Warning: Permanently added '10.128.0.66' (ECDSA) to the list of known hosts. 2019/05/25 05:59:48 fuzzer started 2019/05/25 05:59:51 dialing manager at 10.128.0.26:38501 2019/05/25 05:59:51 syscalls: 2300 2019/05/25 05:59:51 code coverage: enabled 2019/05/25 05:59:51 comparison tracing: enabled 2019/05/25 05:59:51 extra coverage: extra coverage is not supported by the kernel 2019/05/25 05:59:51 setuid sandbox: enabled 2019/05/25 05:59:51 namespace sandbox: enabled 2019/05/25 05:59:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/05/25 05:59:51 fault injection: enabled 2019/05/25 05:59:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/05/25 05:59:51 net packet injection: enabled 2019/05/25 05:59:51 net device setup: enabled 06:01:37 executing program 0: syz_execute_func(&(0x7f0000000300)="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") syz_execute_func(&(0x7f0000000100)="43dd25310000006565d93457c4c2e19c3bc461add84f00e45f7e52c4c1fc50dc00000065fb553713665d5d0feb9d99899999c442cd3ae165670f48c80404fdc4817d5b66957cad8f085087e441ad49e89803460f76ec85712164315902831cae660f5da3c0000000e9c2a90700000026860038c4c4034d48d5e7000053c4d3dd75c43eff36ffff650f01d767420ffd01") syzkaller login: [ 179.220025][ T8802] IPVS: ftp: loaded support on port[0] = 21 06:01:37 executing program 1: syz_execute_func(&(0x7f0000000500)="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") syz_execute_func(&(0x7f00000001c0)="43dd25310000006565d93457c4c2e19c3bc4e1256b61d2e45f7e52c4c1fc50dc00000065fb5513665d660feb9d99899999c442cd3ae165670f48c80404fdc4817d5b66957cad8f085087e441ad49e89803460f76ec857121c4e285ae8e06000000831cae660f5da3c0000000e9c2a90700000026860038c4a13795824c00000000000053c4d3dd75c43e15ff34ffff650f01d767420ffd01") [ 179.338210][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 179.398632][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.420714][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.429073][ T8802] device bridge_slave_0 entered promiscuous mode [ 179.462257][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.469471][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.481834][ T8802] device bridge_slave_1 entered promiscuous mode [ 179.496412][ T8805] IPVS: ftp: loaded support on port[0] = 21 [ 179.531838][ T8802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.553751][ T8802] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:01:37 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x53) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "81c0d19520770890"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0xffffff59, &(0x7f0000001840)={&(0x7f00000017c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0407ae9216f92fc8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x7, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x10001}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "502d907d70017c92"}}, 0x48}}, 0x0) [ 179.609265][ T8802] team0: Port device team_slave_0 added [ 179.669199][ T8802] team0: Port device team_slave_1 added [ 179.724861][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 179.774854][ T8802] device hsr_slave_0 entered promiscuous mode [ 179.797192][ T8808] IPVS: ftp: loaded support on port[0] = 21 06:01:38 executing program 3: syz_execute_func(&(0x7f00000001c0)="96419cc4a2791dcd1c040f05c4e1705eeac4a37bf0c55c41e2e9660ff8aa0248005784000f0fb8c4f4014e4e4e5b4b264ad80f41ad1e1edee50946c42741839fa59d001ab527c4c22938544798c421dd5831e9e98e0bfbf8c45b64660f38385a0a470f898c00000019fc26400f00a43902000000dd0465000000004877f866440ff4697683397f5ee7e7fbfba18d73df0fc4227d21513a06662ad726660f73d30066400f64287c7c66f2ab440fec3f67dddda8e80fddf6c6c4665af72ec3c4e2899294d800c4a2e999720b0019c10b590b0b00c4d2c58160160035ee0fc60fc6a8f2ae000000f1ebeb628f8fc401fd5add6500f236f04283a9008000000066430f78c6000049c45c455a91b7c4638d6e8df9ffff0c2323ffc4e3b16e9003330000a94acefb110fc4e251bcdfb83aa2f1fbfb22c1e2") syz_execute_func(&(0x7f0000000000)="43dd25310000006565d93457c4c2c19c5d13c4fb79e42931c4e37d05680806fbc461782e26c40c9066c0d817e2c4c2d2b942ad0000c4c28d9b8c510e510ec482f1b89620000000d1fcd1f8363745e1ace46249924b4d8fd6cef346abc06ba269b97eb97e5fc4417877c461cdeec79177ffc422790fd26b42061fc33ae366f0818807d6a3200000f9") [ 179.881123][ T8802] device hsr_slave_1 entered promiscuous mode [ 179.957549][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.964888][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.972789][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.977468][ T8810] IPVS: ftp: loaded support on port[0] = 21 [ 179.979894][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.092948][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.100067][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.110126][ T8805] device bridge_slave_0 entered promiscuous mode [ 180.145442][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.154162][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.162659][ T8805] device bridge_slave_1 entered promiscuous mode 06:01:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02000000bf0100000000000000000000ba010000086e000021232948de042774602f36cddb4aa287b3b3312d91f7cd26167f6444b666a5c2b5023d6da31997c5864183bb5548c8d5210899d6b5b6d5efcd76ffd06e3e62e26c761a6047d17f3aed967ad2b9eaceeae2cb7df923371fd5e88cb2109310447fd0b311245765d6097e53"], 0x82}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4f814c1ab5be2f9660f3a0fae5e090000ba44d8d1c401f5ef1ac4817d73d74ec4a275bd153c78ab7749f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfdc402b504a60080000068d768f833c4a1cd61b3b23c0000ab26dbc1a1fe5ff6f6df0804f4c4efa59cc442abf58f104eb547288ba6452e000054c4431d3e660f6e7f3c") [ 180.273211][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.334667][ T8805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.372383][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.382630][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.392405][ T8815] IPVS: ftp: loaded support on port[0] = 21 [ 180.404502][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.421706][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.445020][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 180.459481][ T8805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.489107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.499141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.510180][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.517368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.527270][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.536706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.547496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.554676][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.564678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:01:38 executing program 5: syz_execute_func(&(0x7f0000000180)="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") syz_execute_func(&(0x7f0000000100)="43dd25310000006565d93457c4e1f9c5cb73c442f9921c7dfd2f8fe8085dfcf30f122d2bbd0000d9f9653e0f212dd5d5e3e5470f4941fefd5b4bb755b7b771cd20") [ 180.588461][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 180.611298][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 180.633299][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.644975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.654513][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.665546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.674667][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.685345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.694190][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.715050][ T8819] IPVS: ftp: loaded support on port[0] = 21 [ 180.745964][ T8805] team0: Port device team_slave_0 added [ 180.752436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.760388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.769062][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.808057][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.815917][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.824072][ T8810] device bridge_slave_0 entered promiscuous mode [ 180.836736][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.844727][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.852710][ T8810] device bridge_slave_1 entered promiscuous mode [ 180.861762][ T8805] team0: Port device team_slave_1 added [ 180.869116][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.907848][ T8810] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.946958][ T8810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.989086][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.997909][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.005940][ T8808] device bridge_slave_0 entered promiscuous mode [ 181.015655][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.023865][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.031820][ T8808] device bridge_slave_1 entered promiscuous mode [ 181.040112][ T8810] team0: Port device team_slave_0 added [ 181.103893][ T8805] device hsr_slave_0 entered promiscuous mode [ 181.142905][ T8805] device hsr_slave_1 entered promiscuous mode [ 181.192033][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.209788][ T8810] team0: Port device team_slave_1 added [ 181.275650][ T8808] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.287199][ T8808] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.333731][ T8810] device hsr_slave_0 entered promiscuous mode [ 181.381058][ T8810] device hsr_slave_1 entered promiscuous mode 06:01:39 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x210080) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) 06:01:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000000c0)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0x48}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 181.605866][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 181.617693][ C1] hrtimer: interrupt took 24917 ns [ 181.617763][ T8808] team0: Port device team_slave_0 added [ 181.636020][ T8808] team0: Port device team_slave_1 added [ 181.793897][ T8808] device hsr_slave_0 entered promiscuous mode [ 181.831022][ T8808] device hsr_slave_1 entered promiscuous mode [ 181.871304][ T8819] chnl_net:caif_netlink_parms(): no params data found [ 181.909162][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state 06:01:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000080)) syz_extract_tcp_res(&(0x7f0000000000), 0x101, 0x2) [ 181.916582][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.924840][ T8815] device bridge_slave_0 entered promiscuous mode [ 181.964682][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.976452][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.985062][ T8815] device bridge_slave_1 entered promiscuous mode 06:01:40 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x616, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'i\x00\x00\"\x00\x00\x00\x00\xa2\xccb\x0eaR\xd1\xab', 0x43732e5398416f1a}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000100)={0x9, 0x6, [{0x91, 0x0, 0x80}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6f}, {0x1000, 0x0, 0x6}, {0x9, 0x0, 0x4a}, {0x20, 0x0, 0xd4}, {0x9, 0x0, 0x5a}, {0x1, 0x0, 0x4}, {0xffff, 0x0, 0x3}]}) close(r1) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) [ 182.011889][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.019009][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.038782][ T8819] device bridge_slave_0 entered promiscuous mode [ 182.078426][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.100126][ T8815] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.114375][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.121777][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.129509][ T8819] device bridge_slave_1 entered promiscuous mode [ 182.171301][ T8815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.193224][ T8815] team0: Port device team_slave_0 added [ 182.201032][ T8819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.211411][ T8815] team0: Port device team_slave_1 added [ 182.244229][ T8819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.264864][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.278793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.287035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.306549][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.329084][ T8819] team0: Port device team_slave_0 added [ 182.338628][ T8819] team0: Port device team_slave_1 added 06:01:40 executing program 0: r0 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x616, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'i\x00\x00\"\x00\x00\x00\x00\xa2\xccb\x0eaR\xd1\xab', 0x43732e5398416f1a}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000100)={0x9, 0x6, [{0x91, 0x0, 0x80}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6f}, {0x1000, 0x0, 0x6}, {0x9, 0x0, 0x4a}, {0x20, 0x0, 0xd4}, {0x9, 0x0, 0x5a}, {0x1, 0x0, 0x4}, {0xffff, 0x0, 0x3}]}) close(r1) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) [ 182.364534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.374475][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.383253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.390333][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.400466][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.415404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.425053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.432223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.446256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.461330][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.504028][ T8815] device hsr_slave_0 entered promiscuous mode [ 182.551672][ T8815] device hsr_slave_1 entered promiscuous mode [ 182.605385][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.613396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.621566][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.657723][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.667205][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.676733][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.691513][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.698630][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state 06:01:40 executing program 0: syz_open_dev$binder(&(0x7f0000005980)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x20080, 0x16a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000040)) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000700)="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", 0x258) [ 182.707622][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.753603][ T8819] device hsr_slave_0 entered promiscuous mode [ 182.791612][ T8819] device hsr_slave_1 entered promiscuous mode [ 182.832800][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.876355][ T8805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.887552][ T8805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.905741][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.914352][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.931914][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.940929][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.949572][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.958621][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.968019][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.976607][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.985309][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.994159][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.002964][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.010025][ T8816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.017720][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.026843][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.034700][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.063916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.072529][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.080163][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.089526][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.098486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.107861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.116601][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.125746][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.135649][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.164848][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 06:01:41 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) [ 183.178521][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.191595][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.215857][ T8810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.228912][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.258770][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.274377][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.295350][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.302559][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.311185][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.319890][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.381531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.389678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.411749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 06:01:41 executing program 1: r0 = msgget(0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="11835e7002157c5ccd8352e600ac5d61aecbc4f62112bc37e693076efc8e2221d779f8b2a7b7946f3a545c2e2f4db09c735c36fc180c19050b571b12db26fe63f1d2e0eaef168a8e87fd7cc1b641224f1bc2928bbb9b321732fd478de261b8f5f952bc2e3a0e3fb2b7c1bd91a6e5ba029f1cc4611516aaa05add1b96e8ce3dc022c1bc8f5c71d75c4fa6352dbb83d30ae3b4ce0c31b461e386a6c3abfe058a5df4ba2d4455228b86232c7d5c0eef45ecafc5d1a40dbc6d2cf7f345aaf47a908ea5b179d5f592036b3ce99e42fca0a1146b0588d2a9b226d7a7", 0xd9, 0xffffffffffffffff) r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="091d13c0b89cdbc7ade82fca9e6832605ddff9192ae4a916ab7aa44fe0f74953190a70d2e5e36f8b5b2abeee6de913bc64715de960430a3117c4a19cf3b28c3d8e5bfb8900706850033ce6a37b3e85eefcd8de606609aafcfca1fe2f407bdd664a5d3445e04a738e58b5cec97c6de2afcbbb87039d050fc0f4c4f4cb628525c5e04d55f733059b4d3050dd850c662c2a547aca", 0x93, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd4(r3, &(0x7f0000000200)={0xffffffffffffff7f}, 0x8, 0x80000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='rxrpc\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r2}) msgctl$MSG_STAT(r0, 0xd, &(0x7f00000004c0)=""/178) [ 183.439079][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.446299][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.454802][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.479320][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.530756][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.568700][ T8808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.581646][ T8808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.597379][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.617660][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.630363][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.642000][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.650451][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.659161][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.667912][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.676425][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.686185][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.694296][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.712610][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.773098][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.785349][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.809760][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.818113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.826587][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.844420][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.853146][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.861200][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.869847][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.878909][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.886051][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.896186][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.910673][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.918749][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.929375][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.938236][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.945407][ T8811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.953649][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.971330][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.992089][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.001446][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.009808][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.016944][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.025321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.034059][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.043456][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.050625][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.071446][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.080021][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.122233][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.137747][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.146725][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.167579][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.175965][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.185643][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.194886][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.206269][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.228601][ T8815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.242003][ T8815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.249908][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.259814][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.269126][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.278053][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.286691][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.295253][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.304607][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.320974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 06:01:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'\x00', 0x2}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'bcsh0\x00', 0x97a9}) syz_emit_ethernet(0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000811b00000800450000140000000000009078ac141400ac1423fb00"/58], 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x151100, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x1}, 0x8) 06:01:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x2000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000fd], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x6]}) [ 184.332997][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.378048][ T8875] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 184.382293][ T8819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.409439][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.436660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.454396][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.474312][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.515072][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 06:01:42 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x581c00, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0xf, &(0x7f0000000040)=0x100000000, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x7) 06:01:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0x6, @empty, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @empty}, 0x25b) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r2, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0", 0x79}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001c40)=[{0x0}], 0x1}}], 0x3, 0x0) 06:01:42 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff8f) 06:01:42 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x5dc0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002f00)=[{0x0, 0x73, 0x0}], 0x1dc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) 06:01:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc87, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7526}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0xfffffffffffffffa}, &(0x7f0000000200)=0x8) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) 06:01:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x0, 0xfffffff0}, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x2) 06:01:43 executing program 1: setrlimit(0x0, &(0x7f0000000000)={0x0, 0x8}) setrlimit(0x0, &(0x7f0000000100)={0x7, 0x10}) chroot(&(0x7f0000000040)='./file0\x00') 06:01:43 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff8f) 06:01:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000040)="0f320f21b40f0f39bbf20f009192870f20860f20d86635200000000f22d8670fae093e0f00d00f01df3e3680ab0e0000", 0x30}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000002000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYBLOB='\x00'/36], 0x70) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0xbffff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:01:43 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffff, 0x200000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80101001, 0x0) close(r3) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000000)={0x0, 0x6}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 06:01:43 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x600, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x400, 0x84, &(0x7f00000001c0)) syz_execute_func(&(0x7f0000000080)="61368ec10f9df40c65654f660f381596b83800001b69e469696200d9d9d00ffe0c1c0000005bc4e2f925cd1cc16ceda2794243fa8282dfe4dac4c25d074bc4c3950c7ea02d1626660f3839a232233333513666f3e1dcca7d73fa063e0f01c2efc3c4c211b75a26363ef8c4e19560620af2d9232c24bd8bc978d2262600080f677905c401fe1d8bf4f4df646736676666430fefb3000000007250314f864f86450fc1f917660f97adf2fffffff30b0f8585141123d83ddc") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) 06:01:43 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffef1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000500)=r4, 0x12) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) 06:01:43 executing program 3: clock_adjtime(0x0, &(0x7f0000000280)={0xffff7fff, 0x5abc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x6, 0x4}) open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x10) 06:01:43 executing program 5: msgget$private(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9af, 0x4000) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x0, 0x8000, 0x0, 0x7, 0xed6f, 0x0, 0x100000000, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x373, 0x100000000, 0x0, 0x0, 0x652f, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x20004000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, [0x200, 0x0, 0x3, 0x3ff]}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x12e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r0, &(0x7f0000000380)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000400)=0x80, 0x0) 06:01:43 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffff, 0x200000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80101001, 0x0) close(r3) socket$packet(0x11, 0x0, 0x300) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000000)={0x0, 0x6}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 185.678581][ T8932] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 185.704233][ T8932] CPU: 1 PID: 8932 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #7 [ 185.712074][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.722126][ T8932] Call Trace: [ 185.725430][ T8932] dump_stack+0x172/0x1f0 [ 185.729763][ T8932] dump_header+0x10f/0xb6c [ 185.734185][ T8932] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 185.739999][ T8932] ? ___ratelimit+0x60/0x595 [ 185.744586][ T8932] ? do_raw_spin_unlock+0x57/0x270 [ 185.749704][ T8932] oom_kill_process.cold+0x10/0x15 [ 185.754822][ T8932] out_of_memory+0x79a/0x1280 [ 185.759503][ T8932] ? oom_killer_disable+0x280/0x280 [ 185.764713][ T8932] mem_cgroup_out_of_memory+0x1ca/0x230 [ 185.770260][ T8932] ? memcg_event_wake+0x230/0x230 [ 185.775288][ T8932] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 185.781097][ T8932] ? cgroup_file_notify+0x140/0x1b0 [ 185.786303][ T8932] memory_max_write+0x169/0x300 [ 185.791168][ T8932] ? lockdep_hardirqs_on+0x418/0x5d0 [ 185.796464][ T8932] ? mem_cgroup_write+0x360/0x360 [ 185.801490][ T8932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 185.806954][ T8932] cgroup_file_write+0x241/0x790 [ 185.811895][ T8932] ? mem_cgroup_write+0x360/0x360 [ 185.816916][ T8932] ? kill_css+0x380/0x380 [ 185.821244][ T8932] ? kernfs_ops+0x9f/0x120 [ 185.825654][ T8932] ? kernfs_ops+0xbe/0x120 [ 185.830072][ T8932] ? kill_css+0x380/0x380 [ 185.834398][ T8932] kernfs_fop_write+0x2b8/0x480 [ 185.839250][ T8932] __vfs_write+0x8a/0x110 [ 185.843577][ T8932] ? kernfs_fop_open+0xd80/0xd80 [ 185.848510][ T8932] vfs_write+0x20c/0x580 [ 185.852751][ T8932] ksys_write+0x14f/0x290 [ 185.857077][ T8932] ? __ia32_sys_read+0xb0/0xb0 [ 185.861840][ T8932] ? do_fast_syscall_32+0xd1/0xd7d [ 185.866946][ T8932] ? entry_SYSENTER_compat+0x70/0x7f [ 185.872230][ T8932] ? do_fast_syscall_32+0xd1/0xd7d [ 185.877343][ T8932] __ia32_sys_write+0x71/0xb0 [ 185.882019][ T8932] do_fast_syscall_32+0x27b/0xd7d [ 185.887043][ T8932] entry_SYSENTER_compat+0x70/0x7f [ 185.892147][ T8932] RIP: 0023:0xf7efe849 [ 185.896220][ T8932] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.915818][ T8932] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 185.924228][ T8932] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 185.932194][ T8932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.940163][ T8932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.948139][ T8932] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 185.956113][ T8932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.969614][ T8932] memory: usage 2956kB, limit 0kB, failcnt 0 06:01:44 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x5dc0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002f00)=[{0x0, 0x73, 0x0}], 0x1dc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) 06:01:44 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc040564b, &(0x7f0000000140)) 06:01:44 executing program 3: unshare(0x40600) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="c4d8adc146ed0f2f876cca876beb498b8638dae747f1347dd21f8c9b606b190093e28e2debd6536fa5a4ad6b388fe9c670560ae8fcc18959fae6e9c46c16a7987f31eb78550cbe03d80f389785db414dff141feb2dfafcf28140ab0f715e10993731309c2c4350f879c2870cc4a49573d4b2682e6eca191da58b9943d78072d00fb707417ec3", 0x86, 0xfffffffffffffffc) keyctl$instantiate(0xc, r0, &(0x7f0000000180)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x1, 0x20000000000001, 0x0, 0x0}, 0x2c) readv(r1, 0x0, 0x0) 06:01:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x5dc0, @empty}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002f00)=[{0x0, 0x73, 0x0}], 0x1dc, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) [ 185.989745][ T8932] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 186.096684][ T8932] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 06:01:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x400000002, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10, 0x0, [{}, {}, {}, {}, {0x0, 0xf}]}}) 06:01:44 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x494, 0x60000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="cd38ffe40f97", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x0, @ipv4={[], [], @broadcast}, @mcast2, {[], @icmpv6=@mld={0x2, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}}}}, 0x0) [ 186.133937][ T8932] Memory cgroup stats for /syz1: cache:0KB rss:2264KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2192KB inactive_file:0KB active_file:0KB unevictable:0KB [ 186.300232][ T8932] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8931,uid=0 06:01:44 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) write$sndseq(r0, &(0x7f00000002c0)=[{0x9, 0x4, 0x3, 0x5, @time={0x0, 0x1c9c380}, {0x1ff, 0x20}, {0x100, 0x4}, @raw32={[0x7, 0x244000000]}}, {0x80000001, 0x0, 0xdc, 0xc9a, @tick=0x6e, {0xffffffff, 0x9}, {0x8, 0x3}, @raw32={[0x100, 0x7f]}}, {0x5, 0x0, 0x9, 0x25, @time={r1, r2+30000000}, {0xfffffffffffffffa, 0x38b}, {0x8, 0x6}, @queue={0xffffffffffffffc4, {0x3, 0x101}}}, {0xe2, 0xfff, 0x8, 0x9, @time={0x0, 0x1c9c380}, {0x8a9}, {0x1, 0x8}, @raw32={[0x80, 0x1cee, 0x7]}}, {0x200, 0xa4b1, 0x1, 0x0, @time={0x77359400}, {0x3, 0x3}, {0xd6, 0xff4}, @queue={0x80000001, {0xcb44, 0x2}}}], 0x8c) socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/254, 0xfe}], 0x1}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl(r3, 0xc25c4110, &(0x7f0000000000)="0c8e63bfb8853ed1c4944f0ff77aa59ff1e7904b1697e3ff3a772b61235df59e5c002318004907e98f37cd89619ad9f8c413ad7e131237a3a080522fb6822482dbb9393c27") [ 186.454756][ T8932] Memory cgroup out of memory: Killed process 8931 (syz-executor.1) total-vm:72452kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB [ 186.617825][ T1041] oom_reaper: reaped process 8931 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 06:01:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='ns\x00') exit(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) getdents64(r0, 0x0, 0x0) 06:01:45 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffef1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000500)=r4, 0x12) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) 06:01:45 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x400}, {0xa, 0x4e24, 0x1, @remote, 0x5}, 0x80, [0x0, 0x1, 0x3, 0x2, 0x4, 0x7, 0x100, 0x2]}, 0x5c) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)) 06:01:45 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) alarm(0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x1, 0x5}) [ 186.952181][ T8805] syz-executor.1 invoked oom-killer: gfp_mask=0x40cd0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 187.072416][ T8805] CPU: 1 PID: 8805 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #7 [ 187.080270][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.090334][ T8805] Call Trace: [ 187.093641][ T8805] dump_stack+0x172/0x1f0 [ 187.097992][ T8805] dump_header+0x10f/0xb6c [ 187.102420][ T8805] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 187.108237][ T8805] ? ___ratelimit+0x60/0x595 [ 187.112828][ T8805] ? do_raw_spin_unlock+0x57/0x270 [ 187.117943][ T8805] oom_kill_process.cold+0x10/0x15 [ 187.123063][ T8805] out_of_memory+0x79a/0x1280 [ 187.127739][ T8805] ? lock_downgrade+0x880/0x880 [ 187.132586][ T8805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.138828][ T8805] ? oom_killer_disable+0x280/0x280 [ 187.144021][ T8805] ? find_held_lock+0x35/0x130 [ 187.148789][ T8805] mem_cgroup_out_of_memory+0x1ca/0x230 [ 187.154335][ T8805] ? memcg_event_wake+0x230/0x230 [ 187.159364][ T8805] ? do_raw_spin_unlock+0x57/0x270 [ 187.164477][ T8805] ? _raw_spin_unlock+0x2d/0x50 [ 187.169338][ T8805] try_charge+0x102c/0x15c0 [ 187.173852][ T8805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 187.180098][ T8805] ? should_fail+0x1de/0x852 [ 187.184720][ T8805] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 187.190280][ T8805] ? rcu_read_lock_sched_held+0x110/0x130 [ 187.196006][ T8805] ? __alloc_pages_nodemask+0x61b/0x8d0 [ 187.201563][ T8805] __memcg_kmem_charge_memcg+0x7c/0x130 [ 187.207114][ T8805] ? memcg_kmem_put_cache+0xb0/0xb0 [ 187.212309][ T8805] ? cache_grow_begin+0x3d6/0x650 [ 187.217335][ T8805] ? lockdep_hardirqs_on+0x418/0x5d0 [ 187.222628][ T8805] ? trace_hardirqs_on+0x67/0x220 [ 187.227654][ T8805] cache_grow_begin+0x402/0x650 [ 187.232509][ T8805] ? __cpuset_node_allowed+0x136/0x540 [ 187.237963][ T8805] fallback_alloc+0x1fd/0x2d0 [ 187.242643][ T8805] ____cache_alloc_node+0x1be/0x1e0 [ 187.247842][ T8805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 187.254103][ T8805] kmem_cache_alloc+0x1e8/0x6f0 [ 187.258950][ T8805] ? __d_lookup+0x433/0x760 [ 187.263448][ T8805] ? lookup_dcache+0x23/0x140 [ 187.268692][ T8805] ? d_lookup+0xf9/0x260 [ 187.272947][ T8805] __d_alloc+0x2e/0x8c0 [ 187.277104][ T8805] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 187.282828][ T8805] d_alloc+0x4d/0x280 [ 187.286817][ T8805] __lookup_hash+0xcd/0x190 [ 187.291317][ T8805] ? kasan_check_write+0x14/0x20 [ 187.296254][ T8805] filename_create+0x1a7/0x4f0 [ 187.301024][ T8805] ? kern_path_mountpoint+0x40/0x40 [ 187.306392][ T8805] ? strncpy_from_user+0x2ac/0x380 [ 187.311511][ T8805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.317746][ T8805] ? getname_flags+0x277/0x5b0 [ 187.322514][ T8805] do_mkdirat+0xb5/0x2a0 [ 187.326761][ T8805] ? __ia32_sys_mknod+0xb0/0xb0 [ 187.331609][ T8805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.337064][ T8805] ? entry_SYSENTER_compat+0x70/0x7f [ 187.342344][ T8805] ? do_fast_syscall_32+0xd1/0xd7d [ 187.347452][ T8805] ? lockdep_hardirqs_on+0x418/0x5d0 [ 187.352736][ T8805] __ia32_sys_mkdir+0x5a/0x80 [ 187.357413][ T8805] do_fast_syscall_32+0x27b/0xd7d [ 187.362439][ T8805] entry_SYSENTER_compat+0x70/0x7f [ 187.367541][ T8805] RIP: 0023:0xf7efe849 [ 187.371617][ T8805] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.391232][ T8805] RSP: 002b:000000000847fd7c EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 187.399645][ T8805] RAX: ffffffffffffffda RBX: 000000000847fde0 RCX: 00000000000001ff [ 187.407622][ T8805] RDX: 0000000000000019 RSI: 000000000002d3ee RDI: 000000000847fde0 [ 187.415594][ T8805] RBP: 0000000000000019 R08: 0000000000000000 R09: 0000000000000000 06:01:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0xfffffffffffffff9, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) stat(0xffffffffffffffff, &(0x7f0000000800)) syz_open_dev$loop(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) [ 187.423569][ T8805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 187.431539][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.499504][ T8805] memory: usage 600kB, limit 0kB, failcnt 12 [ 187.505944][ T8805] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 187.514168][ T8805] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 187.522492][ T8805] Memory cgroup stats for /syz1: cache:0KB rss:152KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80KB inactive_file:0KB active_file:0KB unevictable:0KB 06:01:45 executing program 2: futex(&(0x7f0000000040)=0x1, 0x8f, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 06:01:45 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xff, 0x400000) r3 = getegid() ioctl$TUNSETGROUP(r2, 0x400454ce, r3) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b1c8a4e3d503e6dd"}}, 0x48}}, 0x0) 06:01:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x3) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x80000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x4000, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/155, 0x9b) signalfd(r0, &(0x7f0000000200)={0x5}, 0x8) [ 187.563455][ T8805] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=8805,uid=0 [ 187.605247][ T8805] Memory cgroup out of memory: Killed process 8805 (syz-executor.1) total-vm:72188kB, anon-rss:100kB, file-rss:35556kB, shmem-rss:0kB [ 187.679987][ T1041] oom_reaper: reaped process 8805 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 06:01:45 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @local, 0x802}], 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3ff, 0x10}, &(0x7f0000000040)=0xc) r8 = fcntl$getown(r2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) fstat(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgrp(0xffffffffffffffff) r18 = getuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) r20 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001dc0)=0x0) getresuid(&(0x7f0000001e00), &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) r24 = gettid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002140)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000002240)=0xe8) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002340)=0x0) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getegid() ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002440)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0}, &(0x7f00000024c0)=0xc) fstat(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002580)=0x0) getresuid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)) getgroups(0x3, &(0x7f0000002680)=[0xee00, 0xffffffffffffffff, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002700)={0x0, r3, 0x0, 0x2, &(0x7f00000026c0)='*\x00'}, 0x30) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002880)={0x0}, &(0x7f00000028c0)=0xc) lstat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000029c0)=0x0, &(0x7f0000002a00), &(0x7f0000002a40)) r42 = getpid() lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getegid() r45 = getpid() stat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003000), &(0x7f0000003040)=0x0, &(0x7f0000003080)) r48 = getpgid(0xffffffffffffffff) lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) r50 = getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000034c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000035c0)=0xe8) r53 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003600)={0x0}, &(0x7f0000003640)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003680)={0x0, 0x0}, &(0x7f00000036c0)=0xc) getresgid(&(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780)=0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000037c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000003900)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0, 0x0}, &(0x7f0000003980)=0xc) r60 = gettid() lstat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = getgid() r63 = getpid() stat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r65 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005100)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f00000050c0)='/dev/mixer\x00'}, 0x30) getresuid(&(0x7f0000005140)=0x0, &(0x7f0000005180), &(0x7f00000051c0)) getgroups(0x8, &(0x7f0000005200)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) fcntl$getownex(r1, 0x10, &(0x7f0000005240)={0x0, 0x0}) lstat(&(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005340)={0x0, 0x0, 0x0}, &(0x7f0000005380)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000053c0)=0x0) stat(&(0x7f0000005400)='./file0\x00', &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r75 = getpid() r76 = geteuid() getgroups(0x2, &(0x7f0000005540)=[0xffffffffffffffff, 0xee01]) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000005580)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000055c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000056c0)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005700)={0x0, 0x0, 0x0}, &(0x7f0000005740)=0xc) sendmmsg$unix(r1, &(0x7f0000005880)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="a1834e212328e1f77d6200b2a9b1e7e42b115e18d2ee5d238772bd7439c1dff30584d9570d108c8f903a8cf5b6022ebbdd9067d89d2e56653e6f7c3eac3a59d4ff85d86e7d81be5a721fa938d74d52e0d2fe8b6ca3fe85a639029045db3f8a2dac9a6bb58a146c8abb6702cc55ad8900d390fbeae48ce2c30a6491ae", 0x7c}, {&(0x7f0000000340)="16dead974a99cfeee03e9e6e8d", 0xd}, {&(0x7f0000000380)="7dd380484b60bb290a2a0b058e289990fe309d5f46c99ae3b5c201b75c08f542491f6f5ef9ecd330d604deb358320401850b1a32743663f7eef3c128bd2a3fae268053f580", 0x45}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000a40)=[@cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r5, r5]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r2]}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r20, r4]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r4, r4, r5, r2]}}], 0xdc, 0x8805}, {&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="4e2c08fe0aa0b7503d8dd109f2c4e15555af61e424e0dc8e796803bfae3f4cb01fbf07890e5f15aa68f1824a0cc6f1dc74e7b0935497706f1b9cac4bfd3cc299204668081f54329fa24d2cde8e1111367d0945700e6ead38020958f1f5ea1d1fbb148542c93a7066e875934202fac71045", 