0x8a0 [ 1765.422179][T20853] ? kernfs_add_one+0x3ca/0x510 [ 1765.432714][T20853] ? kernfs_path_from_node+0x60/0x60 [ 1765.432738][T20853] ? down_write+0x14f/0x200 [ 1765.442736][T20853] ? down_write+0x14f/0x200 [ 1765.442765][T20853] ? up_write+0x1b3/0x510 [ 1765.452265][T20853] kernfs_new_node+0x94/0x110 [ 1765.452291][T20853] __kernfs_create_file+0x53/0x340 [ 1765.462379][T20853] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1765.462410][T20853] sysfs_merge_group+0x1b1/0x330 [ 1765.475715][T20853] ? sysfs_update_groups+0x30/0x30 [ 1765.475745][T20853] ? panel_show+0xf0/0xf0 [ 1765.475775][T20853] ? bus_to_subsys+0x129/0x160 [ 1765.475797][T20853] dpm_sysfs_add+0x22f/0x280 [ 1765.475816][T20853] device_add+0x9e7/0x1ac0 [ 1765.475836][T20853] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1765.475859][T20853] ? kasan_set_track+0x25/0x30 [ 1765.485610][T20853] ? rcu_is_watching+0x12/0xb0 [ 1765.485635][T20853] input_register_device+0x7b6/0x1130 [ 1765.485670][T20853] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1765.496106][T20853] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1765.496137][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 1765.496165][T20853] ? bit_wait_timeout+0x160/0x160 [ 1765.496188][T20853] ? __fget_files+0x279/0x410 [ 1765.496215][T20853] ? bpf_lsm_file_ioctl+0x9/0x10 00:31:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) 00:31:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 35) 00:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) [ 1765.496239][T20853] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1765.496266][T20853] __x64_sys_ioctl+0x18f/0x210 [ 1765.496288][T20853] do_syscall_64+0x38/0xb0 [ 1765.505662][T20853] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1765.505690][T20853] RIP: 0033:0x7f394be7cae9 [ 1765.505707][T20853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.514999][T20853] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.515022][T20853] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1765.515036][T20853] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1765.526260][T20853] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1765.526275][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.526288][T20853] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1765.526308][T20853] [ 1765.606627][T20876] FAULT_INJECTION: forcing a failure. [ 1765.606627][T20876] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.643503][T20876] CPU: 1 PID: 20876 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1765.646560][T20877] input: syz0 as /devices/virtual/input/input12890 [ 1765.653116][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1765.662247][T20878] input: syz0 as /devices/virtual/input/input12891 [ 1765.669002][T20876] Call Trace: [ 1765.669011][T20876] [ 1765.669018][T20876] dump_stack_lvl+0x125/0x1b0 [ 1765.684560][T20876] should_fail_ex+0x496/0x5b0 [ 1765.701236][T20876] should_failslab+0x9/0x20 [ 1765.701261][T20876] kmem_cache_alloc+0x33a/0x3b0 [ 1765.717747][T20876] ? lock_acquire+0x464/0x510 [ 1765.717779][T20876] __kernfs_new_node+0xd3/0x8a0 [ 1765.717799][T20876] ? kernfs_add_one+0x3ca/0x510 [ 1765.717820][T20876] ? kernfs_path_from_node+0x60/0x60 [ 1765.717838][T20876] ? down_write+0x14f/0x200 [ 1765.717865][T20876] ? down_write+0x14f/0x200 00:31:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x1, 0x673, 0x0, 0x101}, 'syz0\x00', 0x2a}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1765.717889][T20876] ? up_write+0x1b3/0x510 [ 1765.717912][T20876] kernfs_new_node+0x94/0x110 [ 1765.717934][T20876] __kernfs_create_file+0x53/0x340 [ 1765.717959][T20876] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1765.717988][T20876] sysfs_merge_group+0x1b1/0x330 [ 1765.718014][T20876] ? sysfs_update_groups+0x30/0x30 [ 1765.718041][T20876] ? panel_show+0xf0/0xf0 [ 1765.718068][T20876] ? bus_to_subsys+0x129/0x160 [ 1765.718090][T20876] dpm_sysfs_add+0x22f/0x280 [ 1765.718109][T20876] device_add+0x9e7/0x1ac0 00:31:21 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x401c5820, &(0x7f0000000040)) [ 1765.718130][T20876] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1765.718154][T20876] ? kasan_set_track+0x25/0x30 [ 1765.718183][T20876] ? rcu_is_watching+0x12/0xb0 [ 1765.718205][T20876] input_register_device+0x7b6/0x1130 [ 1765.718238][T20876] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1765.718267][T20876] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1765.718294][T20876] ? reacquire_held_locks+0x4b0/0x4b0 [ 1765.718320][T20876] ? bit_wait_timeout+0x160/0x160 [ 1765.718343][T20876] ? __fget_files+0x279/0x410 [ 1765.718369][T20876] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1765.718400][T20876] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1765.718427][T20876] __x64_sys_ioctl+0x18f/0x210 [ 1765.718448][T20876] do_syscall_64+0x38/0xb0 [ 1765.718467][T20876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1765.718490][T20876] RIP: 0033:0x7f394be7cae9 [ 1765.718505][T20876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.718524][T20876] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1765.718544][T20876] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1765.718558][T20876] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1765.718570][T20876] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1765.718583][T20876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1765.718595][T20876] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1765.718614][T20876] [ 1765.798190][T20880] input: syz0 as /devices/virtual/input/input12893 00:31:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x10000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3d}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 36) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async, rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 64) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4020940d, &(0x7f0000000040)) 00:31:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x1, 0x673, 0x0, 0x101}, 'syz0\x00', 0x2a}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x1, 0x673, 0x0, 0x101}, 'syz0\x00', 0x2a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4028af11, &(0x7f0000000040)) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x1, 0x673, 0x0, 0x101}, 'syz0\x00', 0x2a}) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 32) [ 1766.072361][T20889] input: syz0 as /devices/virtual/input/input12895 [ 1766.081470][T20885] FAULT_INJECTION: forcing a failure. [ 1766.081470][T20885] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.096301][T20898] input: syz0 as /devices/virtual/input/input12900 [ 1766.150987][T20885] CPU: 0 PID: 20885 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1766.161092][T20885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1766.171147][T20885] Call Trace: [ 1766.174425][T20885] [ 1766.177349][T20885] dump_stack_lvl+0x125/0x1b0 [ 1766.182029][T20885] should_fail_ex+0x496/0x5b0 [ 1766.186816][T20885] should_failslab+0x9/0x20 [ 1766.191326][T20885] kmem_cache_alloc+0x33a/0x3b0 [ 1766.193626][T20908] input: syz0 as /devices/virtual/input/input12905 [ 1766.196188][T20885] ? lock_acquire+0x464/0x510 [ 1766.196220][T20885] __kernfs_new_node+0xd3/0x8a0 [ 1766.212208][T20885] ? kernfs_add_one+0x3ca/0x510 [ 1766.217051][T20885] ? kernfs_path_from_node+0x60/0x60 [ 1766.217074][T20885] ? down_write+0x14f/0x200 [ 1766.226812][T20885] ? down_write+0x14f/0x200 [ 1766.226841][T20885] ? up_write+0x1b3/0x510 [ 1766.235649][T20885] kernfs_new_node+0x94/0x110 [ 1766.240342][T20885] __kernfs_create_file+0x53/0x340 [ 1766.240371][T20885] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1766.250797][T20885] sysfs_merge_group+0x1b1/0x330 [ 1766.250827][T20885] ? sysfs_update_groups+0x30/0x30 [ 1766.260840][T20885] ? panel_show+0xf0/0xf0 [ 1766.260873][T20885] ? bus_to_subsys+0x129/0x160 [ 1766.269915][T20885] dpm_sysfs_add+0x22f/0x280 [ 1766.269938][T20885] device_add+0x9e7/0x1ac0 [ 1766.269960][T20885] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1766.278901][T20885] ? kasan_set_track+0x25/0x30 [ 1766.278935][T20885] ? rcu_is_watching+0x12/0xb0 [ 1766.290493][T20885] input_register_device+0x7b6/0x1130 [ 1766.290529][T20885] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1766.300613][T20885] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1766.300644][T20885] ? reacquire_held_locks+0x4b0/0x4b0 [ 1766.312364][T20885] ? bit_wait_timeout+0x160/0x160 [ 1766.312391][T20885] ? __fget_files+0x279/0x410 [ 1766.322749][T20885] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1766.322776][T20885] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1766.332337][T20885] __x64_sys_ioctl+0x18f/0x210 [ 1766.332362][T20885] do_syscall_64+0x38/0xb0 [ 1766.332380][T20885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.332401][T20885] RIP: 0033:0x7f394be7cae9 [ 1766.332416][T20885] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1766.332434][T20885] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.332453][T20885] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80086301, &(0x7f0000000040)) 00:31:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x10000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3d}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x10000) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3d}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 00:31:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) 00:31:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 37) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) [ 1766.332466][T20885] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1766.332478][T20885] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1766.332490][T20885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.332502][T20885] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1766.332521][T20885] [ 1766.410409][T20912] input: syz0 as /devices/virtual/input/input12907 00:31:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x10000) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3d}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x10000) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x3d}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 00:31:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x3) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80086601, &(0x7f0000000040)) [ 1766.467927][T20921] input: syz0 as /devices/virtual/input/input12912 00:31:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af00, &(0x7f0000000040)) 00:31:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xee) [ 1766.540579][T20929] input: syz0 as /devices/virtual/input/input12916 [ 1766.576716][T20934] input: syz0 as /devices/virtual/input/input12917 00:31:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x3) 00:31:22 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af26, &(0x7f0000000040)) [ 1766.613619][T20938] input: syz0 as /devices/virtual/input/input12919 [ 1766.625948][T20940] input: syz0 as /devices/virtual/input/input12920 [ 1766.641153][T20935] FAULT_INJECTION: forcing a failure. [ 1766.641153][T20935] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.669345][T20944] input: syz0 as /devices/virtual/input/input12921 [ 1766.678284][T20935] CPU: 0 PID: 20935 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1766.688357][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1766.698416][T20935] Call Trace: [ 1766.701028][T20950] input: syz0 as /devices/virtual/input/input12922 [ 1766.701697][T20935] [ 1766.711109][T20935] dump_stack_lvl+0x125/0x1b0 [ 1766.715798][T20935] should_fail_ex+0x496/0x5b0 [ 1766.720515][T20935] should_failslab+0x9/0x20 [ 1766.725012][T20935] kmem_cache_alloc+0x33a/0x3b0 [ 1766.729850][T20935] ? lock_acquire+0x464/0x510 [ 1766.734509][T20935] __kernfs_new_node+0xd3/0x8a0 [ 1766.739355][T20935] ? kernfs_add_one+0x3ca/0x510 [ 1766.744206][T20935] ? kernfs_path_from_node+0x60/0x60 [ 1766.749480][T20935] ? down_write+0x14f/0x200 [ 1766.753975][T20935] ? down_write+0x14f/0x200 [ 1766.758469][T20935] ? up_write+0x1b3/0x510 [ 1766.762791][T20935] kernfs_new_node+0x94/0x110 [ 1766.767455][T20935] __kernfs_create_file+0x53/0x340 [ 1766.772557][T20935] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1766.778097][T20935] sysfs_merge_group+0x1b1/0x330 [ 1766.783045][T20935] ? sysfs_update_groups+0x30/0x30 [ 1766.788149][T20935] ? panel_show+0xf0/0xf0 [ 1766.792473][T20935] ? bus_to_subsys+0x129/0x160 [ 1766.797222][T20935] dpm_sysfs_add+0x22f/0x280 [ 1766.801803][T20935] device_add+0x9e7/0x1ac0 [ 1766.806206][T20935] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1766.813042][T20935] ? kasan_set_track+0x25/0x30 [ 1766.817802][T20935] ? rcu_is_watching+0x12/0xb0 [ 1766.822554][T20935] input_register_device+0x7b6/0x1130 [ 1766.827922][T20935] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1766.833907][T20935] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1766.839622][T20935] ? reacquire_held_locks+0x4b0/0x4b0 [ 1766.845082][T20935] ? bit_wait_timeout+0x160/0x160 [ 1766.850098][T20935] ? __fget_files+0x279/0x410 [ 1766.854768][T20935] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1766.859698][T20935] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1766.865848][T20935] __x64_sys_ioctl+0x18f/0x210 [ 1766.870603][T20935] do_syscall_64+0x38/0xb0 [ 1766.875009][T20935] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1766.880889][T20935] RIP: 0033:0x7f394be7cae9 [ 1766.885382][T20935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1766.905005][T20935] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:31:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 38) 00:31:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1766.913407][T20935] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1766.921362][T20935] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1766.929319][T20935] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1766.937286][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.945245][T20935] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1766.953207][T20935] 