0x71}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="d390345c88bd812aa676c870bf2a853828628150d2220fb47573ebcacaec791380d1ddbe06f56dc1fb7f7406c1212238a780a052319027f7cc9d92fe005cb27d4037d38d377af57b28ed8b29492dea171d7415caac65544a6122f6f53892e667bd70c573deb6b391a9c2a6c97944fa7f6b3c4f077dcf9d938301cf09632b4261eef94bee2f280fc16900b68fdabf5ee2ba9b45216d1743098194ecd0aea0818f16188fede5da05b1770eba0dc3febac35df2dde44dec6029ecd972d22c37fa24cd06ae29dc09c83fdbe509702d885f8d85a60c834c18ffc509b5e5d464c3", 0xde}, {&(0x7f0000001d40)="20f964c6f03f14edb808f56b41cd3db6a7d816f52f3801", 0x17}], 0x4, &(0x7f0000001f40)=[@cred={{0x18, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x28, 0x4000000}, {&(0x7f0000001f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002000)="708251901c56ff5a332cc4b70a27722e1e6abbab30ae293550ba12beb3f1ae26d0b851b68ddf21dd0607357128d21f21579b25a18bf417e59e4c141977b7ba5e2f79601bad5248423ba5de80", 0x4c}, {&(0x7f0000002080)="2e9b602d9f74d0b73d3a7dbe460794f1b3d9a82018d12e1eb72961b3804de401c498944612567fb387eeaf64d32b33a13c64d1d7c840979ef906d493d1fa7f571bdaada4ed7cd4fb91e38a4797a1e6081794472141c930a19a2dc933b160f4940e8819b400c41a369d68f5c9c9745a59", 0x70}], 0x2, &(0x7f0000002a80)=[@rights={{0x18, 0x1, 0x1, [r3, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x18, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x18, 0x1, 0x2, {r30, r31, r32}}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {r33, r34, r35}}}, @cred={{0x18, 0x1, 0x2, {r36, r37, r38}}}, @rights={{0x1c, 0x1, 0x1, [r6, r2, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r39, r40, r41}}}], 0xd0, 0x20000000}, {&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)="4db2d43f77c2dadfe7334e1411c1fe", 0xf}, {&(0x7f0000002c40)="b778a326d03941b021c0dae2092bc4968db3b408d90684154c76f5ec2e65ce8adabe3ba2549ad5b63de28ddfac700c952770380191c26f31f6abfd222c33bf6ceeddf0ba95feab400abddc29a8adad734f58254fd7d2b6e423daca07d3ef9030043d2ca959242d7dc02a83db1f3d0a0e9f514dd38fe74b5c163062ce04675978ed8f6c4117ab464125f38ac7cdc443c3b32cbff8b84bcd7bf17d08e651da3e23dccab87dd071a2adcfdf3a40b8e509495b38203cd032d62f5c0563ec8a761753b1ea508ac4dd9acb62c58b331ce6ac4582bbcce08c864a40", 0xd8}, {&(0x7f0000002d40)="6f93823b0f033bdebb7f05b4af9284bf185a76843fb42e060f6204", 0x1b}, {&(0x7f0000002d80)="ccf6d48b93d816262e99c3b741ff106faa61cd42a836c9b108285ca0392a3457d7940053bd57bd30af316a9198e975091a95c0d3751cf372b4e31af246783029c280840c65e0851caa362a30bc1a1801ea6c251e2cd342dfddacd91638784b35d768d6bd1a38637eb7cabf6694635ee43e78d210b4deff7874b10476a0a4eff3788edee288c69152eb33216a5a6e3cc88e9e8c3474912c975ab4e89b", 0x9c}], 0x4, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r4, r4, r6]}}, @cred={{0x18, 0x1, 0x2, {r42, r43, r44}}}, @cred={{0x18, 0x1, 0x2, {r45, r46, r47}}}, @cred={{0x18, 0x1, 0x2, {r48, r49, r50}}}, @rights={{0x28, 0x1, 0x1, [r4, r5, r5, r5, r2, r6, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r6]}}], 0xac, 0x810}, {&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000032c0), 0x0, &(0x7f0000003300), 0x0, 0x4000000}, {&(0x7f0000003340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003440)=[{&(0x7f00000033c0)="f0682c13ac6a03c1048abb83047d1357e89a0c10b9710282", 0x18}, {&(0x7f0000003400)="33c0a3c6eba9b0d5da2aa637df3eb8bdb317059e4b56", 0x16}], 0x2, &(0x7f00000039c0)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r6, r2, r1, r5]}}, @cred={{0x18, 0x1, 0x2, {r51, r52, r53}}}, @rights={{0x18, 0x1, 0x1, [r6, r6, r6]}}, @cred={{0x18, 0x1, 0x2, {r54, r55, r56}}}, @rights={{0x30, 0x1, 0x1, [r2, r6, r0, r5, r1, r6, r4, r6, r2]}}, @cred={{0x18, 0x1, 0x2, {r57, r58, r59}}}], 0xb4, 0x844}, {&(0x7f0000003a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003b00)="dfa4b63d8c3f72a1100c2f5940e175489d513bb060b3cb6b9bfe1c54d2b16da1ce0a4c177c80a5520564a02e743a9838b51d82fdf28d4f54ebcff69336c15db6622c815f923c7bd3d1da2af2c27c11975a89515d08baa04cb8db880cf46ba479d17e4def7608dea5718ba074b2b7e60ce54d5bc2e9b161e26948e578b6f934325b70afc7644a6d96a460af785099915a7c38814146ffb876d84ac27eb7349490b5a599bdcbd1a03d75712284ffe3ee83ebc9c2948928ac94971fdb1f8e665e4b99703dd65b93ac4c31773d63db900106c2d6ae8b43c56d32e8958a68a2b2f01919cb2f", 0xe3}], 0x1, &(0x7f0000003dc0)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r60, r61, r62}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r2, r0, r2, r3, r6]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, r0, r1, r0, r3, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r63, r64, r65}}}, @rights={{0x10, 0x1, 0x1, [r5]}}], 0xa4, 0x20000080}, {&(0x7f0000003e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003f00)="7e70caa4d1498836e0c07abe61b342d3d2c827e727d07713ad293cc6f8c081497c41b7b66bcf458aa65ec0add21d34b41775e257a31ae5824a063fb5af7f019c3dff2cad23e2644a552392877fd8a7d1853f76ab67cd04c0057ea93df80dd83333c72769508a2b5c71a053612050e44697c6239180b95f53313bc31d9ddf423c1b32a9f1cb5b7f6aa3be84311d807d1023e8981d45ebceac52d85cde95764cb3c484fd667a2bade9b1595ba1f9d9d483926d2dcb38af501b143e36b371ee45432a2b4c008fb145d9b46741006231a5a5ec437102263a5416fe24062ef6c697262b9cc75ed179ad81ead2291cb1b1d52306eab30fa96b3f5d41742d9dbb2d214d2476d1d5add9492fc90e448d783352eec6ca874624779b8e9a80efeff9faecf7f054c61a75762463e2a3bd73875677e375fda149f2e6a21665d0508329e4b48f3d68d3eb1143669d5dd312332153f8d31b8beea3b60187d5d6f597443e65e58c1ee102605cc9af6e08eaf65f362c3f33a3e38f8cb3be20cfbc2119a3fab2aa607f19076a913930379df3ba7b52326ff7e2b4f075c26c99f5dcc64283140c0469dae67c2145f28066cb2ef7eb45f3c2e623015b59fa2777de60eebd3732fbe0975a41f97091a6e238b19ea6d96561085f0f5923637a9d88dbe578a5b0fe0b1eb6c75c2133b8e49af8d37cef0364aa3899020b51fe83dc4dae499017d5e5ddfeba049db6def01f656d6319c23371703d58e87512bfc8e7ecf7dc29f4f0c59b2fc2bfc935cab306030d285838d228c8ff36b626c62d3a1672e353749fdb65cbb8ab59f9679be73e1be7eac2ab085cd9b6efb0b263e2c9a60e598d1899d8e541107743e62fbfec3f37689651b3f9f88138b75546c92931d4dc5c9745b1ef20b875bb755a99fa5cf949c62d7dcfecc12e66c1d66270ab8476bc7b3ddca969fa53cfadf60e62145726b6ee196f4dc15cbcdd8aa95191e3ee4ab285e4756ceff81d27f6ad4a6aace32583e97fb34fde871641775d7ed27a2af0f9137374bc44b8a89e2392b94aefbefa082b996aa9c3317c1c419e5f7a671f8690edd0305b857ab15dfd1e0071cc2a30c5fe08a53211afba6091283169ef8e403b79ac9acc3322b7b468843476a2700ec0a05e1d2956216a411c0530cc5c04071c01312f872f99c0ee2bd27d8498a6e7975cb67c90518d3aefbe950c081107279c5c5b175f66357e26da66818711bb13d6d867d2a5110b372fd641cb2c533788cdd2e98540adf3e479290c1b613ea05637bf0054b83945979cebb916a48be1fe10ae967e00f9d075bea42aaa4d82eeeb14194e5010cbbdf326ea38e4b21815dffc8de3b0b38c274249fc6babb1eeac9db8bb6fdbd4a31c3751cad93dd71e6b03f5400a98574a903277c09065e864b45a2897072df00e76289f80d8832e0d5b57f0e5f1dbedbecf36e6f6281a81bf599fed5c1cc71ba0793c9780ff79596bf3a10f25ecc5dc640c8f52bbd222a2fa957078ed17537332952a16c4c1a897f03ff8e9a61904ce28623f210978266484409ffff07d2132ebdad259f136247c0874f495e1edce52762f8bf5f35c4bebf8316c95ff751e4bd0d772d70f50794050f8a80ab2015cc26bad3bfaefa07795e0593a96f52b21576975f31b2f4fd2489b5412398a339f301d05fd42f5e421b28ccafce6fa7141865dd287656e578e8c1728fc44a232e829f50ccd6a6ad167a49f574d4792de97aaac0d60f99e4234d4e2c288fa500021caf45b92f3c62572373318b4ca22bdda851879f6f34d2200106ddb70d56574b097ea6145d5968f3a978633124609543e9c4a7badc08f48bafe6f0a0b24d2d188b713bda03345cb6a263c91768a8fd93ca3647a4e06af39a59dcceb8e84ec62d4972cda334ea97d0c9756eb48248210c3c7ffa57e81bf68f28d830bd08cd020d9a7ad9d37cf78f1a8f0a7393af29d861fe002308f1c1e25c53a7a396de5419942516d888cda5c43c61bb15eb94969cf2bb2e3d6ef57001f6cd399e7763bc824b251f129631eedadd46bef82ec6ff007c3f0bd58f4bcd802ed33b9b366584211d1a8bcdbf962cbefde9f482afed4ac74d7f9352d3ca3ac35fdbbdb28251f30171f449e91878906b9a3727439fa47faa5b95a108cf87dadddc9fe1932286361a0bdd3558e379b1ef87083fe58ef8a23b6847c54de88300e7b4153ac65309f2aba08cbc48cc4aa2b3af9a8aa0dc3c794aea62bd44b0f6b0c82a389914086b6952830863396f10e97142109512613268b1952e20e557ab3262cac1af2aedb2e155efe8197358b75aadae9b2e723f92da8983c7921ea34b8cff24a14e4484960df636283ec92824bef40c7c0d0ebb15afd950d75e6989e509c04dbb75ba94760626d9e531523f7f8d02683f01338e767b9ea579d2bc3835455112adde0e418cd5cbe5a391f494de81823eee664254866ce605da2802eb308b344302f98f035b0d6083642a770272b4323cadd1516bf1b4a526f89b991acb6d9d8023fc78773857a99d6d6600eceed62cf8f55c8161822d5a3271aa5ddf3a5f2ac8488abfb9c91bc0bdf79892148f301751fe1abf9adc37ec164b4d8248662ec600edc6b330713c7b6789a87663fd5917ebad6a1450aa9736fad49ff2a8a3f3198258ee4c1fb799a3cb13d44542a114261c3324e05f4e48254fa48fc44f51abe64d859bdf248cbfe31504f37c21d7984391887a65bd3d9391c07c7fd3b98328494de93ab5e6f9dbcd12c39501ae648cea99b31a2a3cdca7125349df994a5b761c2b407fce4c5b7889392053b6393fc46fe02d1171ad6b6537b9e5d6aaf666b0dde5e681fd20b8aff10b2ca2a0d090f4b795fe28d523a9f8001bb191997c7274bb0f664c58c52883ffda460b21db09964ae43f2c2b3f6638d3e8a932e54caa6f0500348092f6e5a34a64ce3f69e40be95d14ccdb3aad04805930514a7c6c5f428ff31fb0ad019ddda9d06024560ae8c1c90d38315657a01b8801089267fe4edb35a7cd308c9a86b4a314303d736c6a938a21b24e6d44b1f2f1eb9051bcd85388c84b570987ea51f9e8b1fbfd5c0ef2154b80d826680badc79a45c249b462e29fb27c2a9c72d1169016aa23b5def493047a59e2fbabf84fbb70fb43b8ecacd0d747bc48ee07ed1e32870a7ccd3840a4f914b759c2af5116e4fc40cb3f06f1c62ee9113e71a607ab61ab6fe8befedfa55acd49f2e53d12c091f0d859863c95ea6132730ba8bd4b29c0c1f55d03d1090974ecfa10a9cacf30c72979ad024367206ab8e8b24d6da815321e778aadd7c3ce3cade37686e52963dbb9148cc12a9a6f302c600e4bee85ba7503cd6ad85cff20918f3dd4612c9eb63304a26c094f11787641fcf9a0b89eaf59b8e577098f56d46bd42b045e921eb7d0f714be8e1cadcb855bc2ac7208366082b0f98422764c086aeab666069454123e00340f8e35b23db81639478b66e938192f23fe48ada1cbfa8b5fe63eed2d685d9afb3a265e82f7bc86c3483f1b5381f38684cf88fb9db106f38ad1294d562543823b9a311c99fc8b46aa5328f72c00f9f9f1444760de9a09c0618b942ed39b4d2217dfcc6871f7eea8a684b8dc36fe9db4c46d5b349112c50af59d35e599e24c241bc4e64e2c8f25a03d79dee62647c9f049dd634b832b804ae60a23ead91d4cec045e35a43e74ac22947563a79dc964d6d5c73d91cb9f26c62a88d36f887dca80b55ef444cf63dba0e57a2d264512b60d4abd9dd448b7b35a811914e01ec7834262286c5639c5e97c08bb975587c20245b55418721897189a289dd71f0cc6c9c30243f08ed58e986dfa7703183221cc1e705855892e7406c54e7aade306f4c02a37c66646ec8cf1a2589072c973e21b61cb28ad92b91671de3901b573dd5683ef16e67c515f2689525a8459039f401e057e28e6400eaf480c1ed0bb2494f3ab4fcc4af8aa437e5c85eafe0e654573b1e755cdbec10b8672488ba220a12be26f88f88d5a0815786a7143e3952303dc795690d90d36e31593dcf9f0192ffd0b341abb88d45501b214918957a03b963ab8bcd4b34d05599941f61589a286783fca3d306bf3c37c3cd1a9d1c3362e99594fbfedc9300d5e4450d5b18f44fc670c4c3fba5d010504a370ac1cce76ccf540e60acd000020246663dce28f90b0b9537b16d2767eb2e148c378a8647c6cd981ca872dda90efaf671dc6325b93a1de75367e8a79a776f194c603ceff233c9260bdb5a14145bd1b58512ca6b732818154d9202059355b6e4e72447aab19ebe450078d63395cc869ba114fc85128ad25dd505204fc6ea88db6c57153aa37a46cbe22cf3e04e8aa763e09bc7c19db3bdd930ead118c2c41c8b80d3580cabd84331f78f4488188f7c91c7be5527d20eb58575ea4e0d1f597237e5c4e2012e74530f6f5355f02e9a2ff1b72762d2d8683d6d36cc09ca12bcf0d3841e87ace55d97505e48eaa8b9094e64137d73717b8d010e57d6b84d4075c8c73f49e4f80656b3430fc960d2d98843084fe56b640b94fda423cea5902a44ea4c099084256373e8a1e3a40ee00183a52181eee017bd404ea94028fe6222f60538b07f3306f81e8c48482812c285de03eb4ff571cd3df420415a31fee1da78f72f4c459d84e0cba43939a8e8448cb5df286e89ae251ca16a2ae1309c163c82256f2280bb6db695adef1fbc0aa6a858d1c948c13fbf18d3ea92ce85a95a44bd52767d0524ceee35f2de904d9d5cf1ed5583a963647364e9adab6fe8fdac4d2d81e427ec679ab80c02b665cdccdd721f4366b7a7b1eeb478c48dc46b17057bd3d214ba15d643b82cbf788bac28e4b6227457f80cd9a9b7f81cbe48edd0bf493a60d40c28bbadc3abcbc8a3c1e44820afa722040ee9e58b06266784bb81ed1729a36452687be567c4f8a92ff01ad9607fdd7f6b6ae81f4dcaf6e445b6abcd1d3947723b1e0b147aa7d5e2a43f059163f7db4b450c982756bf8e500c43cde3d2d5293af511c2593a0c492ea10702fee3dcbe5e6c1a6e9790ec60dbeba6d04f30bac96b60f80ff6ebe93987d2540e46253679964b86a675a7d37c01560764a41d17721e2984b032f3e2faf56e289abdb51672d788487097f6074a3f71925231b2a8d23ca8f00e1512222ead24461c9278d3c922f8237279258a69d7bb851c92c7fbfbb0becce15468fa43a6bab74c668f2236b2af81d774f77606f0625dc4eaa9d2aef42b51198481fa2a134d8d75e84fc5cc289361508dbb783041b2f1ce03a192e78de6e710185adf1595bbdaacb088471a5b8bb53a534ea4322e7638bb2d955053619df317ce7de41a542d2f5f64d66b9d5befae9086a17bb52cb95c8c46072bbf1a9429059f7e09029e1a6c16a66b16de791f6075ceee38b16cfd47972c42ce29c8eff13fd20a788e4480f987d2d3d5db4a594010cd3639927ab0d1b7313c2b6e2a157f8d9f93341cc42969c9ea832102c2149a52ed27142354276d097435ad46bf1d26cc51639a4084e859d6dee691d040c656162ab77c4c10dec05d58159d43eba3b490290fd37a8894c62cc5eb99c44371fe8cfa28528d112c63129123e198b4b7d44fc6a9e955963d00b9b6d8fe56575890c57d6d2fa69afc4a3ac316d1aaf314fafc0899be2f960e7fce4122e5f99e3598d6c4901f6dda01d2df27835b5bd47162f9f3800e1cbddb9e1d715009a84c6e769ccec699a36342feefa89f3740aa83ab5b53326d4459ed9da4acf6ae4ec4297d0f90a5a470875a9c5a2dcf0f7a31e19b46dc92e6e1e05d1820f8ac204d9532d7", 0x1000}], 0x1, 0x0, 0x0, 0x24000001}, {&(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000004fc0)="621a291776b336aea6e35e21852808f64c9cc0ad5bf8d3d6f48cfa7042c55c296ced50f40bb3d98cbd5c3dc4762b2ab9a90699affc3039d64c0114f1031f64ed06838e8f348e724a2938fd8cd5d090f86b4adc5db7edc7213080dc2348fb3ac621c7a795b921fc286c45cef429c62890316c5eab3bff4867a5d79f9cddcae018ddb397dff4a217877422920396eb1c2b12963c1d95b86b16ec3ebfd3c527924e396e49ba0d0b5648d7f06986ff7f1a9f89c644fefe", 0xb5}], 0x1, &(0x7f0000005780)=[@cred={{0x18, 0x1, 0x2, {r66, r67, r68}}}, @cred={{0x18, 0x1, 0x2, {r69, r70, r71}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r2, r6, r2, r0, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r72, r73, r74}}}, @cred={{0x18, 0x1, 0x2, {r75, r76, r77}}}, @cred={{0x18, 0x1, 0x2, {r78, r79, r80}}}, @rights={{0x30, 0x1, 0x1, [r4, r1, r1, r2, r0, r6, r0, r3, r3]}}], 0xd4, 0x4044844}], 0x9, 0xc0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x215c, @loopback, 0x5}}}, 0x84) sendmsg$IPVS_CMD_GET_CONFIG(r6, 0x0, 0x44801) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40402, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000500)={0x15, 0x4, &(0x7f00000004c0)="2a044ab7"}) 06:01:45 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x3e7, r0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x7ff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8f9378fb6b3e", 0x0, 0x1, 0x10, 0x1, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5197b40fb99813a058d620cec677271d9c95c9588f24a6e3d3c2e20603add3ea5fe65ffde63d09839079f60b63311481cc6dbcc80de701fe4cd76477506320257fb105e8cedefa6e1751e59a70fe0137c6d4f43687cbaeced096776003a000aab609e8d63e4adf1d64e1f6", 0x6b, r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x107000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:01:45 executing program 0: setns(0xffffffffffffffff, 0x3fffffd) 06:01:45 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', 0x0, 0x312, 0x10000000000) 06:01:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x0, 0x1, 0xfffffffffffffff9, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) stat(0xffffffffffffffff, &(0x7f0000000800)) syz_open_dev$loop(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000681000)=@abs, 0x8) 06:01:46 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffef1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000500)=r4, 0x12) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) 06:01:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x400000000000304, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xf, 0xa, 0x100000001) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 06:01:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 06:01:46 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x30, 0x400) mmap(&(0x7f00006fe000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 06:01:46 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @local, 0x802}], 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3ff, 0x10}, &(0x7f0000000040)=0xc) r8 = fcntl$getown(r2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) fstat(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgrp(0xffffffffffffffff) r18 = getuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) r20 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001dc0)=0x0) getresuid(&(0x7f0000001e00), &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) r24 = gettid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002140)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000002240)=0xe8) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002340)=0x0) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getegid() ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002440)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0}, &(0x7f00000024c0)=0xc) fstat(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002580)=0x0) getresuid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)) getgroups(0x3, &(0x7f0000002680)=[0xee00, 0xffffffffffffffff, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002700)={0x0, r3, 0x0, 0x2, &(0x7f00000026c0)='*\x00'}, 0x30) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002880)={0x0}, &(0x7f00000028c0)=0xc) lstat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000029c0)=0x0, &(0x7f0000002a00), &(0x7f0000002a40)) r42 = getpid() lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getegid() r45 = getpid() stat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003000), &(0x7f0000003040)=0x0, &(0x7f0000003080)) r48 = getpgid(0xffffffffffffffff) lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) r50 = getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000034c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000035c0)=0xe8) r53 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003600)={0x0}, &(0x7f0000003640)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003680)={0x0, 0x0}, &(0x7f00000036c0)=0xc) getresgid(&(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780)=0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000037c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000003900)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0, 0x0}, &(0x7f0000003980)=0xc) r60 = gettid() lstat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = getgid() r63 = getpid() stat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r65 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005100)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f00000050c0)='/dev/mixer\x00'}, 0x30) getresuid(&(0x7f0000005140)=0x0, &(0x7f0000005180), &(0x7f00000051c0)) getgroups(0x8, &(0x7f0000005200)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) fcntl$getownex(r1, 0x10, &(0x7f0000005240)={0x0, 0x0}) lstat(&(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005340)={0x0, 0x0, 0x0}, &(0x7f0000005380)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000053c0)=0x0) stat(&(0x7f0000005400)='./file0\x00', &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r75 = getpid() r76 = geteuid() getgroups(0x2, &(0x7f0000005540)=[0xffffffffffffffff, 0xee01]) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000005580)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000055c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000056c0)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005700)={0x0, 0x0, 0x0}, &(0x7f0000005740)=0xc) sendmmsg$unix(r1, &(0x7f0000005880)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="a1834e212328e1f77d6200b2a9b1e7e42b115e18d2ee5d238772bd7439c1dff30584d9570d108c8f903a8cf5b6022ebbdd9067d89d2e56653e6f7c3eac3a59d4ff85d86e7d81be5a721fa938d74d52e0d2fe8b6ca3fe85a639029045db3f8a2dac9a6bb58a146c8abb6702cc55ad8900d390fbeae48ce2c30a6491ae", 0x7c}, {&(0x7f0000000340)="16dead974a99cfeee03e9e6e8d", 0xd}, {&(0x7f0000000380)="7dd380484b60bb290a2a0b058e289990fe309d5f46c99ae3b5c201b75c08f542491f6f5ef9ecd330d604deb358320401850b1a32743663f7eef3c128bd2a3fae268053f580", 0x45}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000a40)=[@cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r5, r5]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r2]}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r20, r4]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r4, r4, r5, r2]}}], 0xdc, 0x8805}, {&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="4e2c08fe0aa0b7503d8dd109f2c4e15555af61e424e0dc8e796803bfae3f4cb01fbf07890e5f15aa68f1824a0cc6f1dc74e7b0935497706f1b9cac4bfd3cc299204668081f54329fa24d2cde8e1111367d0945700e6ead38020958f1f5ea1d1fbb148542c93a7066e875934202fac71045", 0x71}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="d390345c88bd812aa676c870bf2a853828628150d2220fb47573ebcacaec791380d1ddbe06f56dc1fb7f7406c1212238a780a052319027f7cc9d92fe005cb27d4037d38d377af57b28ed8b29492dea171d7415caac65544a6122f6f53892e667bd70c573deb6b391a9c2a6c97944fa7f6b3c4f077dcf9d938301cf09632b4261eef94bee2f280fc16900b68fdabf5ee2ba9b45216d1743098194ecd0aea0818f16188fede5da05b1770eba0dc3febac35df2dde44dec6029ecd972d22c37fa24cd06ae29dc09c83fdbe509702d885f8d85a60c834c18ffc509b5e5d464c3", 0xde}, {&(0x7f0000001d40)="20f964c6f03f14edb808f56b41cd3db6a7d816f52f3801", 0x17}], 0x4, &(0x7f0000001f40)=[@cred={{0x18, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x28, 0x4000000}, {&(0x7f0000001f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002000)="708251901c56ff5a332cc4b70a27722e1e6abbab30ae293550ba12beb3f1ae26d0b851b68ddf21dd0607357128d21f21579b25a18bf417e59e4c141977b7ba5e2f79601bad5248423ba5de80", 0x4c}, {&(0x7f0000002080)="2e9b602d9f74d0b73d3a7dbe460794f1b3d9a82018d12e1eb72961b3804de401c498944612567fb387eeaf64d32b33a13c64d1d7c840979ef906d493d1fa7f571bdaada4ed7cd4fb91e38a4797a1e6081794472141c930a19a2dc933b160f4940e8819b400c41a369d68f5c9c9745a59", 0x70}], 0x2, &(0x7f0000002a80)=[@rights={{0x18, 0x1, 0x1, [r3, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x18, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x18, 0x1, 0x2, {r30, r31, r32}}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {r33, r34, r35}}}, @cred={{0x18, 0x1, 0x2, {r36, r37, r38}}}, @rights={{0x1c, 0x1, 0x1, [r6, r2, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r39, r40, r41}}}], 0xd0, 0x20000000}, {&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)="4db2d43f77c2dadfe7334e1411c1fe", 0xf}, {&(0x7f0000002c40)="b778a326d03941b021c0dae2092bc4968db3b408d90684154c76f5ec2e65ce8adabe3ba2549ad5b63de28ddfac700c952770380191c26f31f6abfd222c33bf6ceeddf0ba95feab400abddc29a8adad734f58254fd7d2b6e423daca07d3ef9030043d2ca959242d7dc02a83db1f3d0a0e9f514dd38fe74b5c163062ce04675978ed8f6c4117ab464125f38ac7cdc443c3b32cbff8b84bcd7bf17d08e651da3e23dccab87dd071a2adcfdf3a40b8e509495b38203cd032d62f5c0563ec8a761753b1ea508ac4dd9acb62c58b331ce6ac4582bbcce08c864a40", 0xd8}, {&(0x7f0000002d40)="6f93823b0f033bdebb7f05b4af9284bf185a76843fb42e060f6204", 0x1b}, {&(0x7f0000002d80)="ccf6d48b93d816262e99c3b741ff106faa61cd42a836c9b108285ca0392a3457d7940053bd57bd30af316a9198e975091a95c0d3751cf372b4e31af246783029c280840c65e0851caa362a30bc1a1801ea6c251e2cd342dfddacd91638784b35d768d6bd1a38637eb7cabf6694635ee43e78d210b4deff7874b10476a0a4eff3788edee288c69152eb33216a5a6e3cc88e9e8c3474912c975ab4e89b", 0x9c}], 0x4, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r4, r4, r6]}}, @cred={{0x18, 0x1, 0x2, {r42, r43, r44}}}, @cred={{0x18, 0x1, 0x2, {r45, r46, r47}}}, @cred={{0x18, 0x1, 0x2, {r48, r49, r50}}}, @rights={{0x28, 0x1, 0x1, [r4, r5, r5, r5, r2, r6, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r6]}}], 0xac, 0x810}, {&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000032c0), 0x0, &(0x7f0000003300), 0x0, 0x4000000}, {&(0x7f0000003340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003440)=[{&(0x7f00000033c0)="f0682c13ac6a03c1048abb83047d1357e89a0c10b9710282", 0x18}, {&(0x7f0000003400)="33c0a3c6eba9b0d5da2aa637df3eb8bdb317059e4b56", 0x16}], 0x2, &(0x7f00000039c0)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r6, r2, r1, r5]}}, @cred={{0x18, 0x1, 0x2, {r51, r52, r53}}}, @rights={{0x18, 0x1, 0x1, [r6, r6, r6]}}, @cred={{0x18, 0x1, 0x2, {r54, r55, r56}}}, @rights={{0x30, 0x1, 0x1, [r2, r6, r0, r5, r1, r6, r4, r6, r2]}}, @cred={{0x18, 0x1, 0x2, {r57, r58, r59}}}], 0xb4, 0x844}, {&(0x7f0000003a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003b00)="dfa4b63d8c3f72a1100c2f5940e175489d513bb060b3cb6b9bfe1c54d2b16da1ce0a4c177c80a5520564a02e743a9838b51d82fdf28d4f54ebcff69336c15db6622c815f923c7bd3d1da2af2c27c11975a89515d08baa04cb8db880cf46ba479d17e4def7608dea5718ba074b2b7e60ce54d5bc2e9b161e26948e578b6f934325b70afc7644a6d96a460af785099915a7c38814146ffb876d84ac27eb7349490b5a599bdcbd1a03d75712284ffe3ee83ebc9c2948928ac94971fdb1f8e665e4b99703dd65b93ac4c31773d63db900106c2d6ae8b43c56d32e8958a68a2b2f01919cb2f", 0xe3}], 0x1, &(0x7f0000003dc0)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r60, r61, r62}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r2, r0, r2, r3, r6]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, r0, r1, r0, r3, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r63, r64, r65}}}, @rights={{0x10, 0x1, 0x1, [r5]}}], 0xa4, 0x20000080}, {&(0x7f0000003e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003f00)="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", 0x1000}], 0x1, 0x0, 0x0, 0x24000001}, {&(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000004fc0)="621a291776b336aea6e35e21852808f64c9cc0ad5bf8d3d6f48cfa7042c55c296ced50f40bb3d98cbd5c3dc4762b2ab9a90699affc3039d64c0114f1031f64ed06838e8f348e724a2938fd8cd5d090f86b4adc5db7edc7213080dc2348fb3ac621c7a795b921fc286c45cef429c62890316c5eab3bff4867a5d79f9cddcae018ddb397dff4a217877422920396eb1c2b12963c1d95b86b16ec3ebfd3c527924e396e49ba0d0b5648d7f06986ff7f1a9f89c644fefe", 0xb5}], 0x1, &(0x7f0000005780)=[@cred={{0x18, 0x1, 0x2, {r66, r67, r68}}}, @cred={{0x18, 0x1, 0x2, {r69, r70, r71}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r2, r6, r2, r0, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r72, r73, r74}}}, @cred={{0x18, 0x1, 0x2, {r75, r76, r77}}}, @cred={{0x18, 0x1, 0x2, {r78, r79, r80}}}, @rights={{0x30, 0x1, 0x1, [r4, r1, r1, r2, r0, r6, r0, r3, r3]}}], 0xd4, 0x4044844}], 0x9, 0xc0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x215c, @loopback, 0x5}}}, 0x84) sendmsg$IPVS_CMD_GET_CONFIG(r6, 0x0, 0x44801) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40402, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000500)={0x15, 0x4, &(0x7f00000004c0)="2a044ab7"}) 06:01:46 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000100)={0x80, 0x88b008, "bc27e330e4ad7f58e9069483aaba8ba947c9e0f60e529297", {0x900000, 0xde}, 0x10001}) socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) r2 = socket(0x200000000000011, 0x20000000080803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="7af02ee2412f"}, 0x14) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x10012}]) 06:01:46 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffef1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x3, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000500)=r4, 0x12) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x0, 0x3, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) 06:01:46 executing program 5: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000002480)=""/4096) [ 188.872561][ T9061] QAT: Invalid ioctl 06:01:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0x4, r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0063404001"], 0x0, 0x0, 0x0}) 06:01:47 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x3e7, r0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x7ff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8f9378fb6b3e", 0x0, 0x1, 0x10, 0x1, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5197b40fb99813a058d620cec677271d9c95c9588f24a6e3d3c2e20603add3ea5fe65ffde63d09839079f60b63311481cc6dbcc80de701fe4cd76477506320257fb105e8cedefa6e1751e59a70fe0137c6d4f43687cbaeced096776003a000aab609e8d63e4adf1d64e1f6", 0x6b, r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x107000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 188.957051][ T9061] QAT: Invalid ioctl 06:01:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000001600)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001640)={@dev={0xfe, 0x80, [], 0xb}, 0x5e, r2}) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="88a8ae304dc0e85e025884b32f93faaff3bdea4f", 0x14}], 0x1}}], 0x1, 0x10) [ 189.051850][ T22] binder: unexpected work type, 4, not freed [ 189.058743][ T9073] binder: 9070:9073 ioctl 4020ae76 20000040 returned -22 06:01:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x61, "3f8c4be7792594d74d8e8e1e64c4131ac952222bb19a527e66cfaebb08c9358a44a007774c3d951e97dfea0b42bfb49ce5b6d9eda04e4004c86b66cbbc71f2ebb2d8c68c40f7cfc3e633810300e738742a6489e9a3515164d91015664d8c29e785"}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x200}, &(0x7f0000000180)=0x8) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) clock_gettime(0x0, 0x0) [ 189.125506][ T9077] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 06:01:47 executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @local, 0x802}], 0x2c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my}, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3ff, 0x10}, &(0x7f0000000040)=0xc) r8 = fcntl$getown(r2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) fstat(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgrp(0xffffffffffffffff) r18 = getuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) r20 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001dc0)=0x0) getresuid(&(0x7f0000001e00), &(0x7f0000001e40)=0x0, &(0x7f0000001e80)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) r24 = gettid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002140)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@remote}}, &(0x7f0000002240)=0xe8) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002340)=0x0) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getegid() ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002440)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002480)={0x0, 0x0}, &(0x7f00000024c0)=0xc) fstat(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000002580)=0x0) getresuid(&(0x7f00000025c0), &(0x7f0000002600)=0x0, &(0x7f0000002640)) getgroups(0x3, &(0x7f0000002680)=[0xee00, 0xffffffffffffffff, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002700)={0x0, r3, 0x0, 0x2, &(0x7f00000026c0)='*\x00'}, 0x30) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002880)={0x0}, &(0x7f00000028c0)=0xc) lstat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000029c0)=0x0, &(0x7f0000002a00), &(0x7f0000002a40)) r42 = getpid() lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getegid() r45 = getpid() stat(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003000), &(0x7f0000003040)=0x0, &(0x7f0000003080)) r48 = getpgid(0xffffffffffffffff) lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) r50 = getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000003480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000034c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000035c0)=0xe8) r53 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003600)={0x0}, &(0x7f0000003640)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003680)={0x0, 0x0}, &(0x7f00000036c0)=0xc) getresgid(&(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780)=0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000037c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000003900)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003940)={0x0, 0x0, 0x0}, &(0x7f0000003980)=0xc) r60 = gettid() lstat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r62 = getgid() r63 = getpid() stat(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r65 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005100)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f00000050c0)='/dev/mixer\x00'}, 0x30) getresuid(&(0x7f0000005140)=0x0, &(0x7f0000005180), &(0x7f00000051c0)) getgroups(0x8, &(0x7f0000005200)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) fcntl$getownex(r1, 0x10, &(0x7f0000005240)={0x0, 0x0}) lstat(&(0x7f0000005280)='./file0\x00', &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005340)={0x0, 0x0, 0x0}, &(0x7f0000005380)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000053c0)=0x0) stat(&(0x7f0000005400)='./file0\x00', &(0x7f0000005440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r75 = getpid() r76 = geteuid() getgroups(0x2, &(0x7f0000005540)=[0xffffffffffffffff, 0xee01]) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000005580)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000055c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000056c0)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005700)={0x0, 0x0, 0x0}, &(0x7f0000005740)=0xc) sendmmsg$unix(r1, &(0x7f0000005880)=[{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)="a1834e212328e1f77d6200b2a9b1e7e42b115e18d2ee5d238772bd7439c1dff30584d9570d108c8f903a8cf5b6022ebbdd9067d89d2e56653e6f7c3eac3a59d4ff85d86e7d81be5a721fa938d74d52e0d2fe8b6ca3fe85a639029045db3f8a2dac9a6bb58a146c8abb6702cc55ad8900d390fbeae48ce2c30a6491ae", 0x7c}, {&(0x7f0000000340)="16dead974a99cfeee03e9e6e8d", 0xd}, {&(0x7f0000000380)="7dd380484b60bb290a2a0b058e289990fe309d5f46c99ae3b5c201b75c08f542491f6f5ef9ecd330d604deb358320401850b1a32743663f7eef3c128bd2a3fae268053f580", 0x45}, {&(0x7f0000000400)}], 0x4, &(0x7f0000000a40)=[@cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r5, r5]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x18, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r2]}}, @cred={{0x18, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r20, r4]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r4, r4, r5, r2]}}], 0xdc, 0x8805}, {&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)="4e2c08fe0aa0b7503d8dd109f2c4e15555af61e424e0dc8e796803bfae3f4cb01fbf07890e5f15aa68f1824a0cc6f1dc74e7b0935497706f1b9cac4bfd3cc299204668081f54329fa24d2cde8e1111367d0945700e6ead38020958f1f5ea1d1fbb148542c93a7066e875934202fac71045", 0x71}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="d390345c88bd812aa676c870bf2a853828628150d2220fb47573ebcacaec791380d1ddbe06f56dc1fb7f7406c1212238a780a052319027f7cc9d92fe005cb27d4037d38d377af57b28ed8b29492dea171d7415caac65544a6122f6f53892e667bd70c573deb6b391a9c2a6c97944fa7f6b3c4f077dcf9d938301cf09632b4261eef94bee2f280fc16900b68fdabf5ee2ba9b45216d1743098194ecd0aea0818f16188fede5da05b1770eba0dc3febac35df2dde44dec6029ecd972d22c37fa24cd06ae29dc09c83fdbe509702d885f8d85a60c834c18ffc509b5e5d464c3", 0xde}, {&(0x7f0000001d40)="20f964c6f03f14edb808f56b41cd3db6a7d816f52f3801", 0x17}], 0x4, &(0x7f0000001f40)=[@cred={{0x18, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x28, 0x4000000}, {&(0x7f0000001f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000002000)="708251901c56ff5a332cc4b70a27722e1e6abbab30ae293550ba12beb3f1ae26d0b851b68ddf21dd0607357128d21f21579b25a18bf417e59e4c141977b7ba5e2f79601bad5248423ba5de80", 0x4c}, {&(0x7f0000002080)="2e9b602d9f74d0b73d3a7dbe460794f1b3d9a82018d12e1eb72961b3804de401c498944612567fb387eeaf64d32b33a13c64d1d7c840979ef906d493d1fa7f571bdaada4ed7cd4fb91e38a4797a1e6081794472141c930a19a2dc933b160f4940e8819b400c41a369d68f5c9c9745a59", 0x70}], 0x2, &(0x7f0000002a80)=[@rights={{0x18, 0x1, 0x1, [r3, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x18, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x18, 0x1, 0x2, {r30, r31, r32}}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {r33, r34, r35}}}, @cred={{0x18, 0x1, 0x2, {r36, r37, r38}}}, @rights={{0x1c, 0x1, 0x1, [r6, r2, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r39, r40, r41}}}], 0xd0, 0x20000000}, {&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)="4db2d43f77c2dadfe7334e1411c1fe", 0xf}, {&(0x7f0000002c40)="b778a326d03941b021c0dae2092bc4968db3b408d90684154c76f5ec2e65ce8adabe3ba2549ad5b63de28ddfac700c952770380191c26f31f6abfd222c33bf6ceeddf0ba95feab400abddc29a8adad734f58254fd7d2b6e423daca07d3ef9030043d2ca959242d7dc02a83db1f3d0a0e9f514dd38fe74b5c163062ce04675978ed8f6c4117ab464125f38ac7cdc443c3b32cbff8b84bcd7bf17d08e651da3e23dccab87dd071a2adcfdf3a40b8e509495b38203cd032d62f5c0563ec8a761753b1ea508ac4dd9acb62c58b331ce6ac4582bbcce08c864a40", 0xd8}, {&(0x7f0000002d40)="6f93823b0f033bdebb7f05b4af9284bf185a76843fb42e060f6204", 0x1b}, {&(0x7f0000002d80)="ccf6d48b93d816262e99c3b741ff106faa61cd42a836c9b108285ca0392a3457d7940053bd57bd30af316a9198e975091a95c0d3751cf372b4e31af246783029c280840c65e0851caa362a30bc1a1801ea6c251e2cd342dfddacd91638784b35d768d6bd1a38637eb7cabf6694635ee43e78d210b4deff7874b10476a0a4eff3788edee288c69152eb33216a5a6e3cc88e9e8c3474912c975ab4e89b", 0x9c}], 0x4, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [r0, r4, r4, r4, r6]}}, @cred={{0x18, 0x1, 0x2, {r42, r43, r44}}}, @cred={{0x18, 0x1, 0x2, {r45, r46, r47}}}, @cred={{0x18, 0x1, 0x2, {r48, r49, r50}}}, @rights={{0x28, 0x1, 0x1, [r4, r5, r5, r5, r2, r6, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4, r6]}}], 0xac, 0x810}, {&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000032c0), 0x0, &(0x7f0000003300), 0x0, 0x4000000}, {&(0x7f0000003340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003440)=[{&(0x7f00000033c0)="f0682c13ac6a03c1048abb83047d1357e89a0c10b9710282", 0x18}, {&(0x7f0000003400)="33c0a3c6eba9b0d5da2aa637df3eb8bdb317059e4b56", 0x16}], 0x2, &(0x7f00000039c0)=[@rights={{0x24, 0x1, 0x1, [r3, r3, r6, r2, r1, r5]}}, @cred={{0x18, 0x1, 0x2, {r51, r52, r53}}}, @rights={{0x18, 0x1, 0x1, [r6, r6, r6]}}, @cred={{0x18, 0x1, 0x2, {r54, r55, r56}}}, @rights={{0x30, 0x1, 0x1, [r2, r6, r0, r5, r1, r6, r4, r6, r2]}}, @cred={{0x18, 0x1, 0x2, {r57, r58, r59}}}], 0xb4, 0x844}, {&(0x7f0000003a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003b00)="dfa4b63d8c3f72a1100c2f5940e175489d513bb060b3cb6b9bfe1c54d2b16da1ce0a4c177c80a5520564a02e743a9838b51d82fdf28d4f54ebcff69336c15db6622c815f923c7bd3d1da2af2c27c11975a89515d08baa04cb8db880cf46ba479d17e4def7608dea5718ba074b2b7e60ce54d5bc2e9b161e26948e578b6f934325b70afc7644a6d96a460af785099915a7c38814146ffb876d84ac27eb7349490b5a599bdcbd1a03d75712284ffe3ee83ebc9c2948928ac94971fdb1f8e665e4b99703dd65b93ac4c31773d63db900106c2d6ae8b43c56d32e8958a68a2b2f01919cb2f", 0xe3}], 0x1, &(0x7f0000003dc0)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18, 0x1, 0x2, {r60, r61, r62}}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r2, r0, r2, r3, r6]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, r0, r1, r0, r3, r4, r1]}}, @cred={{0x18, 0x1, 0x2, {r63, r64, r65}}}, @rights={{0x10, 0x1, 0x1, [r5]}}], 0xa4, 0x20000080}, {&(0x7f0000003e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003f00)="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", 0x1000}], 0x1, 0x0, 0x0, 0x24000001}, {&(0x7f0000004f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005080)=[{&(0x7f0000004fc0)="621a291776b336aea6e35e21852808f64c9cc0ad5bf8d3d6f48cfa7042c55c296ced50f40bb3d98cbd5c3dc4762b2ab9a90699affc3039d64c0114f1031f64ed06838e8f348e724a2938fd8cd5d090f86b4adc5db7edc7213080dc2348fb3ac621c7a795b921fc286c45cef429c62890316c5eab3bff4867a5d79f9cddcae018ddb397dff4a217877422920396eb1c2b12963c1d95b86b16ec3ebfd3c527924e396e49ba0d0b5648d7f06986ff7f1a9f89c644fefe", 0xb5}], 0x1, &(0x7f0000005780)=[@cred={{0x18, 0x1, 0x2, {r66, r67, r68}}}, @cred={{0x18, 0x1, 0x2, {r69, r70, r71}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r2, r6, r2, r0, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r72, r73, r74}}}, @cred={{0x18, 0x1, 0x2, {r75, r76, r77}}}, @cred={{0x18, 0x1, 0x2, {r78, r79, r80}}}, @rights={{0x30, 0x1, 0x1, [r4, r1, r1, r2, r0, r6, r0, r3, r3]}}], 0xd4, 0x4044844}], 0x9, 0xc0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x215c, @loopback, 0x5}}}, 0x84) sendmsg$IPVS_CMD_GET_CONFIG(r6, 0x0, 0x44801) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40402, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000500)={0x15, 0x4, &(0x7f00000004c0)="2a044ab7"}) 06:01:47 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc044565d, &(0x7f00000000c0)={0xd80, 0xc, 0x4, 0x0, {0x77359400}, {0x2, 0xc, 0x7ff, 0x7ff, 0x101, 0x0, "29841ddc"}, 0x3, 0x7, @fd=r1, 0x4}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc04c561a, &(0x7f0000000280)={0x1, "b8ed8b58719c1fbc4d5869d0817d000f4e9dc5417484a571d4130aaa9c6c7d1e", 0x3, 0x9, 0x2, 0x4000, 0x101, 0x4}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0xc94cf378a9b6a99, @multicast2, 0x4e20, 0x2, 'dh\x00', 0x2, 0x5, 0x3e}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_acct\x00') setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x4dc, 0x29c, 0x0, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x15c}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9, 0x40, 0x7, 0x1, 0x0, "2b459d7ff75131050a6a6f530faa5bed2d58220fd049cce976b0ef97f1c9fb7c756fdfd8e8ee7ff197bd36341dd110bafa4c2c6be4aae252736a12139d513dd1"}}}, {{@arp={@local, @multicast2, 0xffffffff, 0xffffff00, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@random="7f985f1c4735", {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0xffffffff, 0x39, 0x53, 0x4, 0x0, 0x8, 'hwsim0\x00', 'nlmon0\x00', {0xff}, {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xff, 0xffffffff, @mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x7fffffff, 0x6, 0x8, 0x401, 0x8, 0x100000000, 'dummy0\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x88}, 0xf0, 0x15c}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x2, 0x101, 0x3, 0x0, 0x0, "c8486be1cc1876fa58ae5d3315ec5c1c2de652ef6c0d11e32c4aaa5f67651c6673bbf5bba57e0c573d532a8cd4917382d80b373d471ccd7c48daa1d69f87362c"}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x79f) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000300)=0x1) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7, 0x0) 06:01:47 executing program 3: perf_event_open(&(0x7f0000000040)={0xffffffffffffffff, 0x70, 0x3e5, 0x0, 0x22, 0x8, 0x0, 0x40000, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x80) ioctl$FIONREAD(r0, 0x541b, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000100)={0x201, 0x4, 0x7, 0xf39}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000140)) 06:01:47 executing program 5: syz_execute_func(&(0x7f0000000300)="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") ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0xa0}], 0x2, 0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000100)="43dd250100000065d93457f211d8f30f1b670e6536266467646665e3475531a5dede412bc4017b2c97010000006644072af18b44") 06:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000bf0100000000000000000000ba010000086e000021232948de042774602f36cddb4aa287b3b3312d91f79ecb26167f6444b666b5023d6da31997c5864183bb5548c8d5210886d6b5b6d5efcd76ffd06e3e62e26c3b1a6047a2"], 0x5d}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188f5d0d4430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd4997fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") 06:01:47 executing program 2: syz_execute_func(&(0x7f0000000740)="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") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC]], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="fbd42bfc76a2380d116dde47f65cbca305d7b7", 0x13}], 0x1, 0x0) syz_execute_func(&(0x7f0000000240)="4bdd25210000006565d93457c1b9080000009d5b5bc6a1fbd21f758306c44279d1f3b7cefc667b524e6c6cc4427dbcc25c1717c4c5") [ 191.063422][ T2973] device bridge_slave_1 left promiscuous mode [ 191.069903][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.125387][ T2973] device bridge_slave_0 left promiscuous mode [ 191.132360][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.325261][ T9122] IPVS: ftp: loaded support on port[0] = 21 [ 192.772662][ T2973] device hsr_slave_1 left promiscuous mode [ 192.834316][ T2973] device hsr_slave_0 left promiscuous mode [ 192.887242][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 192.898361][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 192.912988][ T2973] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 192.985931][ T2973] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 193.078368][ T2973] bond0 (unregistering): Released all slaves [ 193.267255][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 193.298451][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.305583][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.313630][ T9122] device bridge_slave_0 entered promiscuous mode [ 193.323279][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.330374][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.338437][ T9122] device bridge_slave_1 entered promiscuous mode [ 193.359438][ T9122] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.369846][ T9122] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.396486][ T9122] team0: Port device team_slave_0 added [ 193.404124][ T9122] team0: Port device team_slave_1 added [ 193.442327][ T9122] device hsr_slave_0 entered promiscuous mode [ 193.510827][ T9122] device hsr_slave_1 entered promiscuous mode [ 193.658123][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.665277][ T9122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.672710][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.679790][ T9122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.734731][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.748989][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.759176][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.767685][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.783280][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.795917][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.808206][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.815329][ T8811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.837966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.846718][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.853826][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.871474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.880212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.899076][ T9122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.910927][ T9122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.924914][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.933732][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.942544][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.961671][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.974921][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.127141][ T9126] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 194.138060][ T9126] CPU: 0 PID: 9126 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #7 [ 194.145873][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.155925][ T9126] Call Trace: [ 194.159232][ T9126] dump_stack+0x172/0x1f0 [ 194.163570][ T9126] dump_header+0x10f/0xb6c [ 194.167991][ T9126] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 194.173802][ T9126] ? ___ratelimit+0x60/0x595 [ 194.178393][ T9126] ? do_raw_spin_unlock+0x57/0x270 [ 194.183512][ T9126] oom_kill_process.cold+0x10/0x15 [ 194.188629][ T9126] out_of_memory+0x79a/0x1280 [ 194.193316][ T9126] ? __sched_text_start+0x8/0x8 [ 194.198180][ T9126] ? oom_killer_disable+0x280/0x280 [ 194.203397][ T9126] mem_cgroup_out_of_memory+0x1ca/0x230 [ 194.208942][ T9126] ? memcg_event_wake+0x230/0x230 [ 194.213975][ T9126] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 194.219785][ T9126] ? cgroup_file_notify+0x140/0x1b0 [ 194.224986][ T9126] memory_max_write+0x169/0x300 [ 194.229841][ T9126] ? mem_cgroup_write+0x360/0x360 [ 194.234865][ T9126] ? lock_acquire+0x16f/0x3f0 [ 194.239539][ T9126] ? kernfs_fop_write+0x227/0x480 [ 194.244567][ T9126] cgroup_file_write+0x241/0x790 [ 194.249508][ T9126] ? mem_cgroup_write+0x360/0x360 [ 194.254532][ T9126] ? kill_css+0x380/0x380 [ 194.258867][ T9126] ? kill_css+0x380/0x380 [ 194.263208][ T9126] kernfs_fop_write+0x2b8/0x480 [ 194.268065][ T9126] __vfs_write+0x8a/0x110 [ 194.272393][ T9126] ? kernfs_fop_open+0xd80/0xd80 [ 194.277332][ T9126] vfs_write+0x20c/0x580 [ 194.281579][ T9126] ksys_write+0x14f/0x290 [ 194.285912][ T9126] ? __ia32_sys_read+0xb0/0xb0 [ 194.290689][ T9126] __ia32_sys_write+0x71/0xb0 [ 194.295374][ T9126] ? do_fast_syscall_32+0x155/0xd7d [ 194.300575][ T9126] do_fast_syscall_32+0x27b/0xd7d [ 194.305610][ T9126] entry_SYSENTER_compat+0x70/0x7f [ 194.310713][ T9126] RIP: 0023:0xf7f9a849 [ 194.314778][ T9126] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 194.334391][ T9126] RSP: 002b:00000000f5d960cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 194.342818][ T9126] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 194.350784][ T9126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.358757][ T9126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.366730][ T9126] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 194.374694][ T9126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.410798][ T9126] memory: usage 2972kB, limit 0kB, failcnt 15 [ 194.417125][ T9126] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 194.425457][ T9126] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 194.438880][ T9126] Memory cgroup stats for /syz1: cache:0KB rss:2160KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2224KB inactive_file:0KB active_file:0KB unevictable:0KB [ 194.484209][ T9126] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9125,uid=0 [ 194.504671][ T9126] Memory cgroup out of memory: Killed process 9125 (syz-executor.1) total-vm:72320kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 194.521582][ T1041] oom_reaper: reaped process 9125 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 06:01:53 executing program 1: 06:01:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c5602067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) 06:01:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x3e7, r0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x7ff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8f9378fb6b3e", 0x0, 0x1, 0x10, 0x1, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5197b40fb99813a058d620cec677271d9c95c9588f24a6e3d3c2e20603add3ea5fe65ffde63d09839079f60b63311481cc6dbcc80de701fe4cd76477506320257fb105e8cedefa6e1751e59a70fe0137c6d4f43687cbaeced096776003a000aab609e8d63e4adf1d64e1f6", 0x6b, r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x107000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:01:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1cf}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd499768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") 06:01:53 executing program 3: r0 = getpid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r2, r3, 0xf, 0x1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={0x0, r4}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) 06:01:53 executing program 5: r0 = open(&(0x7f0000000440)='./file0\x00', 0x143042, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) [ 194.869683][ T9122] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 194.906456][ T9122] CPU: 0 PID: 9122 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #7 [ 194.914287][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.924337][ T9122] Call Trace: [ 194.927637][ T9122] dump_stack+0x172/0x1f0 [ 194.931978][ T9122] dump_header+0x10f/0xb6c [ 194.936395][ T9122] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 194.942211][ T9122] ? ___ratelimit+0x60/0x595 [ 194.946806][ T9122] ? do_raw_spin_unlock+0x57/0x270 [ 194.951928][ T9122] oom_kill_process.cold+0x10/0x15 [ 194.957062][ T9122] out_of_memory+0x79a/0x1280 [ 194.961740][ T9122] ? lock_downgrade+0x880/0x880 06:01:53 executing program 5: [ 194.966593][ T9122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.972844][ T9122] ? oom_killer_disable+0x280/0x280 [ 194.978049][ T9122] ? find_held_lock+0x35/0x130 [ 194.982831][ T9122] mem_cgroup_out_of_memory+0x1ca/0x230 [ 194.988378][ T9122] ? memcg_event_wake+0x230/0x230 [ 194.993411][ T9122] ? do_raw_spin_unlock+0x57/0x270 [ 194.998529][ T9122] ? _raw_spin_unlock+0x2d/0x50 [ 195.003391][ T9122] try_charge+0x102c/0x15c0 [ 195.007986][ T9122] ? find_held_lock+0x35/0x130 [ 195.012761][ T9122] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 195.018318][ T9122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.024559][ T9122] ? kasan_check_read+0x11/0x20 [ 195.024610][ T9122] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 195.024629][ T9122] mem_cgroup_try_charge+0x24d/0x5e0 [ 195.024653][ T9122] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 195.024672][ T9122] __handle_mm_fault+0x1e1a/0x3eb0 [ 195.024693][ T9122] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 195.024705][ T9122] ? find_held_lock+0x35/0x130 [ 195.024719][ T9122] ? handle_mm_fault+0x292/0xa90 06:01:53 executing program 3: [ 195.066421][ T9122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 195.072671][ T9122] ? kasan_check_read+0x11/0x20 [ 195.077533][ T9122] handle_mm_fault+0x3b7/0xa90 [ 195.082343][ T9122] __do_page_fault+0x5ef/0xda0 [ 195.087123][ T9122] do_page_fault+0x71/0x57d [ 195.091633][ T9122] ? page_fault+0x8/0x30 [ 195.095882][ T9122] page_fault+0x1e/0x30 [ 195.100039][ T9122] RIP: 0023:0x804b46a 06:01:53 executing program 0: [ 195.104027][ T9122] Code: 03 00 83 c4 1c c3 83 ec 0c 68 0a 40 0d 08 e8 ed e6 ff ff 8d b6 00 00 00 00 8d bc 27 00 00 00 00 55 57 56 53 81 ec 7c 10 00 00 <89> 44 24 04 8d 6c 24 6c c7 44 24 0c 00 00 00 00 65 a1 14 00 00 00 [ 195.123632][ T9122] RSP: 002b:000000000847ed10 EFLAGS: 00010202 [ 195.129702][ T9122] RAX: 000000000847fde0 RBX: 0000000000000018 RCX: 000000000847fd80 [ 195.137678][ T9122] RDX: 000000000000000c RSI: 000000000002f5df RDI: 0000000000000000 [ 195.146001][ T9122] RBP: 0000000000000018 R08: 0000000000000000 R09: 0000000000000000 [ 195.146018][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.161964][ T9122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 06:01:53 executing program 5: 06:01:53 executing program 2: [ 195.311585][ T9122] memory: usage 664kB, limit 0kB, failcnt 23 [ 195.317598][ T9122] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:01:53 executing program 3: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f0000000440)="43dd25310000006565d93457660f38107bfea0f08144464c000000c403d56f7855f8210eecec2e45c160660d660f3a0f8fba1b4428a2c4236102c16a6523c3b5421e421ef21f2c0b000066b1440ff61212e13f2af7d3c4e6b347a30d0f0d0f50cd1011c4018169b5f98100000f381dfe5f0000c4027196a340f500004047380bc4a2829c4004460f0f902a7e0000975a5af87e4bd5d539c4a25d96ed46af28320bffb592c3dfcae311f0803100c4c2fd2016") [ 195.388596][ T9122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 195.422036][ T9122] Memory cgroup stats for /syz1: cache:0KB rss:48KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:48KB inactive_file:0KB active_file:0KB unevictable:0KB [ 195.622528][ T9122] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9122,uid=0 [ 195.714231][ T9122] Memory cgroup out of memory: Killed process 9122 (syz-executor.1) total-vm:72188kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 195.776263][ T1041] oom_reaper: reaped process 9122 (syz-executor.1), now anon-rss:0kB, file-rss:34156kB, shmem-rss:0kB 06:01:54 executing program 1: syz_execute_func(&(0x7f00000002c0)="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") syz_execute_func(&(0x7f0000000200)="43dd25310000006565d93457660f38107bfea0f08144464c000000c403d56f7855f8210eccec8f69589b7ff9c481355d9100d00000c4618173d134c4231d6f7064f2b5421e421e65f21f2c0b66430fd0453766b1440ff61212e13f2af72bfee6b347a30d0f0d0f50cd1011c7f8120000000f381dfe5f0000f390c4027196a340f50000c4a2b59c400466420faeb4f85f000000615a0fa30d359ba9fa994bd5d5c4a25d96ed46af28320bffb51717dfcae311f080310097") 06:01:54 executing program 0: syz_execute_func(&(0x7f0000000000)="9826473e431c130f05f30f59bfd9130000c4a37bf0c53e41e2e9b55767660f6b32fb660f72d50f0fb8c4054e4eed751e0fa0450f0faa00001521b7ab34d1c4e10bf8c470c4c461cd583d00000081c66db712fd83397fd300c9dcdc0fbcaf00eae800f345d9c6acacc4c3214cb9a5605419c201b00b000000f08171a30b8a826ea80dd4d48cc7e8628f6808a3056f0000004e00c4618de3c0f526264788fe58c4a1dd7dbbbfdd5cc600d030a1c9fb110fd3c4a261b7e2") syz_execute_func(&(0x7f00000000c0)="43dd25310000006565d93457c4c2e19c3bc4e1256b61d2e45f7e52c4c1fc50dcdb000065fb5513665d660feb9d99899999c442cd3ae165670f48c80404fd6666817d5b6695edc4826539ab01000000adc4e1f9c5d657ad49e89803460f76ec85712164315902831cae660f5da3c0000000e9c20aa9070000420f11008600a13795824c00000000000053c4d3dd75c43e15ff34ffff650f01d767420ffd01") getrusage(0x0, 0x0) 06:01:54 executing program 2: syz_execute_func(&(0x7f0000000180)="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") syz_execute_func(&(0x7f0000000100)="43dd253100000065fd65d9345757c2e19c3b18d0c4a3450674f032068d98040404b26b3849f9ae7e708357b5000000e8ab55418fa93001e5c4e2cf398600d53061660f8200008020c421ecc62474aa9b0000c4e2a998959b000000c40179297200c482fd176b12") 06:01:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$P9_RCREATE(r1, 0x0, 0x0) 06:01:54 executing program 3: syz_execute_func(&(0x7f0000000400)="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") syz_execute_func(&(0x7f0000000600)="43dd25310000006565d93457660f38107bfea0f08144464c000000c403d56f7855f8210eecec2e45c160660dc481355d9100d00000c4236102c16a6523c3b5421e421ef21f2c0b000066b1440ff61212e13f2af72bfee6b247a30d0f0d0f50cd1011c7f8120000000f381dfe5f3e3e6666446ff390c4027196a340f54a00000047380bc4a2b59c400466420faeb4f85f0000005a5a56084bd5d5c4a25d96ed46af28320bffb5171709689ae311f080310059") 06:01:54 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x19) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x3e7, r0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x7ff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="8f9378fb6b3e", 0x0, 0x1, 0x10, 0x1, 0x0}) openat$pfkey(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="5197b40fb99813a058d620cec677271d9c95c9588f24a6e3d3c2e20603add3ea5fe65ffde63d09839079f60b63311481cc6dbcc80de701fe4cd76477506320257fb105e8cedefa6e1751e59a70fe0137c6d4f43687cbaeced096776003a000aab609e8d63e4adf1d64e1f6", 0x6b, r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x107000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f000000d180), 0x4000000000000eb, 0x0) 06:01:54 executing program 3: syz_execute_func(&(0x7f00000001c0)="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") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000040)=ANY=[@ANYBLOB="2062b464432bf62234b1d58d3f2f0f93cb1bbb3961311dc0ac8540ce293e2635795467ae79ca2b8fbc16a6bbbd7e0000dc639b"], 0x0) syz_execute_func(&(0x7f0000000000)="43dd25310000006565d934570faeb34fd30000c461fc29c19358fcfc0f122d2bbd00003c3cc1c2c2e610e4e4d1a7fd5783c4c4621946a6790f0000f0") 06:01:54 executing program 2: syz_execute_func(&(0x7f0000000000)="9826473e431c130f05f30f59bfd9130000c4a37bf0c53e41e2e9b55767660f6b32fb660f72d50f0fb8c4054e4eed751e0fa0450f0faa00001521b7ab34d1c4e10bf8c470c4c461cd583d00000081c66db712fd83397fd300c9dcdc0fbcaf00eae800f345d9c6acacc4c3214cb9a5605419c201b00b000000f08171a30b8a826ea80dd4d48cc7e8628f6808a3056f0000004e00c4618de3c0f526264788fe58c4a1dd7dbbbfdd5cc600d030a1c9fb110fd3c4a261b7e2") syz_execute_func(&(0x7f0000000100)="43dd25310000006565d93457c4c2e19c903b3b42f9921c7dfd2f8de84dfc43dfc68f097893312d2bbd000040d11ea7fdc461285ee4fcde0fe3d9") getrusage(0x0, 0x0) 06:01:54 executing program 0: syz_execute_func(&(0x7f0000000180)="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") syz_execute_func(&(0x7f0000000100)="43dd25310000006565d93457c4c2e19c3b18d0653db1f9f966998d98040404b20f3809f9ae7e708357b5000000e8ab55418fa93001e5c4cad12d3b1f3b1f430f72e12c0f47dc679b0000c4e2a998fe9b000000f20f1aa2c1a10866c482fd176b12") 06:01:54 executing program 3: syz_execute_func(&(0x7f0000000540)="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") syz_execute_func(&(0x7f0000000240)="4bdd25210000006565d93457c1b9080000009d5b5bc6a1fbd21f758306c4d9e5f3b7cefc667b524e6c6cc4427dbcc25c1717c4c5") 06:01:54 executing program 1: syz_execute_func(&(0x7f0000000300)="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") syz_execute_func(&(0x7f00000006c0)="43dd25310000006565d93457a0f08144464c000000c403d56f7855f8210eecec2e45c160660dc481355d9100d00000c4236102c16a652349c3c3421e421ef21f2c0b000066b1440ff61212e13f2af7c44231baea65f3400f2d77fcc4a27d198a39630000c7f8120000000f381dfe5f0000f390c4027196a340f500004047380bc4a2b59c400466420faeb4f85f0000005a6726470f01d4984bd5d566460ff7e646af0bffb5170f609d07000000dfcae311f080310059") 06:01:54 executing program 2: syz_execute_func(&(0x7f0000000500)="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") syz_execute_func(&(0x7f0000000180)="43dd25310000006565d93457c4c2e19c3b1cc407256b61d2d25f7e52c4c1fc50dc40007b027b02fb55c4e1275e11660feb9d998999998f69f09bb8feefffff0404fdc4817d5b66957cadc4e1f9c5d6578cb3d6f472f240c80600003aec85712164315902831cae66410f74acc759239802b4c2a907000fe50b2638c4a13795824c00000000000053d3ddecc43e15ff34ffffc4223d2f556c0f1a0f1a0ffd01") 06:01:54 executing program 0: 06:01:54 executing program 3: 06:01:54 executing program 0: [ 198.796724][ T9198] IPVS: ftp: loaded support on port[0] = 21 [ 199.063643][ T9198] chnl_net:caif_netlink_parms(): no params data found [ 199.080371][ T2973] device bridge_slave_1 left promiscuous mode [ 199.089807][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.261664][ T2973] device bridge_slave_0 left promiscuous mode [ 199.268018][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state 06:01:58 executing program 5: 06:01:58 executing program 2: 06:01:58 executing program 3: 06:01:58 executing program 0: syz_execute_func(&(0x7f00000000c0)="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") syz_execute_func(&(0x7f00000002c0)="43dd25310000006565d93457660f38107bfea0f08144464c000000c403d56f7855f8210eecec2e45c160660dc481355d9100d00000c4236102c16a6523c3b542b11e4a03f21f2c0b000066b1440ff61212e13f2af72bfee6b347a30d0f0d0f50cd1011c7f8120000000f381dfe5f0000f390c4027196a340f500004047380bc4a2b59c400466420faeb4f85f0000005a5a984bd5d5c4a25d96ed46af28320bffb51717dfcae311f080310059") 06:01:58 executing program 4: 06:01:58 executing program 0: 06:01:58 executing program 3: [ 201.643677][ T2973] device hsr_slave_1 left promiscuous mode [ 201.686264][ T2973] device hsr_slave_0 left promiscuous mode [ 201.754413][ T2973] team0 (unregistering): Port device team_slave_1 removed [ 201.768115][ T2973] team0 (unregistering): Port device team_slave_0 removed [ 201.779491][ T2973] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 201.818937][ T2973] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 201.916816][ T2973] bond0 (unregistering): Released all slaves [ 202.042673][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.049840][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.057700][ T9198] device bridge_slave_0 entered promiscuous mode [ 202.066394][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.073578][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.081211][ T9198] device bridge_slave_1 entered promiscuous mode [ 202.102146][ T9198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.112503][ T9198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.132523][ T9198] team0: Port device team_slave_0 added [ 202.139829][ T9198] team0: Port device team_slave_1 added [ 202.215645][ T9198] device hsr_slave_0 entered promiscuous mode [ 202.280850][ T9198] device hsr_slave_1 entered promiscuous mode [ 202.354264][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.361368][ T9198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.368673][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.375808][ T9198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.467834][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.479735][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.491667][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.499943][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.509377][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 202.524336][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.542418][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.557000][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.564123][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.593599][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.602989][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.610052][ T8811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.618573][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.646656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.655063][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.666937][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.680052][ T9198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.699762][ T9198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.711094][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.755937][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 06:02:01 executing program 2: 06:02:01 executing program 4: 06:02:01 executing program 0: 06:02:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c5602067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0x58}], 0x1) 06:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x16e}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4f814c1ab5be2f9660f3a0fae5e090000ba44d8d1c401f5ef1ac4817d73d74ec4a275bd153c78ab7749f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfdc402b504a60080000068d768f833c4a1cd61b3b23c0000ab26dbc1a1fe5ff6f6df0804f4c4efa59cc442abf58f104eb547288ba6452e000054c4431d3e660f6e7f3c") 06:02:01 executing program 5: 06:02:01 executing program 2: r0 = socket(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) dup2(r1, r1) r2 = gettid() prctl$PR_SET_FPEXC(0xc, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) mknod$loop(0x0, 0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) preadv(r1, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000016) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0) 06:02:01 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x23b}}, 0x0) syz_execute_func(&(0x7f0000000180)="f2af91930f0124eda133fa20430fbafce842f66188d0d4430fc7f314c1ab5be2f9660f3a0fae5e090000ba44d8d1b63ac4817d73d74ec482310d46f449f216c863fa43c4c2750ade1bdbae95c4e1a05d6b06aa420f383c02c401405c6bfd499768d768f833fefbab6464660f38323c8f26dbc1a1fe5ff6f6df0804f4c4efa59c0f01c4288ba6452e000054c4431d5c") 06:02:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) sendto$inet(r0, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x61, "3f8c4be7792594d74d8e8e1e64c4131ac952222bb19a527e66cfaebb08c9358a44a007774c3d951e97dfea0b42bfb49ce5b6d9eda04e4004c86b66cbbc71f2ebb2d8c68c40f7cfc3e633810300e738742a6489e9a3515164d91015664d8c29e785"}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x200}, &(0x7f0000000180)=0x8) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) clock_gettime(0x0, 0x0) 06:02:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x1) 06:02:01 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe05]}, 0x45c) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1000) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 06:02:01 executing program 2: pipe(0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x20, 0x200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0xffffffff00000001, 0x6, 0xfe38, 0x0, 0x0, [], [], [], 0x101, 