00:31:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x801c581f, &(0x7f0000000040)) 00:31:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x3) 00:31:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) [ 1767.010309][T20955] FAULT_INJECTION: forcing a failure. [ 1767.010309][T20955] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.018655][T20956] input: syz0 as /devices/virtual/input/input12924 [ 1767.055055][T20958] input: syz0 as /devices/virtual/input/input12925 [ 1767.079035][T20955] CPU: 1 PID: 20955 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1767.089114][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1767.099171][T20955] Call Trace: [ 1767.101588][T20964] input: syz0 as /devices/virtual/input/input12926 [ 1767.102467][T20955] [ 1767.102475][T20955] dump_stack_lvl+0x125/0x1b0 [ 1767.102500][T20955] should_fail_ex+0x496/0x5b0 [ 1767.121235][T20955] should_failslab+0x9/0x20 [ 1767.125831][T20955] __kmem_cache_alloc_node+0x2fd/0x350 [ 1767.130083][T20966] input: syz0 as /devices/virtual/input/input12927 [ 1767.131284][T20955] ? kobject_uevent_env+0x24c/0x1800 [ 1767.131312][T20955] ? bit_wait_timeout+0x160/0x160 [ 1767.148147][T20955] ? dev_uevent_filter+0xc0/0xc0 [ 1767.153071][T20955] kmalloc_trace+0x25/0xe0 [ 1767.157474][T20955] kobject_uevent_env+0x24c/0x1800 [ 1767.162574][T20955] ? bus_to_subsys+0x129/0x160 [ 1767.167322][T20955] device_add+0x1117/0x1ac0 [ 1767.171809][T20955] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1767.178652][T20955] ? kasan_set_track+0x25/0x30 [ 1767.183458][T20955] ? rcu_is_watching+0x12/0xb0 [ 1767.188220][T20955] input_register_device+0x7b6/0x1130 [ 1767.193594][T20955] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1767.199578][T20955] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1767.205290][T20955] ? reacquire_held_locks+0x4b0/0x4b0 [ 1767.210659][T20955] ? bit_wait_timeout+0x160/0x160 [ 1767.215677][T20955] ? __fget_files+0x279/0x410 [ 1767.220345][T20955] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1767.225271][T20955] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1767.231425][T20955] __x64_sys_ioctl+0x18f/0x210 [ 1767.236178][T20955] do_syscall_64+0x38/0xb0 [ 1767.240580][T20955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.246490][T20955] RIP: 0033:0x7f394be7cae9 [ 1767.250888][T20955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1767.270488][T20955] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.278888][T20955] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1767.286852][T20955] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1767.294804][T20955] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f0000000040)) 00:31:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{}, 0x0, 0x401}, 0x18) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r1, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000540)={0x2, r1, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000940)={0x2, r5, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1767.302761][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.310737][T20955] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1767.318699][T20955] [ 1767.323831][T20955] input: syz0 as /devices/virtual/input/input12923 00:31:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0045878, &(0x7f0000000040)) 00:31:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:23 executing program 1: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x1735, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffd}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffe, 0x0, 0x8, 0x5}, 'syz1\x00', 0xfffffffc}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1767.388021][T20977] input: syz0 as /devices/virtual/input/input12928 [ 1767.410236][T20975] input: syz0 as /devices/virtual/input/input12929 00:31:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 39) 00:31:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x801c581f, &(0x7f0000000040)) 00:31:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000040)) 00:31:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{}, 0x0, 0x401}, 0x18) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r1, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000540)={0x2, r1, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000540)={0x2, r1, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000940)={0x2, r5, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000940)={0x2, r5, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1767.497784][T20983] input: syz0 as /devices/virtual/input/input12931 00:31:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffe, 0x0, 0x8, 0x5}, 'syz1\x00', 0xfffffffc}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1767.555942][T20990] input: syz0 as /devices/virtual/input/input12934 [ 1767.567019][T20993] FAULT_INJECTION: forcing a failure. [ 1767.567019][T20993] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.586995][T20993] CPU: 0 PID: 20993 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 00:31:23 executing program 1: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x1735, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffd}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x1735, 0x2}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000140)='syz1\x00') (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffd}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) [ 1767.597067][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1767.607118][T20993] Call Trace: [ 1767.610401][T20993] [ 1767.613340][T20993] dump_stack_lvl+0x125/0x1b0 [ 1767.613873][T21001] input: syz0 as /devices/virtual/input/input12939 [ 1767.618009][T20993] should_fail_ex+0x496/0x5b0 [ 1767.618045][T20993] should_failslab+0x9/0x20 [ 1767.625674][T21002] input: syz0 as /devices/virtual/input/input12940 [ 1767.629161][T20993] __kmem_cache_alloc_node+0x2fd/0x350 [ 1767.645599][T20993] ? kobject_get_path+0xce/0x2b0 [ 1767.650542][T20993] ? kobject_get_path+0xce/0x2b0 [ 1767.655468][T20993] __kmalloc+0x4f/0x100 [ 1767.655492][T20993] kobject_get_path+0xce/0x2b0 [ 1767.655516][T20993] kobject_uevent_env+0x26b/0x1800 [ 1767.669497][T20993] ? bus_to_subsys+0x129/0x160 [ 1767.674272][T20993] device_add+0x1117/0x1ac0 [ 1767.678776][T20993] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1767.685633][T20993] ? kasan_set_track+0x25/0x30 [ 1767.690393][T20993] ? rcu_is_watching+0x12/0xb0 [ 1767.690424][T20993] input_register_device+0x7b6/0x1130 [ 1767.700530][T20993] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1767.706513][T20993] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1767.712227][T20993] ? reacquire_held_locks+0x4b0/0x4b0 [ 1767.717616][T20993] ? bit_wait_timeout+0x160/0x160 [ 1767.722632][T20993] ? __fget_files+0x279/0x410 [ 1767.727304][T20993] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1767.732260][T20993] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1767.738446][T20993] __x64_sys_ioctl+0x18f/0x210 [ 1767.743212][T20993] do_syscall_64+0x38/0xb0 [ 1767.747624][T20993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1767.753507][T20993] RIP: 0033:0x7f394be7cae9 [ 1767.757910][T20993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1767.777512][T20993] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.785940][T20993] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1767.793905][T20993] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 00:31:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffe, 0x0, 0x8, 0x5}, 'syz1\x00', 0xfffffffc}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc0189436, &(0x7f0000000040)) [ 1767.802303][T20993] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1767.810266][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1767.818233][T20993] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1767.826206][T20993] [ 1767.837656][T20993] input: syz0 as /devices/virtual/input/input12935 00:31:23 executing program 1: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x10, 0x1735, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffd}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) 00:31:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x2) [ 1767.895141][T21009] input: syz0 as /devices/virtual/input/input12941 00:31:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 40) 00:31:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{}, 0x0, 0x401}, 0x18) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r1, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000540)={0x2, r1, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000940)={0x2, r5, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc020660b, &(0x7f0000000040)) [ 1767.952529][T21015] input: syz0 as /devices/virtual/input/input12944 [ 1767.963193][T21016] input: syz0 as /devices/virtual/input/input12946 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 00:31:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x2) [ 1768.006233][T21021] input: syz0 as /devices/virtual/input/input12948 [ 1768.028283][T21026] FAULT_INJECTION: forcing a failure. [ 1768.028283][T21026] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.084488][T21029] input: syz0 as /devices/virtual/input/input12950 [ 1768.091399][T21026] CPU: 1 PID: 21026 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1768.101471][T21026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1768.111518][T21026] Call Trace: [ 1768.114785][T21026] [ 1768.117703][T21026] dump_stack_lvl+0x125/0x1b0 [ 1768.122378][T21026] should_fail_ex+0x496/0x5b0 [ 1768.127078][T21026] should_failslab+0x9/0x20 [ 1768.131569][T21026] __kmem_cache_alloc_node+0x2fd/0x350 [ 1768.137021][T21026] ? kobject_uevent_env+0x24c/0x1800 [ 1768.142303][T21026] ? bit_wait_timeout+0x160/0x160 [ 1768.147317][T21026] ? dev_uevent_filter+0xc0/0xc0 [ 1768.152423][T21026] kmalloc_trace+0x25/0xe0 [ 1768.156836][T21026] kobject_uevent_env+0x24c/0x1800 [ 1768.161944][T21026] ? bus_to_subsys+0x129/0x160 [ 1768.166792][T21026] device_add+0x1117/0x1ac0 [ 1768.171290][T21026] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1768.178135][T21026] ? kasan_set_track+0x25/0x30 [ 1768.182900][T21026] ? rcu_is_watching+0x12/0xb0 [ 1768.187685][T21026] input_register_device+0x7b6/0x1130 [ 1768.193057][T21026] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1768.199060][T21026] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1768.204776][T21026] ? reacquire_held_locks+0x4b0/0x4b0 [ 1768.210148][T21026] ? bit_wait_timeout+0x160/0x160 [ 1768.215164][T21026] ? __fget_files+0x279/0x410 [ 1768.219831][T21026] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1768.224776][T21026] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1768.230922][T21026] __x64_sys_ioctl+0x18f/0x210 [ 1768.235677][T21026] do_syscall_64+0x38/0xb0 [ 1768.240084][T21026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.245968][T21026] RIP: 0033:0x7f394be7cae9 [ 1768.250370][T21026] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1768.269989][T21026] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:31:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x7, 0x100, 0x8000, 0x1}, 'syz1\x00', 0x4f}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x806, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000300)={0xa, 0x6, 0x401}) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000340)={0xe, 0x0, 0x4}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000240)={0x8, 0x603c, {0x54, 0x0, 0x1, {0x8, 0x1}, {0x0, 0x8000}, @ramp={0x6, 0x776, {0x5, 0x2, 0x0, 0x7fff}}}, {0x57, 0xff, 0xff, {0x80, 0x1}, {0x4, 0xffff}, @const={0x397f, {0xba, 0x5, 0x200, 0x7}}}}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000002c0)={0xa, 0x1ed, 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1768.278410][T21026] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1768.286423][T21026] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1768.294384][T21026] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1768.302355][T21026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.310313][T21026] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1768.318276][T21026] 00:31:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x5, 0x6, 0xf12c, 0xb158}, 'syz0\x00', 0x4}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000100)={0xa, 0x6, 0x10000}) [ 1768.340109][T21033] input: syz0 as /devices/virtual/input/input12951 [ 1768.365576][T21026] input: syz0 as /devices/virtual/input/input12949 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2}) 00:31:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 41) [ 1768.384984][T21038] input: syz0 as /devices/virtual/input/input12953 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x5, 0x6, 0xf12c, 0xb158}, 'syz0\x00', 0x4}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) (async) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000100)={0xa, 0x6, 0x10000}) 00:31:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x2) [ 1768.438698][T21039] input: syz0 as /devices/virtual/input/input12956 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x4}) 00:31:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async, rerun: 32) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x7, 0x100, 0x8000, 0x1}, 'syz1\x00', 0x4f}) (async, rerun: 32) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x806, 0x0) (async, rerun: 64) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000300)={0xa, 0x6, 0x401}) (async, rerun: 64) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000340)={0xe, 0x0, 0x4}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000240)={0x8, 0x603c, {0x54, 0x0, 0x1, {0x8, 0x1}, {0x0, 0x8000}, @ramp={0x6, 0x776, {0x5, 0x2, 0x0, 0x7fff}}}, {0x57, 0xff, 0xff, {0x80, 0x1}, {0x4, 0xffff}, @const={0x397f, {0xba, 0x5, 0x200, 0x7}}}}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) (async) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000002c0)={0xa, 0x1ed, 0x9}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x5}) [ 