0x1}) socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$describe(0x6, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00\x00\x00\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 06:02:01 executing program 5: write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff92) r0 = creat(0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) bind$vsock_dgram(r0, &(0x7f00000000c0), 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0xfffffffffffffe59, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000003a00)={[], 0x4, 0xfffffffffffff74a, 0x6, 0x0, 0xa0, 0xd000, 0x0, [], 0x9}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$packet(r3, &(0x7f0000000340), 0xffffff55, 0x57, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1000, 0x2, 0xfffffffffffffffd, 0x7}, {0x7fff, 0x0, 0x7, 0x3ff6}, {0xffff, 0x7, 0x0, 0xfffffffffffffffb}, {0x0, 0xcb6, 0xffffffff, 0x6}, {0x1, 0x22, 0x8000}, {0x100, 0x0, 0x4}]}) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fcntl$getown(r2, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @broadcast}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in6=@local}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) recvmmsg(r2, &(0x7f0000003940)=[{{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/254, 0xfe}, {0x0}, {&(0x7f00000007c0)=""/171, 0xab}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, &(0x7f00000008c0)=""/102, 0x66}}, {{&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/45, 0x2d}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000a40)=""/68, 0x44}, {&(0x7f0000000ac0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/74, 0x4a}], 0x6, &(0x7f0000000c40)=""/156, 0x9c}, 0x6}, {{&(0x7f0000000d00)=@alg, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)=""/74, 0x4a}, {&(0x7f0000000e00)=""/134, 0x86}], 0x2, &(0x7f0000000f00)=""/254, 0xfe}, 0x6}, {{&(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001080)=""/181, 0xb5}, {&(0x7f0000001140)=""/10, 0xa}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001200)=""/39, 0x27}, {&(0x7f0000001240)=""/193, 0xc1}, {&(0x7f0000001340)=""/28, 0x1c}, {&(0x7f0000001380)=""/80, 0x50}, {&(0x7f0000003480)=""/78, 0x4e}, {&(0x7f0000003500)=""/84, 0x54}], 0xa, &(0x7f0000003600)=""/93, 0x5d}, 0x5c9}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001400)=""/27, 0x1b}], 0x1, &(0x7f00000036c0)=""/56, 0x38}, 0xfffffffffffff759}, {{&(0x7f0000003700)=@can, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003780)=""/98, 0x62}, {&(0x7f0000003800)=""/140, 0x8c}], 0x2, &(0x7f0000003900)=""/24, 0x18}}], 0x6, 0x40000000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000003d00)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000007500)={'ifb0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400002003c000e0024010100656e583bb734c4a4e37383070d61626c65640000002200cfea0000000000000003000000000000000070133230580000", @ANYRES32=r4], 0x2}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') 06:02:02 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x8, 0x4) setns(r2, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = fcntl$dupfd(r1, 0x0, r1) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, 0xfffffffffffffffe) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x0, 0x0) 06:02:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = userfaultfd(0x80000) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init() r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80000) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x20000000) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) uselib(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00005ff000/0x3000)=nil, 0x3000}, 0x2}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x60}, &(0x7f0000000240)=0x8) syz_open_dev$media(0x0, 0x77ac, 0x101000) 06:02:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101040, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x2, 0x3}) 06:02:02 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 204.305245][ T9268] device lo entered promiscuous mode [ 204.375979][ T9272] device lo left promiscuous mode 06:02:03 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:03 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:03 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @local}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000016c0)={@mcast1, r1}, 0x292) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e01040034ef4275bf613a36986f000000000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000001600)={{0x16, @remote, 0x4e20, 0x1, 'none\x00', 0x1, 0x400, 0x51}, {@broadcast, 0x4e24, 0x2007, 0x80, 0x8, 0x756}}, 0x44) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'vcan0\x00', {0x2, 0x4e23, @empty}}) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x80) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x6, &(0x7f0000001580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @generic={0x6c978aae, 0x0, 0x8000, 0x200, 0x1}, @map={0x18, 0x8, 0x1, 0x0, r2}, @ldst={0x0, 0x1, 0x3, 0x0, 0xd, 0x1, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x7, 0x1, 0x6, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x38, 0x7, 0x5, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0xfe, 0xd, 0x7, 0xa, 0x8, 0x10}, @alu={0x7, 0x10001, 0xb, 0x3, 0x1, 0x26}, @exit], &(0x7f00000003c0)='sy\xd8\x87\xc3>]\x9eQ\x93z\x81\x17\fU\xe4\xa4\x9f', 0x9200, 0x1000, &(0x7f0000000580)=""/4096, 0x41f00, 0x1, [], 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x4, 0xfffffffffffffde5, 0x5}, 0x3f}, 0x70) 06:02:03 executing program 0: 06:02:03 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x62080, 0x61) chroot(&(0x7f0000000080)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x101200, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f0000000440)='./file0\x00', r0}, 0xfffffffffffffde4) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) syz_execute_func(&(0x7f0000000580)="615f0f9df43e3e41260f380474c467cd801b69e46962f5696200d9d955901090100a0000005bf91c7aa2b0300000edfec467f3830c00c4c299ac2ac4c18b5abbfeefffffc4c25d074b0007168f4808eebce00000802000c421650fd35cb8b0c4c27d7883040000000f878c800000fa6f19190f0fbc0601c2c4e3e95cdf09f265dc7f10c4c37bf0c77a0a45d9ce13258e3c24a12e4409566c00082640c401fe1d8bf4f4df64673667666643c4e2791820314f860f0d0f86450fbbd4f3f30b0f16afaf141123d833d55d66660f61b49bfeefffff") ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'dummy0\x00', 0x400}) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0xb3c, 0x87f1, 0x34e}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@local}}, {{@in=@multicast2}}}, &(0x7f0000000280)=0xe8) 06:02:03 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 205.434006][ T9268] device lo entered promiscuous mode [ 205.445368][ T9273] device lo left promiscuous mode 06:02:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000480)="d7c6d499d5318c4b80a02e630425b694573ba3cbc90608c6fa5f25d8a260a64f580b11a992c1ff8285693ce180e0ad10cbdd1b231d92cd5ae6ef2828e678ed38da481fb9ad6b87f20a036aed4bebdd75038545cdb040b40d019a9fbe093aa5062a3b6bc119de14dc04bb77fb42296ed56ce615e788af3be1c1f1e788bac0befa4e05278a38af768b4cdb15243fd077f6a21e9d9080fccf94bdc5ea795e42e25dd4060b517030719b35245fcd1c3919801241cee3137f32cf54ca58961f563daf0389492188d3c157", 0xc8}, {&(0x7f0000000580)="220634a7fcdfffa4539ee3340352f59739784218b11ebea25cb48867410d5c515ca5bada41c72c736c65bd7d318d308e2c45d9cfa89e91d878923ea941c242313c47606cb6a517d3c7ef84ed06087b4548c1ccfb829d4f60555747e27dc04fd06f7b259b4dbb0cfc2cc9d56ffd3bce773cca3c4dc761ca1775060cfdad7ab27843383e0ceeb04ab163f404e07447e14b33671bcbeded15a5453bc73ee3f903f0fe50678f91b2e6c6a9320c2fefa79b121facc61f7b6197", 0xb7}], 0x2, 0x0, 0x0, 0x40080}, 0x4000044) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto(r0, &(0x7f0000001780)="8aa2e6f00a2e8a13cb432827f9915694d6bde7fa26edd3c0d3fe16194fa9ccda4f20f020657ee01d4fc354f4deb5ded7e5a106cbf651e7792d9b264e725d1edf014fe8f2e0ac9e853225cacc5a0e3f2060ae3741bb0dd6e8431ca0bda91a6769b504872e3f", 0x65, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="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", 0x2b4, 0x0, 0x0, 0x0) 06:02:03 executing program 0: r0 = semget(0x3, 0x4, 0x64) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000100)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000140)="5d33c983848f2d669c0bba6a3a1fb396a3173f480c18afea3af1d5bb3cd99669f98957d630c639fbf3a35b019c812e2d7aade7a2d5a6a0708699d4e3a36f750c0c4c7704d02be165a6b42007bfa4f3e74d21cac54c1067dfff78adfbf6db16d8dde8006a67f8f353c8763762dae88e97331894055d", 0x75) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xe7d400000, 0x400100) syz_open_dev$rtc(0x0, 0x8, 0x20000) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000000)='autogroup\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000680)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000280)) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000300)) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x81, 0x3d06}, &(0x7f0000000240)=0x10) 06:02:03 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:03 executing program 3: r0 = socket$inet6(0xa, 0x800000003, 0x3) socket$pppoe(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0x11a}], 0x1, 0x0, 0x1f6}, 0x0) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x2bc, &(0x7f0000000140)}}], 0x40001ab, 0x0) 06:02:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "97441f744723d1f5ef89fb54bdbd3c051c43d7cd157d07acde396ecdc7e5ca320ece014cf9c1ecd676e08d6a5a3e69b74460d7de033e2a0e97732e56e5d445bdfa40ab2399c70d43c38834569178d3ce"}, 0xd8) close(r0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000020807031dfffd946ff20c0020200a8009000500021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xffffffff, 0x6, [0x7, 0x7f, 0x0, 0x3e2, 0x5, 0x40]}, &(0x7f0000000140)=0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/protocols\x00') ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000380)={0x2, 0x0, 0xffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x10000}, &(0x7f00000001c0)=0x8) 06:02:03 executing program 5: setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0x101}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x1, 0x400, "3aea24ea212ced74c53e04abbc0c4304bdd36dbb6bdb8bc015c2dda21862721953e3f6e0cb593beecaf4ddc09ba77cbeca20e5d0aafb489dd9fe032156e10071143172da43b03bb1d6319ac29b2e7e33881dd84296d180b8eed306f8b50d61204be009b6ec9c42b0bb8551f1b4654c5378b689a70fd0ab85873d180172ae85ae963dcb698f1cca0e1794fe9c24c58e92bf37ac2fad1f7b95097dd69f904c8476a0c145b45a8827901c2d61da34b2e31ca5bb8a97590469d716dccf3344fffbe4b4bef26073f24457e4fd3c97bf19e1c7130ca88c6d4ea740e03d196dac083b689050d619f1d548bc172f976672ecacc2d437c8087ff8304347b1cb24a4bb6ac4", 0x100000dc, 0x3, 0xffff, 0x6, 0x4af5f8b9, 0x3, 0x7fff}, r1}}, 0x120) syz_execute_func(&(0x7f0000000040)="66646800000ac2c2e707ecdfdfb2f0e021c4e27d18fc766477fc77c4c1d576003e662f38040e8fe97880a200000000f20f5c6cac40") 06:02:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100, 0x103) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000200)={0x4, 0x7fffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xe7, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x0) 06:02:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$midi(0x0, 0x7fffffff, 0x0) io_uring_setup(0x0, 0x0) utimes(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0xffffffffffffff81}}, 0x80000001, 0x81}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0xffffffff}}}, &(0x7f0000000340)=0x84) listen(0xffffffffffffffff, 0x402) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40040) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7374e8dddd6061636b20657468302d40703070315d2d73656c696e7578bd216d696d655f7479332fbb7065747275737465645d296c73797374656d5b6c6f6d696d655f747970652e6264"], 0x46) 06:02:04 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff241471973e3654a6ffffffaa00700000000000019078ac2314bbac1414110c02907800000300470000000000000000000000ac2314aaac141400084000000000000000000000a140dbceb92ca3aae000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac141400"/134], 0x0) 06:02:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$tipc(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x40, 0x35, 0x80, 0xffffffff, 0x3, 0x3, 0x3, 0x2fe, 0x38, 0x3cf, 0x6, 0x7, 0x20, 0x2, 0x3, 0x5, 0x9}, [{0x0, 0xf443, 0x2, 0x6, 0xffffffffffffffff, 0xfffffffffffffd3c, 0x9, 0xf9ac}], "e2ce3387776dcec9d92198b464ce3756d176b81b6c38cb8b5aced48eaf4029dec8a0522b3fd6d0377440c0774e5da661964158264cc5270158c4b68dbe1ca824da709d2ee3e7b86c6dce14e8fef7b5771c8ddd82e39ebb2a3bab02fd38fdeddd94e5bb8f585e2e085a0dd7a235819719c807c7030119d1f6103bae5b753b80669f831f5a013e838eb828f2c967aaef265e4af1e1e8feb869f5bbad16e054d85c78d5d907ac0084f4ecbfcc8fda276aa4566aefcc5da1b81b083f407c59115795dbe2beea4c79c27f427a73f419b6b703b27c20e64250396c5854253ab9678366352b976a7e8c50fa4075feb624f8eb6076a6d222", [[], [], [], [], []]}, 0x64c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x1000, 0x2}) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 06:02:04 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x8, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x4cb]}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x105002, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="000429bd7000ffdbdf25130000008c00050034000200080001001900000008000400c80e000008000400f009000008000400ff62e9aa7bdc39514fdd070000080003000700000008000400010000000c000200080001000e0000000800010065746800240002000800040002000009080001001f0000005014e3fae40ee6d9155a5715a5f5080001000400000008000100130000000c0002000800020009000000080001007564700008000100756470000c0006000800010001000000480001001800010069623a6272696467655f736c6176655f300000002c0004001400010002004e23ac1e010100000000000000001400020002004e21ffffffff00000000000000006400070008000200030000000c00040005000000000000000c00030008000094315e769948340ee200000000000c00030008000000000000000c2af2e70d3c2a3420c10003000100000000000000080002000001000008000200000000000c000300f6fe0000000000000c00030008000000000000001800020008"], 0x174}, 0x1, 0x0, 0x0, 0x8001}, 0x84) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000280), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000200)={0x8001, 0x8, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f0000000040), 0x10) fsetxattr(r5, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', &(0x7f00000003c0)='securityem0\xec\x00', 0xd, 0x2) [ 206.189686][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 206.189706][ T26] audit: type=1400 audit(1558764124.354:31): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9351 comm="syz-executor.5" 06:02:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @multicast1}, 0xffffffffffffffdd}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x77, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) 06:02:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0xfffffffffffffffc}) close(r0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="04110bc958bf53aa9164f46264ac4d60fdf77fb91061295f4dbb631ad77c4b9e60be4ef49ba552efcd0e1a743ea7ec2bf920651d83d3d3b1dc9518b640a2a5aa35f9c779558b1371a306000000a808afe0ef2b2f9795c958dbdad9a7dd08eba7faabd7f7a75e34"], 0x14, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000003c00)={0x40000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac1a]}) 06:02:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$midi(0x0, 0x7fffffff, 0x0) io_uring_setup(0x0, 0x0) utimes(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0xffffffffffffff81}}, 0x80000001, 0x81}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0xffffffff}}}, &(0x7f0000000340)=0x84) listen(0xffffffffffffffff, 0x402) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40040) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7374e8dddd6061636b20657468302d40703070315d2d73656c696e7578bd216d696d655f7479332fbb7065747275737465645d296c73797374656d5b6c6f6d696d655f747970652e6264"], 0x46) 06:02:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$midi(0x0, 0x7fffffff, 0x0) io_uring_setup(0x0, 0x0) utimes(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0xffffffffffffff81}}, 0x80000001, 0x81}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0xffffffff}}}, &(0x7f0000000340)=0x84) listen(0xffffffffffffffff, 0x402) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40040) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7374e8dddd6061636b20657468302d40703070315d2d73656c696e7578bd216d696d655f7479332fbb7065747275737465645d296c73797374656d5b6c6f6d696d655f747970652e6264"], 0x46) 06:02:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$midi(0x0, 0x7fffffff, 0x0) io_uring_setup(0x0, 0x0) utimes(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0xffffffffffffff81}}, 0x80000001, 0x81}, &(0x7f00000000c0)=0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0xffffffff}}}, &(0x7f0000000340)=0x84) listen(0xffffffffffffffff, 0x402) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40040) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7374e8dddd6061636b20657468302d40703070315d2d73656c696e7578bd216d696d655f7479332fbb7065747275737465645d296c73797374656d5b6c6f6d696d655f747970652e6264"], 0x46) [ 206.619589][ T26] audit: type=1400 audit(1558764124.784:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9380 comm="syz-executor.5" 06:02:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x11d000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xef) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x2, {{0xa, 0x4e22, 0x749, @dev={0xfe, 0x80, [], 0x22}, 0x1}}, 0x1, 0x6, [{{0xa, 0x4e22, 0x10000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x0, @remote, 0x9}}, {{0xa, 0x4e21, 0xd33, @loopback, 0x1}}, {{0xa, 0x4e20, 0x200000, @dev={0xfe, 0x80, [], 0x29}}}, {{0xa, 0x4e20, 0x0, @rand_addr="b1faf17ca1904c57071b076b3b46c7f8", 0xec8}}, {{0xa, 0x4e21, 0x4, @rand_addr="27e030f24b71876499656fe6eb86b8dc", 0x9f}}]}, 0x38c) ioctl(r0, 0xffffffffffffffc2, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x11d9, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000100)={0xfa, 0x1, 0x9}) 06:02:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) 06:02:05 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 206.934512][ T9396] input: syz0 as /devices/virtual/input/input5 [ 206.959703][ T26] audit: type=1400 audit(1558764125.124:33): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9388 comm="syz-executor.2" 06:02:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) tee(r0, r0, 0xffffffffffffffc1, 0x8) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x11a3, 0x5, 0x1000200, 0x6}, &(0x7f0000000080)=0x14) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffc1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffffe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x42}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r4, 0x40, 0x3, 0xa5, 0x8, 0xfffffffffffffff8, 0x7f, 0x2, {r4, @in6={{0xa, 0x4e20, 0x7e000000000000, @ipv4={[], [], @local}, 0x3f}}, 0x100000001, 0xffff, 0x80, 0x0, 0xfff}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x10000}, 0x8) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) [ 207.234014][ T9413] input: syz0 as /devices/virtual/input/input6 06:02:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) fcntl$setstatus(r0, 0x4, 0x4000) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 06:02:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001400)={&(0x7f0000000000)=@in={0x2, 0x0, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x7c, 0x10}, 0x40001) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/56, 0x38) 06:02:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) flock(r1, 0x8) 06:02:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x4c28, 0x3f, 0x8000, 0x3f, 0x3, 0x0, 0x7, 0x100, 0x390, 0x38, 0x5d, 0x4, 0x2, 0x20, 0x1, 0x3f, 0xfffffffffffffffa, 0x3}, [{0x6, 0x4, 0xffffffffffffc26b, 0x8000, 0x1, 0x8, 0xffffffff00000000, 0xffffffffffffff14}, {0x3, 0x5, 0x1ff, 0x0, 0xffff, 0x100000001, 0x9, 0x2}], "8b5038b361eea2c7c57a054297810089e55b24e089c8802cad012d9b8406d542a625271f88747675b3890011ebe90bf11e200347cbfe680b8e424609791452c5b847b8ae19d3c352b6aa310adf34a3e6df0f4663cf55b686d153bc3901fe47a7517f5479071e2034c5332b171c9b5ef864e7da854322b044610400f7e3405d3cccb16ccffa912f4c0480", [[], [], [], [], [], []]}, 0x702) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) fsetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f0000000040)='vmnet0$(vboxnet0]vmnet0vboxnet1]cpuset^\x00', 0x28, 0x0) r1 = syz_open_pts(r0, 0x40000000002) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(r2, r0, 0x80000) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x4, 0x0) 06:02:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) 06:02:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400002, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/89) sendto$inet(r1, &(0x7f0000000240)='g', 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x1, 0x0) read$FUSE(r3, &(0x7f0000000440), 0x1000) [ 207.549525][ T9428] input: syz0 as /devices/virtual/input/input7 06:02:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) flock(r1, 0x8) 06:02:05 executing program 4: lsetxattr(&(0x7f0000000080)='\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000040)='ppp\xb0\xa3\x00', 0x6, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)=0x7, 0x2) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="10006bac8317010007002e2f66696c65"], 0x10) quotactl(0x9, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000240)="eb04e4c272f3054284efa86b5729943da4ee60ababf07e2979758709f37ebd15b75a329cc3a1404f6fdca1e52d142c1c126b1a8c2c72b24449f521b6a62ab1d35b0f32bbba48bbe4ca9e4c921417d6efd717e61a012fb9846de9e9393739b4915a8b918f3a496d39c37183c53927c6684b8c17879c5c3ce219823f100a3d6236c870c78ae6a52b8304a0192d5546fad1560dedef55d4c4d92ee1a4a70ffd44a6c4807c2212e4baf3a9d0aedc7f6f7b2577819ab6558d") getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) getsockname(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) setsockopt$inet_dccp_buf(r2, 0x21, 0xf515b53174784021, &(0x7f00000003c0)="d2ec2d7952335c56e6b4f6b7f8060336a78fc64c027f8003d3f009c876214b396c8b4f21527b80bbc91fb3a6fbbb023e1515c3f842b29fc7393a8c6eeec1dd2205c6b9bf03aa8f7debb261a2a89069a7a7645a0a51eccc2b313bfd5ef2b89d3941e226719606f5adf4a167162b64babd9ae1a57ad1657eba55e2bd464d3154741a953f8bde940eff50920cfa164d14e39886d1294bb4baee6a1a1ba084bf597509310f44f5e8c4b3291a26376217b30cba6cbf83a019c74e7382bcabf23c07ac5b50e706b9354f525a81b073a933f26212abe29603ad9a29ab7391b96ab055875e965b0ebbee67005f4fbfcc125554fc21a50501c13e", 0xf6) [ 207.720784][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 207.726842][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:02:05 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = dup2(r0, r0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) 06:02:06 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6c6fbbf4493416801961642064656661756c7420d6372e75d8ae738118c9b75b9e47cd21e9d68093b2ca262ef4059937da0203c38449ccd711e0b61189b8d72a6481fd9fbe36d9c9c7398b0b1bd4b67b5f27729f1fa86cb98b8cb8fbae7ba3afb9316d620d2e9507f52fc9825b54f6595663cf447d6287da84680e752b1f1724d55643a6ea70c2ee136e5b2667056522bcf07785b42c8e92a74cf5"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 06:02:06 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 06:02:06 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) syz_open_pts(r0, 0x240) r1 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x6}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000001c0)='bcsf0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x9, 0x2, 0x3, 'queue0\x00', 0x7}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000000)='bcsf0\x00\x00\x00\x00\x00\x00\x00\x11\x00') 06:02:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffce3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @timestamp], 0x4) 06:02:06 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000040)=0x54) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4) 06:02:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) 06:02:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000030203000000000000000000000000004f975ee3795780845f5ef58270400095b9421b9d592e1bfd3e883390c850a3513ded85a13778470e36f9b2cf6813eff68e35c93ec630061b855b993ae727f929ea0799ef4e46e769d1e4833bed177188bf3b6dc2b7e9b3a6a7e4dd3ea943d4848735625606b7daf5caaf0000000000000000"], 0x14}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x400100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000180)={0x73a792f, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f00000001c0)={0x3, r2, 0x0, 0xfffffffffffeffff}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) 06:02:06 executing program 4: r0 = socket(0x10, 0x20000000803, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bo\b\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "c3e7038f64d814774109dc3cc31f6763f93aef2523aa94f7ceda4aca094ed26c", "5573def197b8f8ff9fc3d1448bec29d0d1f0f29efd0393de8cb84850c2a52555", "95d42e38c60a85c721a85b55bc33c4981c949f32f04429e8b2e6ad67e8cef933", "06d6d062f88930d88b58f1173fe6f86367e927fe9d8cf5d43b0e7971494f418f", "340c7d241b818d9aa272b0c9efb3816b6c6032731969bb0f4a2be3afbf492c95", "0a2e703af8a9cd225c7a186b"}}) [ 208.183990][ T9469] input: syz0 as /devices/virtual/input/input8 06:02:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000000000000fa85dd6041c2ba00300000a4664bdd6df717f747a61b8ff33ebf3c000000000000000000000000000000000300907800000000607cf74000000000fe800000000000000000000000000000fe8000000000ff0000000000000000bb"], 0x0) 06:02:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200210200000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000018e796001ca165b852e81493fa5a223f646cfeee9527718b57f7e88ec3d3686a1eb1b50f6ebea3e8bd2d5841a52f65ae91f4225976f017e6da3fdf073885c0e7"], 0x20}}, 0x0) 06:02:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0fb140a3"], 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)={0x0, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x3, [{{0x2, 0x4e22, @rand_addr=0x6}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x4}}]}, 0x20c) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:06 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x820012, r0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000400), &(0x7f0000000440)={'enc=', 'oaep', ' hash=', {'poly1305\x00'}}, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x3}) clock_gettime(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) 06:02:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) [ 208.651396][ T9503] input: syz0 as /devices/virtual/input/input9 06:02:06 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 06:02:06 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r1 = accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10, 0x800) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x1, 0x2, 0x9, 0xbbc, 0x29}, 0x98) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000002c0)={[0x103002, 0x4, 0xd000, 0x6001], 0x5, 0x84, 0x5}) r5 = dup2(r4, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000380)={r6}) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x14000, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r5, r7, r8) prctl$PR_SET_DUMPABLE(0x4, 0xffffffffffffffff) ioctl$RTC_WIE_ON(r5, 0x700f) setsockopt$inet_mreq(r5, 0x0, 0x29, 0x0, 0xff2d) ptrace$poke(0x5, r2, &(0x7f00000005c0), 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x3) 06:02:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x210000, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="130300000040000000008006003950323030b7"], 0x13) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000100ff3f03000000450001070000001419001a0015000700070008000300000800005d14a4e91ee438", 0x39}], 0x1) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0x5, 0x1d80000000000, 0x2, 0x9, 0xffffffff, 0x1000, 0x7, 0x3]}) 06:02:06 executing program 2: r0 = syz_open_dev$usb(0x0, 0x0, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x9, 0x7f, 0xff8000000000, 0xb8a9, 0x14, 0x0, 0x1, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x04\x01\x03\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 06:02:06 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) poll(&(0x7f0000000000)=[{r0, 0x4000}, {r0, 0x2000}, {r0, 0xe001}, {r0, 0x1100}, {r0}], 0x200000000000013a, 0x3) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x3}}, 0x68) 06:02:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x20000005, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4004560e, &(0x7f0000000100)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x40, 0x4, 0x8}}, 0x14) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/165) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'team0\x00', {0x2, 0x4e20, @broadcast}}) 06:02:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x10000000) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x0, 0x1}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8000, 0x0) syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x1, 0x2) mq_timedreceive(r1, &(0x7f00000000c0)=""/176, 0xb0, 0x4, &(0x7f0000000180)) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000240)={{0x0, @addr=0x6}, 0x8, 0x81, 0x7}) [ 208.914785][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.925390][ T9517] bridge0: port 1(bridge_slave_0) entered disabled state 06:02:07 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) poll(&(0x7f0000000000)=[{r0, 0x4000}, {r0, 0x2000}, {r0, 0xe001}, {r0, 0x1100}, {r0}], 0x200000000000013a, 0x3) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x3}}, 0x68) [ 208.990752][ T9528] input: syz0 as /devices/virtual/input/input10 06:02:07 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{}, "4bd149952afd9bbc", "10652ae150c7fb3cc9d14e8a0cae6596", "db8122b8", "8219758f9908e062"}, 0x28) 06:02:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2001) write$P9_RSTAT(r0, &(0x7f00000002c0)=ANY=[], 0xffffffffffffffa8) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000180)) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000000140)) 06:02:07 executing program 0: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x8000000000020, 0x40000000000000) openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=""/203, 0x200000, 0x1800, 0x1000000000000000}, 0x18) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), 0x0) 06:02:07 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 209.712072][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.719297][ T9537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.726794][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.733922][ T9537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.751051][ T9537] device bridge0 entered promiscuous mode [ 209.800069][ T9565] input: syz0 as /devices/virtual/input/input11 [ 209.897692][ T9564] input: syz0 as /devices/virtual/input/input12 [ 210.079622][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.086924][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.094559][ T9560] device bridge0 left promiscuous mode 06:02:08 executing program 2: r0 = syz_open_dev$usb(0x0, 0x0, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000080)={0x2, 0x1, [0x9, 0x7f, 0xff8000000000, 0xb8a9, 0x14, 0x0, 0x1, 0x4]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x04\x01\x03\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 06:02:08 executing program 0: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x8000000000020, 0x40000000000000) openat$vhci(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=""/203, 0x200000, 0x1800, 0x1000000000000000}, 0x18) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), 0x0) 06:02:08 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 210.161125][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.168486][ T9561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.175939][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.183080][ T9561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.197150][ T9561] device bridge0 entered promiscuous mode 06:02:08 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 210.302589][ T9581] input: syz0 as /devices/virtual/input/input13 [ 210.303138][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.316859][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state 06:02:08 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2001) write$P9_RSTAT(r0, &(0x7f00000002c0)=ANY=[], 0xffffffffffffffa8) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000180)) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000000140)) 06:02:08 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000340)={{0x84, @empty, 0x4e21, 0x4, 'ovf\x00', 0x31, 0xfffffffffffffffb, 0x26}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x4e21, 0x10000, 0x8, 0x2, 0x100000001}}, 0x44) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000000c0)={r4, 0x2}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r5, 0x109, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="32c7c9e0416688355783a5084078dc5b"}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2518000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x881) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@setlink={0x50, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28}]}]}]}, 0x50}}, 0x0) 06:02:08 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 210.361657][ T9585] device bridge0 left promiscuous mode 06:02:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000600) socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) unshare(0x10000) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = inotify_init1(0x0) r3 = inotify_init() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{r5, 0x0, 0x1000, 0x100000000}]}) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x80000005) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2080, 0x108) [ 210.573248][ T9601] input: syz0 as /devices/virtual/input/input14 06:02:08 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 210.761321][ T9612] input: syz0 as /devices/virtual/input/input15 06:02:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 211.065667][ T9625] input: syz0 as /devices/virtual/input/input16 [ 211.327232][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.334491][ T9591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.341997][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.349115][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.357026][ T9591] device bridge0 entered promiscuous mode 06:02:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000600) socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) unshare(0x10000) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = inotify_init1(0x0) r3 = inotify_init() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{r5, 0x0, 0x1000, 0x100000000}]}) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x80000005) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2080, 0x108) 06:02:09 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 211.382904][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:02:09 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:09 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000600) socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) unshare(0x10000) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = inotify_init1(0x0) r3 = inotify_init() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{r5, 0x0, 0x1000, 0x100000000}]}) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x80000005) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2080, 0x108) [ 211.483115][ T9636] input: syz0 as /devices/virtual/input/input18 [ 211.510488][ T9643] input: syz0 as /devices/virtual/input/input19 06:02:09 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 211.620729][ T9634] input: syz0 as /devices/virtual/input/input17 06:02:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:10 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 211.959832][ T9661] input: syz0 as /devices/virtual/input/input20 [ 212.074039][ T9669] input: syz0 as /devices/virtual/input/input21 06:02:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000600) socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000000000bd) r1 = socket$inet6(0xa, 0x6, 0x0) unshare(0x10000) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = inotify_init1(0x0) r3 = inotify_init() r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40100, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{r5, 0x0, 0x1000, 0x100000000}]}) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x80000005) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2080, 0x108) [ 212.199296][ T9674] input: syz0 as /devices/virtual/input/input22 06:02:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:10 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 212.505349][ T9687] input: syz0 as /devices/virtual/input/input24 06:02:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 212.610428][ T9685] input: syz0 as /devices/virtual/input/input23 06:02:10 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 212.694731][ T9697] input: syz0 as /devices/virtual/input/input25 06:02:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 212.792166][ T9700] input: syz0 as /devices/virtual/input/input26 06:02:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:11 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 213.027877][ T9711] input: syz0 as /devices/virtual/input/input27 06:02:11 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xb7, 0x80000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x163, 0x163, 0xa, [@enum={0x7ac, 0x5, 0x0, 0x6, 0x4, [{0x10, 0x7}, {0x0, 0x81}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x9}]}, @datasec={0xf, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x4}, {0x5, 0x1, 0xf3b}, {0x2, 0x8, 0x1a}, {0x2, 0x7, 0xebd}, {0x2, 0x2, 0x8}, {0x3, 0x2, 0xfff}, {0x4, 0x6, 0x5d22}], "48f862"}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x9, 0x1}, {0x9, 0x2}, {0x5}, {0x3, 0x2}, {0xb}, {0xd, 0x2}, {0x6, 0x3}, {0x9, 0x3}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @union={0x1, 0x5, 0x0, 0x5, 0x3f, 0x3, [{0xf, 0x5, 0x9}, {0xa, 0x2, 0x100000001}, {0x9, 0x4, 0xffffffffffffffff}, {0xf, 0x5, 0x1}, {0xc, 0x5, 0xffff}]}, @fwd={0x5}]}, {0x0, [0x5f, 0x5f, 0x30, 0x7f, 0x30, 0x0, 0x7f, 0x71]}}, &(0x7f0000001040)=""/4096, 0x186, 0x1000}, 0x20) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r2 = getuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) r8 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000bc0)=[0x0, 0xee00, 0x0]) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000f40)={{}, {0x1, 0xb809ad2cf4f6ba6b}, [{0x2, 0x4, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r6}, {0x2, 0x7, r7}, {0x2, 0x2, r8}, {0x2, 0x7, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r11}], {0x4, 0x5}, [{0x8, 0x2, r12}, {0x8, 0x4, r13}, {0x8, 0x3, r14}, {0x8, 0x2, r15}, {0x8, 0x4, r16}, {0x8, 0x1, r17}, {0x8, 0x1, r18}], {}, {0x20, 0x7}}, 0xac, 0x1) 06:02:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x22001, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x94\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 06:02:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 213.228486][ T9719] input: syz0 as /devices/virtual/input/input28 06:02:11 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 213.423477][ T9733] input: syz0 as /devices/virtual/input/input29 06:02:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x22001, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x94\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 06:02:11 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 213.496008][ T9736] input: syz0 as /devices/virtual/input/input30 06:02:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:11 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:12 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x8, @local, 0x80000000}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x600000, @loopback, 0x2b}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e22, 0xf3f0, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x7, @local, 0x802}], 0xb0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x80005, 0x0) sysinfo(0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000500)={0x15, 0x0, &(0x7f00000004c0)}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x4, 0x3ff, 0x1, 0x0, 0x902, 0x10001, 0x0, 0x7e4, 0x0, 0x10001, 0x8, 0xfff, 0x316, 0x3, 0x1}}) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) ioctl$PPPOEIOCSFWD(r1, 0x4004b100, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'team0\x00', 0x892}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 `\x00L\x00', 0xb7}) 06:02:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000280)=0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x6, 0x101000) getpeername(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000240)={r3, r4, 0x2}) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r5, 0xc0386106, &(0x7f0000000000)) [ 213.830439][ T9755] input: syz0 as /devices/virtual/input/input31 06:02:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 214.056016][ T9772] input: syz0 as /devices/virtual/input/input33 [ 214.081417][ T9768] input: syz0 as /devices/virtual/input/input32 [ 214.257929][ T9785] input: syz0 as /devices/virtual/input/input34 06:02:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:12 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:12 executing program 0: getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0x3d}, [@ldst={0x5, 0xc0ffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0xff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 214.567061][ T9793] input: syz0 as /devices/virtual/input/input35 [ 214.609244][ T9798] input: syz0 as /devices/virtual/input/input36 06:02:12 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) shutdown(r0, 0x1) r3 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x20, 0x20, 0x1, 0x3}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000400)={r4, @in={{0x2, 0x4e20, @local}}, [0x8000, 0x7fffffff, 0x800, 0x8, 0x7, 0x0, 0x5, 0x3ff, 0x1e, 0x1, 0x7fff, 0x100, 0x8, 0x5, 0x7]}, &(0x7f0000000500)=0x100) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0x2f, @multicast2, 0x4e24, 0x1, 'ovf\x00', 0x4, 0x400, 0x38}, {@loopback, 0x4e22, 0x3, 0x7, 0x1, 0x3}}, 0x44) [ 214.706587][ T9803] input: syz0 as /devices/virtual/input/input37 06:02:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:13 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="f7548a58", 0x4}], 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) setsockopt$netlink_NETLINK_RX_RING(r1, 0x3a, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x3, 0x0, 0x7}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000004c0)={0x1, @vbi={0x0, 0x0, 0x30314142}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000680)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @initdev}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, r3, {0xfff1, 0xffe0}, {0x3, 0xfffa}, {0x12, 0x6}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x1) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x100000000) write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0xff}, 0xf) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000000c0)={0x6, 0x3, 0x3, 0x4, 'syz0\x00', 0x7}) [ 215.015859][ T9816] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 06:02:13 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x1d71) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:13 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 215.159795][ T9826] input: syz0 as /devices/virtual/input/input38 [ 215.171750][ T9828] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 215.229333][ T9832] input: syz0 as /devices/virtual/input/input39 06:02:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20202, 0x0) r0 = msgget$private(0x0, 0x88) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x32, @local, 0x4e24, 0x1, 'fo\x00', 0x4, 0x0, 0x54}, 0x2c) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/248) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000100)=""/185) 06:02:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 215.405477][ T9842] input: syz0 as /devices/virtual/input/input40 06:02:13 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x100000000, 0xc0040) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) 06:02:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:13 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 215.635175][ T9855] input: syz0 as /devices/virtual/input/input41 [ 215.714169][ T9862] input: syz0 as /devices/virtual/input/input42 06:02:14 executing program 2: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7ff, 0x8}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x4, 0x8, 0x2, 0x1, 0x0, 0x3, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/81, 