1768.530977][T21056] input: syz0 as /devices/virtual/input/input12965 [ 1768.551154][T21060] FAULT_INJECTION: forcing a failure. [ 1768.551154][T21060] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.596217][T21060] CPU: 1 PID: 21060 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1768.606309][T21060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1768.616351][T21060] Call Trace: [ 1768.616359][T21060] [ 1768.616366][T21060] dump_stack_lvl+0x125/0x1b0 [ 1768.616391][T21060] should_fail_ex+0x496/0x5b0 [ 1768.616424][T21060] should_failslab+0x9/0x20 [ 1768.636605][T21060] kmem_cache_alloc_node+0x389/0x3f0 [ 1768.641905][T21060] ? __alloc_skb+0x287/0x330 00:31:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1768.646515][T21060] __alloc_skb+0x287/0x330 [ 1768.650945][T21060] ? __napi_build_skb+0x50/0x50 [ 1768.655806][T21060] ? reacquire_held_locks+0x4b0/0x4b0 [ 1768.661189][T21060] ? __kmalloc+0xe5/0x100 [ 1768.665548][T21060] alloc_uevent_skb+0x7d/0x210 [ 1768.670310][T21060] kobject_uevent_env+0xc20/0x1800 [ 1768.670340][T21060] ? bus_to_subsys+0x129/0x160 [ 1768.680209][T21060] device_add+0x1117/0x1ac0 [ 1768.684716][T21060] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1768.691566][T21060] ? kasan_set_track+0x25/0x30 [ 1768.696328][T21060] ? rcu_is_watching+0x12/0xb0 [ 1768.701082][T21060] input_register_device+0x7b6/0x1130 [ 1768.706455][T21060] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1768.712430][T21060] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1768.718137][T21060] ? reacquire_held_locks+0x4b0/0x4b0 [ 1768.723499][T21060] ? bit_wait_timeout+0x160/0x160 [ 1768.728513][T21060] ? __fget_files+0x279/0x410 [ 1768.733189][T21060] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1768.738115][T21060] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1768.744277][T21060] __x64_sys_ioctl+0x18f/0x210 [ 1768.749029][T21060] do_syscall_64+0x38/0xb0 [ 1768.753430][T21060] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1768.759336][T21060] RIP: 0033:0x7f394be7cae9 [ 1768.763753][T21060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1768.783354][T21060] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.791767][T21060] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1768.799732][T21060] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1768.807694][T21060] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1768.815657][T21060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.823616][T21060] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1768.831587][T21060] [ 1768.840255][T21052] input: syz0 as /devices/virtual/input/input12963 [ 1768.847042][T21060] input: syz0 as /devices/virtual/input/input12966 00:31:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 42) 00:31:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x7, 0x100, 0x8000, 0x1}, 'syz1\x00', 0x4f}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x806, 0x0) (async) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000300)={0xa, 0x6, 0x401}) (async, rerun: 32) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000340)={0xe, 0x0, 0x4}) (rerun: 32) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000240)={0x8, 0x603c, {0x54, 0x0, 0x1, {0x8, 0x1}, {0x0, 0x8000}, @ramp={0x6, 0x776, {0x5, 0x2, 0x0, 0x7fff}}}, {0x57, 0xff, 0xff, {0x80, 0x1}, {0x4, 0xffff}, @const={0x397f, {0xba, 0x5, 0x200, 0x7}}}}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) (async) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000002c0)={0xa, 0x1ed, 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:24 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x5, 0x6, 0xf12c, 0xb158}, 'syz0\x00', 0x4}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000100)={0xa, 0x6, 0x10000}) 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x6}) 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x4, 0x0, 0xfae}, 'syz0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x19) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1768.948379][T21084] input: syz0 as /devices/virtual/input/input12975 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x7}) 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x4, 0x0, 0xfae}, 'syz0\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x19) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1768.990920][T21092] input: syz0 as /devices/virtual/input/input12980 [ 1769.049021][T21097] input: syz0 as /devices/virtual/input/input12983 [ 1769.063676][T21102] input: syz0 as /devices/virtual/input/input12986 [ 1769.077251][T21103] input: syz0 as /devices/virtual/input/input12987 00:31:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 43) 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x4, 0x0, 0xfae}, 'syz0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x19) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x300}) 00:31:25 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 00:31:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1769.187264][T21117] input: syz0 as /devices/virtual/input/input12992 [ 1769.209554][T21121] FAULT_INJECTION: forcing a failure. [ 1769.209554][T21121] name failslab, interval 1, probability 0, space 0, times 0 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1769.229469][T21121] CPU: 0 PID: 21121 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1769.239556][T21121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1769.249619][T21121] Call Trace: [ 1769.252911][T21121] [ 1769.255837][T21121] dump_stack_lvl+0x125/0x1b0 [ 1769.260528][T21121] should_fail_ex+0x496/0x5b0 [ 1769.265223][T21121] should_failslab+0x9/0x20 [ 1769.269720][T21121] kmem_cache_alloc+0x33a/0x3b0 [ 1769.269755][T21121] skb_clone+0x171/0x3c0 [ 1769.278826][T21121] netlink_broadcast_filtered+0xaf9/0xf00 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1769.284551][T21121] ? sprintf+0xcd/0x100 [ 1769.288723][T21121] ? netlink_connect+0x550/0x550 [ 1769.293671][T21121] ? __kmalloc+0xe5/0x100 [ 1769.298010][T21121] netlink_broadcast+0x39/0x50 [ 1769.302777][T21121] kobject_uevent_env+0xbd2/0x1800 [ 1769.302809][T21121] ? bus_to_subsys+0x129/0x160 [ 1769.302831][T21121] device_add+0x1117/0x1ac0 [ 1769.302852][T21121] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1769.302873][T21121] ? kasan_set_track+0x25/0x30 [ 1769.302909][T21121] ? rcu_is_watching+0x12/0xb0 [ 1769.302955][T21121] input_register_device+0x7b6/0x1130 [ 1769.302987][T21121] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1769.303015][T21121] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1769.303041][T21121] ? reacquire_held_locks+0x4b0/0x4b0 [ 1769.303067][T21121] ? bit_wait_timeout+0x160/0x160 [ 1769.303090][T21121] ? __fget_files+0x279/0x410 [ 1769.303116][T21121] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1769.303140][T21121] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1769.303167][T21121] __x64_sys_ioctl+0x18f/0x210 [ 1769.303187][T21121] do_syscall_64+0x38/0xb0 [ 1769.303206][T21121] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.334008][T21121] RIP: 0033:0x7f394be7cae9 [ 1769.334029][T21121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1769.416016][T21121] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.424418][T21121] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1769.432387][T21121] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1769.440347][T21121] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1769.448305][T21121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.456267][T21121] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1769.464250][T21121] [ 1769.473547][T21121] input: syz0 as /devices/virtual/input/input12993 [ 1769.488461][T21116] input: syz0 as /devices/virtual/input/input12994 [ 1769.498027][T21126] input: syz0 as /devices/virtual/input/input12996 00:31:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 44) 00:31:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x500}) 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101000) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) (async, rerun: 32) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (rerun: 32) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x600}) 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1769.603180][T21151] input: syz0 as /devices/virtual/input/input13001 [ 1769.612524][T21148] input: syz0 as /devices/virtual/input/input13003 00:31:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) (async) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) (async) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) 00:31:25 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x700}) [ 1769.646026][T21158] input: syz0 as /devices/virtual/input/input13005 [ 1769.671766][T21161] input: syz0 as /devices/virtual/input/input13006 [ 1769.684864][T21163] input: syz0 as /devices/virtual/input/input13008 00:31:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r2, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r2, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000ac0)={0x0, r7, r6, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x20, 0x1b}) [ 1769.706634][T21161] FAULT_INJECTION: forcing a failure. [ 1769.706634][T21161] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.724145][T21161] CPU: 0 PID: 21161 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1769.734223][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1769.744280][T21161] Call Trace: [ 1769.747606][T21161] [ 1769.750521][T21161] dump_stack_lvl+0x125/0x1b0 [ 1769.755192][T21161] should_fail_ex+0x496/0x5b0 [ 1769.759867][T21161] should_failslab+0x9/0x20 [ 1769.764361][T21161] __kmem_cache_alloc_node+0x2fd/0x350 [ 1769.769815][T21161] ? evdev_connect+0x82/0x4c0 [ 1769.774483][T21161] kmalloc_trace+0x25/0xe0 [ 1769.778900][T21161] evdev_connect+0x82/0x4c0 [ 1769.783427][T21161] input_attach_handler.isra.0+0x17c/0x250 [ 1769.789241][T21161] input_register_device+0xb1e/0x1130 [ 1769.794611][T21161] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1769.800585][T21161] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1769.806389][T21161] ? reacquire_held_locks+0x4b0/0x4b0 [ 1769.811761][T21161] ? bit_wait_timeout+0x160/0x160 [ 1769.816781][T21161] ? __fget_files+0x279/0x410 [ 1769.821452][T21161] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1769.826411][T21161] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1769.832561][T21161] __x64_sys_ioctl+0x18f/0x210 [ 1769.837335][T21161] do_syscall_64+0x38/0xb0 [ 1769.841754][T21161] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1769.847638][T21161] RIP: 0033:0x7f394be7cae9 [ 1769.852043][T21161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1769.871644][T21161] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.880062][T21161] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1769.888043][T21161] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1769.896003][T21161] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 45) [ 1769.903969][T21161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.911927][T21161] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1769.919904][T21161] [ 1769.939670][T21170] input: syz0 as /devices/virtual/input/input13010 [ 1769.948302][T21161] input: failed to attach handler evdev to device input13006, error: -12 00:31:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000002c0)={r2, r3, 0x0, 0x7fffffff, 0x0, 0x7, 0x1, 0x800, 0xf2, 0x80000000, 0x5, 0x80000000}) 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1000000}) 00:31:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r2, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r2, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000ac0)={0x0, r7, r6, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x20, 0x1b}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r2, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r2, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000ac0)={0x0, r7, r6, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x20, 0x1b}) (async) 00:31:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 1770.001667][T21173] FAULT_INJECTION: forcing a failure. [ 1770.001667][T21173] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.043430][T21178] input: syz0 as /devices/virtual/input/input13013 [ 1770.046591][T21184] input: syz0 as /devices/virtual/input/input13014 [ 1770.058341][T21173] CPU: 1 PID: 21173 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1770.058358][T21185] input: syz0 as /devices/virtual/input/input13016 [ 1770.074908][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1770.084980][T21173] Call Trace: [ 1770.088275][T21173] [ 1770.091228][T21173] dump_stack_lvl+0x125/0x1b0 [ 1770.095924][T21173] should_fail_ex+0x496/0x5b0 [ 1770.100639][T21173] should_failslab+0x9/0x20 [ 1770.105159][T21173] __kmem_cache_alloc_node+0x2fd/0x350 [ 1770.110632][T21173] ? kobject_get_path+0xce/0x2b0 [ 1770.115578][T21173] ? kobject_get_path+0xce/0x2b0 [ 1770.120526][T21173] __kmalloc+0x4f/0x100 [ 1770.124683][T21173] kobject_get_path+0xce/0x2b0 [ 1770.129454][T21173] input_register_device+0x9b5/0x1130 [ 1770.134854][T21173] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1770.140864][T21173] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1770.146610][T21173] ? reacquire_held_locks+0x4b0/0x4b0 [ 1770.152003][T21173] ? bit_wait_timeout+0x160/0x160 [ 1770.157046][T21173] ? __fget_files+0x279/0x410 [ 1770.161731][T21173] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1770.166668][T21173] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1770.172817][T21173] __x64_sys_ioctl+0x18f/0x210 [ 1770.177572][T21173] do_syscall_64+0x38/0xb0 [ 1770.181976][T21173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.187863][T21173] RIP: 0033:0x7f394be7cae9 [ 1770.192266][T21173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1770.211867][T21173] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.220273][T21173] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1770.228234][T21173] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1770.236282][T21173] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r2, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r2, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000ac0)={0x0, r7, r6, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x20, 0x1b}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x5, 0x6, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r2, 0x2, 0x7ff, 0x7, 0x0, 0x3fd4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000540)={0x2, r2, 0x8001, 0x7f, 0x6b, 0xfff, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)) (async) syz_open_dev$dri(&(0x7f00000005c0), 0x8, 0x200) (async) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000600)={0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x9, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000940)={0x2, r8, 0x8000, 0x1, 0x819, 0x0, 0x7fff, 0x5, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000ac0)={0x0, r7, r6, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r7, 0x0, 0x1, 0x20, 0x1b}) (async) 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000002c0)={r2, r3, 0x0, 0x7fffffff, 0x0, 0x7, 0x1, 0x800, 0xf2, 0x80000000, 0x5, 0x80000000}) [ 1770.244240][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.252200][T21173] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1770.260171][T21173] [ 1770.276053][T21191] input: syz0 as /devices/virtual/input/input13017 00:31:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x400}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 46) 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x400}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x400}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2000000}) 00:31:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000002c0)={r2, r3, 0x0, 0x7fffffff, 0x0, 0x7, 0x1, 0x800, 0xf2, 0x80000000, 0x5, 0x80000000}) [ 1770.384703][T21201] input: syz0 as /devices/virtual/input/input13020 [ 1770.401295][T21202] input: syz0 as /devices/virtual/input/input13021 [ 1770.403125][T21173] input: syz0 as N/A 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3000000}) 00:31:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x400}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1770.454400][T21207] input: syz0 as /devices/virtual/input/input13022 [ 1770.486702][T21213] input: syz0 as /devices/virtual/input/input13024 00:31:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x4000000}) 00:31:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1770.509245][T21219] input: syz0 as /devices/virtual/input/input13025 [ 1770.511962][T21220] input: syz0 as /devices/virtual/input/input13026 00:31:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'geneve1\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 1770.577003][T21228] input: syz0 as /devices/virtual/input/input13028 [ 1770.586743][T21230] input: syz1 as /devices/virtual/input/input13029 [ 1770.608793][T21228] FAULT_INJECTION: forcing a failure. [ 1770.608793][T21228] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.624585][T21234] input: syz0 as /devices/virtual/input/input13030 [ 1770.642355][T21228] CPU: 1 PID: 21228 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1770.652441][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1770.662507][T21228] Call Trace: [ 1770.665793][T21228] [ 1770.668731][T21228] dump_stack_lvl+0x125/0x1b0 [ 1770.673424][T21228] should_fail_ex+0x496/0x5b0 [ 1770.678211][T21228] should_failslab+0x9/0x20 [ 1770.682717][T21228] __kmem_cache_alloc_node+0x2fd/0x350 [ 1770.688288][T21228] ? evdev_connect+0x82/0x4c0 [ 1770.692977][T21228] kmalloc_trace+0x25/0xe0 [ 1770.697414][T21228] evdev_connect+0x82/0x4c0 [ 1770.701930][T21228] input_attach_handler.isra.0+0x17c/0x250 [ 1770.707761][T21228] input_register_device+0xb1e/0x1130 [ 1770.713153][T21228] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1770.719156][T21228] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1770.724902][T21228] ? reacquire_held_locks+0x4b0/0x4b0 [ 1770.730293][T21228] ? bit_wait_timeout+0x160/0x160 [ 1770.735314][T21228] ? __fget_files+0x279/0x410 [ 1770.740011][T21228] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1770.744942][T21228] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1770.751092][T21228] __x64_sys_ioctl+0x18f/0x210 [ 1770.755845][T21228] do_syscall_64+0x38/0xb0 [ 1770.760249][T21228] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1770.766129][T21228] RIP: 0033:0x7f394be7cae9 [ 1770.770533][T21228] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1770.790135][T21228] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.798543][T21228] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1770.806502][T21228] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1770.814459][T21228] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 00:31:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 47) 00:31:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:31:26 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x5000000}) 00:31:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') 00:31:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1770.822519][T21228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.830501][T21228] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1770.838470][T21228] [ 1770.846126][T21228] input: failed to attach handler evdev to device input13028, error: -12 00:31:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x6000000}) 00:31:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000700)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) [ 1770.918319][T21243] input: syz1 as /devices/virtual/input/input13031 [ 1770.919991][T21244] input: syz0 as /devices/virtual/input/input13032 [ 1770.941512][T21245] input: syz0 as /devices/virtual/input/input13033 00:31:27 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x7000000}) 00:31:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) (async) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'geneve1\x00'}) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 00:31:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 00:31:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x8) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1770.981093][T21251] input: syz0 as /devices/virtual/input/input13034 [ 1771.033469][T21255] input: syz1 as /devices/virtual/input/input13035 [ 1771.043064][T21251] FAULT_INJECTION: forcing a failure. [ 1771.043064][T21251] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.069917][T21264] input: syz0 as /devices/virtual/input/input13036 [ 1771.070939][T21261] input: syz0 as /devices/virtual/input/input13037 [ 1771.089511][T21251] CPU: 0 PID: 21251 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1771.099586][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1771.109731][T21251] Call Trace: [ 1771.113017][T21251] [ 1771.115953][T21251] dump_stack_lvl+0x125/0x1b0 [ 1771.120645][T21251] should_fail_ex+0x496/0x5b0 [ 1771.125355][T21251] should_failslab+0x9/0x20 [ 1771.129875][T21251] __kmem_cache_alloc_node+0x2fd/0x350 [ 1771.135354][T21251] ? kvasprintf_const+0x66/0x190 [ 1771.140308][T21251] ? pointer+0xbf0/0xbf0 [ 1771.144575][T21251] ? kvasprintf_const+0x66/0x190 [ 1771.149534][T21251] __kmalloc_node_track_caller+0x50/0x100 [ 1771.155261][T21251] kvasprintf+0xbd/0x150 [ 1771.159517][T21251] ? bust_spinlocks+0xe0/0xe0 [ 1771.164220][T21251] kvasprintf_const+0x66/0x190 [ 1771.169003][T21251] kobject_set_name_vargs+0x5a/0x130 [ 1771.174306][T21251] dev_set_name+0xc8/0x100 [ 1771.178752][T21251] ? device_initialize+0x510/0x510 [ 1771.183968][T21251] ? lockdep_init_map_type+0x16d/0x7c0 [ 1771.189467][T21251] ? lockdep_init_map_type+0x16d/0x7c0 [ 1771.194959][T21251] evdev_connect+0x17a/0x4c0 [ 1771.199572][T21251] input_attach_handler.isra.0+0x17c/0x250 [ 1771.205390][T21251] input_register_device+0xb1e/0x1130 [ 1771.210769][T21251] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1771.216922][T21251] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1771.222646][T21251] ? reacquire_held_locks+0x4b0/0x4b0 [ 1771.228015][T21251] ? bit_wait_timeout+0x160/0x160 [ 1771.233040][T21251] ? __fget_files+0x279/0x410 [ 1771.237716][T21251] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1771.242675][T21251] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1771.248825][T21251] __x64_sys_ioctl+0x18f/0x210 [ 1771.253585][T21251] do_syscall_64+0x38/0xb0 [ 1771.257995][T21251] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1771.263886][T21251] RIP: 0033:0x7f394be7cae9 [ 1771.268289][T21251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 00:31:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000700)) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'geneve1\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) [ 1771.287917][T21251] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.296320][T21251] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1771.304279][T21251] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1771.312240][T21251] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1771.320290][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.328340][T21251] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1771.336305][T21251] [ 1771.383713][T21251] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1771.395465][T21251] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1771.403879][T21251] CPU: 1 PID: 21251 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d #0 [ 1771.413952][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1771.424012][T21251] RIP: 0010:strchr+0x1b/0xb0 [ 1771.428702][T21251] Code: 60 ac f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 1771.448327][T21251] RSP: 0018:ffffc9000406fa38 EFLAGS: 00010282 [ 1771.454423][T21251] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004d29000 [ 1771.462383][T21251] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 1771.470348][T21251] RBP: ffffc9000406fac8 R08: 0000000000000001 R09: 0000000000000000 [ 1771.478307][T21251] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000406fac8 [ 1771.486272][T21251] R13: 0000000000000cc0 R14: ffff888025cb72f0 R15: 0000000000000001 [ 1771.494234][T21251] FS: 00007f394cb3b6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1771.503155][T21251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1771.509743][T21251] CR2: 00007ff119375198 CR3: 0000000027a94000 CR4: 0000000000350ee0 [ 1771.517719][T21251] Call Trace: [ 1771.520994][T21251] [ 1771.523913][T21251] ? show_regs+0x8f/0xa0 [ 1771.528158][T21251] ? die_addr+0x4f/0xd0 [ 1771.532389][T21251] ? exc_general_protection+0x154/0x230 [ 1771.538020][T21251] ? asm_exc_general_protection+0x26/0x30 [ 1771.543838][T21251] ? strchr+0x1b/0xb0 [ 1771.547813][T21251] ? lock_release+0x4bf/0x680 [ 1771.552488][T21251] kvasprintf_const+0x25/0x190 [ 1771.557256][T21251] kobject_set_name_vargs+0x5a/0x130 [ 1771.562530][T21251] kobject_add+0x12a/0x240 [ 1771.566940][T21251] ? kset_create_and_add+0x190/0x190 [ 1771.572302][T21251] ? do_raw_spin_unlock+0x173/0x230 [ 1771.577497][T21251] ? kobject_put+0xbe/0x440 [ 1771.581991][T21251] device_add+0x290/0x1ac0 [ 1771.586434][T21251] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 1771.593271][T21251] ? __register_chrdev+0x270/0x270 [ 1771.598473][T21251] ? kobject_get+0xbb/0x140 [ 1771.602967][T21251] cdev_device_add+0x12b/0x270 [ 1771.607729][T21251] evdev_connect+0x3a0/0x4c0 [ 1771.612313][T21251] input_attach_handler.isra.0+0x17c/0x250 [ 1771.618116][T21251] input_register_device+0xb1e/0x1130 [ 1771.623505][T21251] uinput_ioctl_handler.isra.0+0x1308/0x1d70 [ 1771.629479][T21251] ? uinput_ff_upload_to_user+0x2a0/0x2a0 [ 1771.635295][T21251] ? reacquire_held_locks+0x4b0/0x4b0 [ 1771.640660][T21251] ? bit_wait_timeout+0x160/0x160 [ 1771.645680][T21251] ? __fget_files+0x279/0x410 [ 1771.650523][T21251] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1771.655454][T21251] ? uinput_ioctl_handler.isra.0+0x1d70/0x1d70 [ 1771.661714][T21251] __x64_sys_ioctl+0x18f/0x210 [ 1771.666472][T21251] do_syscall_64+0x38/0xb0 [ 1771.670886][T21251] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1771.676872][T21251] RIP: 0033:0x7f394be7cae9 [ 1771.681271][T21251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1771.700870][T21251] RSP: 002b:00007f394cb3b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.709282][T21251] RAX: ffffffffffffffda RBX: 00007f394bf9bf80 RCX: 00007f394be7cae9 [ 1771.717257][T21251] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1771.725297][T21251] RBP: 00007f394cb3b120 R08: 0000000000000000 R09: 0000000000000000 [ 1771.733273][T21251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.741234][T21251] R13: 000000000000000b R14: 00007f394bf9bf80 R15: 00007ffe5521ad08 [ 1771.749197][T21251] [ 1771.752204][T21251] Modules linked in: [ 1771.766395][T21251] ---[ end trace 0000000000000000 ]--- [ 1771.772115][T21251] RIP: 0010:strchr+0x1b/0xb0 [ 1771.786754][T21251] Code: 60 ac f7 48 8b 74 24 08 48 8b 14 24 eb 89 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 83 ec 10 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 07 89 [ 1771.816099][T21251] RSP: 0018:ffffc9000406fa38 EFLAGS: 00010282 [ 1771.823090][T21251] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004d29000 [ 1771.832793][T21251] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 1771.841173][T21251] RBP: ffffc9000406fac8 R08: 0000000000000001 R09: 0000000000000000 [ 1771.850783][T21251] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc9000406fac8 [ 1771.858903][T21251] R13: 0000000000000cc0 R14: ffff888025cb72f0 R15: 0000000000000001 [ 1771.872091][T21251] FS: 00007f394cb3b6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1771.881471][T21251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1771.889471][T21251] CR2: 00007ffb98f75198 CR3: 0000000027a94000 CR4: 0000000000350ef0 [ 1771.899635][T21251] Kernel panic - not syncing: Fatal exception [ 1771.905829][T21251] Kernel Offset: disabled [ 1771.910145][T21251] Rebooting in 86400 seconds..