0x51) socket$unix(0x1, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) listen(r1, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x8, &(0x7f00000001c0)={0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x33, @remote, 0xd07b}, @in6={0xa, 0x4e21, 0x6, @loopback, 0x5}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x14, @empty, 0x218}, @in6={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x17}}, @in6={0xa, 0x4e23, 0xc5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, @in6={0xa, 0x4e21, 0x7, @remote, 0x2}, @in={0x2, 0x4e24, @empty}], 0xc8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="d2866e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0xc) mknod(&(0x7f0000000180)='./file0\x00', 0x8, 0xffff) close(r3) 06:02:14 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 216.059057][ T9884] input: syz0 as /devices/virtual/input/input44 [ 216.083901][ T9887] input: syz0 as /devices/virtual/input/input45 06:02:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00', 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) sendto(r0, &(0x7f00000001c0)="96", 0x1, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x1, {0x81, 0x3, 0x3}}, 0x14) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x1b68a0bbfea3c86f, 0x4) 06:02:14 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001180)=""/4096) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:14 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000640)="b9", 0x0}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x13e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18c183773816"], 0x1}}, 0x44801) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140), 0x4) socket$kcm(0x10, 0x2, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) r5 = getpid() capget(&(0x7f00000000c0)={0x20080522, r5}, &(0x7f0000000180)={0x1, 0x4, 0x101, 0x0, 0x11}) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x8000) [ 216.513387][ T9919] input: syz0 as /devices/virtual/input/input48 [ 216.541858][ T9920] input: syz0 as /devices/virtual/input/input49 [ 216.707672][ T9929] mmap: syz-executor.0 (9929) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:02:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:15 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x10001, 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) io_submit(r3, 0x6, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000040)="2c374c673845218a283d795eb527e696c8804c21d6e556d70b727cae83e01fdea5c0b2b4a483db32d8c15f0e08e17cf93e15a0e01f4b12218607037415474d36c3719ec7a9ecfd503bccfd41693e7b37da5e35148a75a3f69a16629c263f966c64906285e7d4c0f5f6ffefaeb6049b39ec6bcfa4de4517dc6f1f7540f31cb566355a50cb5d4f79d826d2c6b5d1a19ea9496215fcb82418cd62500c1b", 0x9c, 0x1, 0x0, 0x2, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x80, r2, &(0x7f0000000180), 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8004, r2, &(0x7f0000000200)="01a36ef6fdc66cf8fa797e61c883c3abbd33150f21e8437ac7c20108f06417cb5b25969fa92bcc601c0c5c2542c29aae863327", 0x33, 0x1, 0x0, 0x2, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xb, 0x0, r1, &(0x7f0000000280)="10af7a9fb60f470b331d85b4ecdd1159f1a04098b904e567278df600a8561840c94254929cb04104826a25f7e67501de5e6e95bc5524bcbc409595703d0614a8db154afbe6152763370321b2dc1ef105d8c517a69d068195cddff07f95ab20bb871e567d4491fa71a3a216da3e416e086b05df878a3ed68ed3e5f52bef10592acdf81d8862f000a5c1e857162edba7931bf6d4c8ce2e", 0x96, 0x81, 0x0, 0x2, r2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0xf34, r2, &(0x7f0000000380)="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", 0x1000, 0x8, 0x0, 0x1, r1}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000013c0)="ebe0951e4c5d350a07fe40e78e5cfd25e0f6bc17360b501ad8311d383e4fefd73c7cf5960c1be42c3d5c9e34489662891b54b7a679de634062d678ba3d7e54a6a6274129934fc489069b26abe348dbf0a232dde4010cccf16f34a6bac1f24734cfd2534ef6417075cb8c28bd1daa58bf73a045fa5a0cc5b87c34503eb87117d3187ed5d99cd1bb587744cc67329de05be0aded281d1ef04812da6abe26c7a32bd1868dceede2f89d7c0fe498443ffd8e9b604028", 0xb4, 0x81, 0x0, 0x2, r1}]) 06:02:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:15 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 217.004547][ T9934] input: syz0 as /devices/virtual/input/input50 [ 217.026443][ T9939] input: syz0 as /devices/virtual/input/input52 [ 217.035473][ T9936] input: syz0 as /devices/virtual/input/input51 06:02:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:15 executing program 2: sched_getparam(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f000002eff0), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40040, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x9, 0xebb, 0xfff, 0x10001, 0x8e, 0xe65}) 06:02:15 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 217.358348][ T9959] QAT: Invalid ioctl 06:02:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 217.384239][ T9960] input: syz0 as /devices/virtual/input/input53 06:02:15 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000640)="b9", 0x0}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x13e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18c183773816"], 0x1}}, 0x44801) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140), 0x4) socket$kcm(0x10, 0x2, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) r5 = getpid() capget(&(0x7f00000000c0)={0x20080522, r5}, &(0x7f0000000180)={0x1, 0x4, 0x101, 0x0, 0x11}) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x8000) 06:02:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 217.593529][ T9973] input: syz0 as /devices/virtual/input/input54 06:02:15 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 217.657747][ T9981] input: syz0 as /devices/virtual/input/input56 [ 217.728632][ T9978] input: syz0 as /devices/virtual/input/input55 [ 217.793803][ T9988] input: syz0 as /devices/virtual/input/input57 06:02:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 218.101905][T10001] input: syz0 as /devices/virtual/input/input58 06:02:16 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 218.318127][T10013] input: syz0 as /devices/virtual/input/input60 06:02:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 218.417164][T10015] input: syz0 as /devices/virtual/input/input61 06:02:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 218.681082][T10032] input: syz0 as /devices/virtual/input/input63 [ 218.812257][T10036] input: syz0 as /devices/virtual/input/input64 [ 218.908752][T10046] input: syz0 as /devices/virtual/input/input66 06:02:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:17 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 219.127784][T10048] input: syz0 as /devices/virtual/input/input67 [ 219.149372][T10060] input: syz0 as /devices/virtual/input/input68 06:02:17 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x2000) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x80000) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb3}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0x2e, &(0x7f0000000340)) poll(&(0x7f00000000c0)=[{r4}], 0x1, 0x0) [ 219.221914][T10063] input: syz0 as /devices/virtual/input/input69 [ 219.258682][T10065] input: syz0 as /devices/virtual/input/input70 06:02:17 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, r0, 0x3) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0xfffffffffffffffd) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2002, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f0000000140)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0xdb5, 0x4, 0x3}) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a8009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 06:02:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x100, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xef, &(0x7f0000000300)="92b0cab2d9861ade10a6ebe6e3715238b8f68731c322b1cd66a26c7710a1df721a10756d12d690bedc3cf90a987467c5165ddb87dce0ed4f6e2133a2bdac452cbb96fbe849ec45e36b3d5463cb93c1577f3e5d4e02345c53bf2d24f3120dc4b3a5e5556f056b389fc88fa5dc677c978c157a66b602edc7596356c1417250740a3518047e4e113f9597f77ea218da67b88dd636569ad2fd5b6e6f988fd330b514c30351d7e51209afa735bee8521dca472d26a6ced258904c6e4b39f438fc3aae17a23d0dbe9ceb32df17200abfbc0300c208c5670f6d7523505ccfa356f10c8d", 0xe0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) r2 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x3300000000000000, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0), 0x0, 0x8dffffff00000000}}], 0x40000000000026a, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="8e000000a4a36e5571c9b9df8c732fbd9fa07ca400210217e2a2dae3b3eca635d80228d0e9c52557cdd4386db04d7d6e496329eb2102dc6812645005841893e2943a414db9ac0142da2fc1b78533ff1cb5954fce687a2cd6e98e6363273579d1a8f4892d32ae809acebef617454160aa820653a82ccbff7d5aad2c073584dda1863553c03601b6b3867ff1563326d166231e520f8b89914e456edff46043f2c13447d009ac6b8ec7be4de2dc6f4e0539f089efa400984589c2c0ee9b0f9dcce612f56368034dc962d76d77f31f6180962d828963a188004acd78affae24e22f3f4c3d69cb8fb0000000000"], &(0x7f00000001c0)=0x96) 06:02:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:17 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:17 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 219.571034][T10084] input: syz0 as /devices/virtual/input/input71 [ 219.678136][T10090] input: syz0 as /devices/virtual/input/input72 06:02:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) munlockall() ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0x1, 0x409}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001006, 0x7, 0x2}) [ 219.800947][T10103] input: syz0 as /devices/virtual/input/input73 06:02:18 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 2: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x24) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x9c, 0x8000, 0x9, 0x400]}, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23, 0xeeaf, @mcast2, 0x7}}, [0x2, 0x40, 0x100000001, 0x3f, 0xffffffffffffff01, 0x9f4f, 0x8, 0x6, 0x9, 0xa4, 0x7fff, 0x400, 0x4f9c, 0x81, 0x5]}, &(0x7f0000000280)=0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 220.246309][T10131] input: syz0 as /devices/virtual/input/input77 06:02:18 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "0543d67c604ca9f6", "1e5d6d7ce16b454180c9c3459d70e7b2", "f96b103e", "dc40c35c6930d2fe"}, 0x28) syz_execute_func(&(0x7f0000000180)="0c02b5b598cd801b69e4f56962f5696200d9d9d0c441395bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d82420f0d5eed00c4da767667664d0f7efa8f4808eebce00000802000c4c3dd6d68074851518fe9509b9b9bfc0000c1ea01eef265dc5f00c4c23bdcc4bbbb5b45363ef80f9966030faee42c240f5e5bf447000026400f0d18c401fe5ff6e3df646736676670664336660fd2938c0000000f01c36666450f17720d14111d54111d00") setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0xfffffffffffffffb, 0x4) 06:02:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:18 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f045, 0x0, [], @value64}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x3000, 0x9, 0xfffffffffffff001, 0xcfa}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0xf, 0x6, 0x1, 0x80000, 0xffffffffffffff9c}) poll(&(0x7f00000002c0)=[{r0, 0x8005}], 0x1, 0x0) 06:02:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 220.675400][T10150] input: syz0 as /devices/virtual/input/input79 06:02:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:18 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:18 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f045, 0x0, [], @value64}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x4, 0x3000, 0x9, 0xfffffffffffff001, 0xcfa}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0xf, 0x6, 0x1, 0x80000, 0xffffffffffffff9c}) poll(&(0x7f00000002c0)=[{r0, 0x8005}], 0x1, 0x0) 06:02:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 220.902940][T10171] input: syz0 as /devices/virtual/input/input81 06:02:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0), 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 06:02:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 221.186826][T10194] input: syz0 as /devices/virtual/input/input84 06:02:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 2: lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x2, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000000000000800120000000200000000008c32fea93000000000000000000000000000000000020000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 06:02:19 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 221.374227][T10207] input: syz0 as /devices/virtual/input/input85 [ 221.417459][T10208] input: syz0 as /devices/virtual/input/input86 06:02:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 221.678384][T10219] input: syz0 as /devices/virtual/input/input87 06:02:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 221.762397][T10232] input: syz0 as /devices/virtual/input/input89 [ 221.793264][T10236] input: syz0 as /devices/virtual/input/input90 06:02:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001780), 0xffffffffffffff85) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) 06:02:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 222.043035][T10251] input: syz0 as /devices/virtual/input/input91 06:02:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x534d760d525c5161}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0xa00, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x99}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2e008dc2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x44}}, 0x8080) r2 = socket(0x9, 0x2, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) [ 222.192288][T10264] input: syz0 as /devices/virtual/input/input93 06:02:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0xfffffffffffffb03, 0x100000000, 0x2, 0x3, 0x80000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xa4, 0x0, &(0x7f0000000600)=ANY=[], 0x6c, 0x0, &(0x7f00000003c0)="ab466aac1f8aa0dfc7a8dfe23af3aa39cf36e104b2229bed308f198e223b22269c6c0c2dc143a528e5c23df14c80e03b2180b07c545f5be70d7f260b8dcc7b5ba8e5dca3026ab45b169c2088b06a6df896d3f78e14123d95972e068829c99cf510f775809f5daff39fbc9869936f3eb9e274919ac7348eaaa396535194550e77feff50c685d75549ebb5e864e51861c890f53178"}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000004c0)={0x100000001, 0x1, 0x3, 0x6, 0x9e78}) [ 222.319307][T10270] input: syz0 as /devices/virtual/input/input94 06:02:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 0: socket$inet6(0xa, 0x6, 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f00000000c0)={0x61, 0x20101000, 0xffffffffffffffff, 0xfffffffffffffd6d, 0x3, 0x81, 0x797, 0x3, 0x1, 0x7}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0xff, @broadcast, 0x4e21, 0x1, 'fo\x00', 0x10, 0x8, 0x2b}, 0x2c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) 06:02:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 222.568761][T10290] input: syz0 as /devices/virtual/input/input96 06:02:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x7, 0x1, 0xfffffffffffff7c9, 0x0, 0x8000, 0x103, 0x7}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x6c, r2, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev, 0x7ff}}, {0x20, 0x2, @in6={0x10, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 06:02:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 222.810821][T10306] input: syz0 as /devices/virtual/input/input97 06:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x1, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0xffffffff}, 0x8) 06:02:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 222.900288][T10313] Enabling of bearer rejected, failed to enable media [ 222.970007][T10320] Enabling of bearer rejected, failed to enable media [ 222.979401][T10319] input: syz0 as /devices/virtual/input/input99 06:02:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x7, 0x1, 0xfffffffffffff7c9, 0x0, 0x8000, 0x103, 0x7}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x6c, r2, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev, 0x7ff}}, {0x20, 0x2, @in6={0x10, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 06:02:21 executing program 2: r0 = socket(0x13, 0x802, 0x1) write(r0, &(0x7f0000000400)="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", 0xfc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0xffffffffffffff82, 0x400}}, 0x30) 06:02:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 223.337933][T10338] input: syz0 as /devices/virtual/input/input101 [ 223.378966][T10347] input: syz0 as /devices/virtual/input/input102 [ 223.423896][T10352] Enabling of bearer rejected, failed to enable media 06:02:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10100) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x100000000, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 223.535483][T10360] input: syz0 as /devices/virtual/input/input103 06:02:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:21 executing program 0: unshare(0x8000400) syz_execute_func(&(0x7f0000000100)="615f0f9df40c3f22d4d4260f380474c467cd801b69e4ae6262691fff5807d955901090100a0000005bf91cc18fe9589b26e60ed8d3427d82dfdfe4da640f1a0207168f4808eebce00000802000c421650fd310b8b0ce3666f3e1dcdcab7d73fa6ffc06fc0601c2c4e3e95cdf09f265dc7f10c36645363ef8d9ce6526ded05f29acac2e4409566d00082640c401fe1d8bf4f4df64673667666643c4e1c955f3c4e3f9799e000000000b314f860f0d0f86450fd4f3f30b0f16b6af141123d8c4e2b5a945cd5d0f18f5") modify_ldt$write2(0x11, &(0x7f0000000000)={0x6d, 0x20000000, 0x400, 0x34a0, 0x8, 0x0, 0x92, 0x4, 0x9, 0x5}, 0x10) ioperm(0x400, 0x80000000, 0x9) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pwrite64(r0, &(0x7f0000000200)="1143036e46835a4f9aa13dbbe76d0a8d39021ca523d22487b1fa61522facceb5ec1b1564ddcac0023c075ff5c61f084b5285307bda771391594e7d07800bdf525e151723d370273c5f928d57732c4eb6354ee96c20636e66e07d9cdb49e8ea476ef72aaaeba4bd9959c3a3ea992e828416f522bafe091fa457bc6a60e22e365643fc925954192f44aa2987b1bd20ca2ef135fa4b05c2a0b99012209281921c3a45b45425b1c793818e38808a", 0xac, 0x0) 06:02:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 223.823925][T10379] input: syz0 as /devices/virtual/input/input104 06:02:22 executing program 2: r0 = userfaultfd(0x0) ioctl$FICLONE(r0, 0x40049409, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = dup(r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000740)='/proc/capi/capi20\x00', 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000006c0)='wlan0md5summd5sum&!selinux$keyring-\xecvboxnet1\x00', &(0x7f0000000700)='./file0\x00', r2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000780)=""/42) getsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f00000001c0), &(0x7f0000000200)=0x4) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000240)="37ee585fa034748e424dd65e088eccdf17c584b44e", 0x15}, {&(0x7f0000000280)="20ed91f77b160e65f992af67cb5e960f495c8ca4fbec2361b6", 0x19}, {&(0x7f00000002c0)="3aa7ba00c7ff0fa0f9efd947ca6800abed5fbccdab50fd4915f09267f87b5b889eea1423fffd4a208221f6a9530a9cd1bceddaeb495a9b07baeea54215d05c16fd20f35cae8802ce44a52741c164e84ad19dca531eeda79ceff70bf19ee3a6fd3c0e8057a4a9ce9a21b26e260336e5b053c4cf618025a11c79240576f39f64d0395609c237e885425267e14547c3f744e6c4ca8ad36060dbdd98ef1503f816df776ba9032ff9c22b0c058f7b20a6bda575815a41f5c373e3a0941eb98de41d0ffc8bae28e13404aabf22c790", 0xcc}, {&(0x7f00000003c0)="c2857b5ab3499a55b524d940584990ab336a64a7254a20b71adc85acc53471f4f2f5eeccd289f7f2ec07fa797a95fc97f53cf02fa056127e2edc81cb6d54fa5e039570b2e296cc824ce4569c620d736bca191860b30f73068c357ab3918cd0bd47c6f37a660505", 0x67}, {&(0x7f0000000440)="7ec063f421a4d39754a5f6db69f144ce5af03ace3c101ad003517c5ccd66eb47ab8acb684ba7274a7e01153fd1fe30173f976c6b78fa7b1c25edd3f14599047f94d50013bfc48967e5c18be1d652ccc0c6419d9d775ff130a7de285c2c22f6ba0d5b9b572458707e30a53843bd344631f8f40f3677a15485336cb2616b7ea75131032020ff7fe582e7a184304bd82d09b6dea1477df58546a63f791307c14491a0", 0xa1}, {&(0x7f0000000500)="1fd03d45e7103cb2739400ddb6f9fa3971ea9bc9a9eea97882dc362ef4", 0x1d}, {&(0x7f0000000540)="0c755dd02b1c53e1e96ce6768c13a0eb1acde29ce27fb921e346b40f09b8dd7fa750dc3f386743c03e06133a556bd35166d20bff8ea7a300e6d10f1a015acb5710840ce2040c9a5397fc01b3b0e3baf5a4896f312e64ee53680eed31f2bca6a84f094ac28b04197c6b6d60db21f35534", 0x70}, {&(0x7f00000005c0)="86064cac653d1a1321a9a790e8c60099663049edd13b661b25753d290baf90807741d10be57cde0cbb6508576df98d5c1223048db05ffb669ce24e1c003f6e2a0e4984c426eb5a233d3ce993f3dc74de63068b105b2f06a05ac058075705afd2aa524822a9d26751510e2dd141ab4d2edc50697662994a13ac73e5167d1564b7020f72e39d134f7299cccbfcf35051620673ac1da2", 0x95}], 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x27, 0x3, 'client0\x00', 0x2, "72202aee5514b925", "8eef106736aab4cbea268c40e7e0acf28d5927d6826194e1fe2af9ab279120b9", 0x6, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce2000}, 0x200000}) socket$packet(0x11, 0x0, 0x300) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40, 0x0) [ 223.887831][T10375] input: syz0 as /devices/virtual/input/input105 06:02:22 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 223.968737][T10382] input: syz0 as /devices/virtual/input/input106 06:02:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d02, 0x1, 0x4b564d02]}) 06:02:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 224.267512][T10412] input: syz0 as /devices/virtual/input/input107 06:02:22 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 224.321020][T10414] input: syz0 as /devices/virtual/input/input108 [ 224.428532][T10420] input: syz0 as /devices/virtual/input/input109 06:02:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:22 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045109, &(0x7f0000000240)) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) 06:02:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:22 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[]}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xbfc6, 0x40040) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x10) 06:02:23 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000100)=0x72, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$nbd(r1, &(0x7f0000001f80)={0x67446698, 0x0, 0x0, 0x0, 0x0, "b57d905fcc73fb32fafa6accdfb4dc9e3ec1bd62d9681d3c8319c7f25fbf78f6a0e2ccc6c2aba6c323ec2b010721ecb6bb5e65fa578616d556c7019985438724e88355e0e9da661073c3853a58781049e5ec4ae6f20c71ae4d1dc6b55409ba62ff9ed88aad0bc81dd6df48b1bf8793e7073c0f94fa9660a1635c4b5f30c724ee132e00751e22b49235844e30237546a103898ec608f1c3d99363fc1f7d839c492c5e546db73d03d69902d83774a9a05ce4f47572c3f84a0ef0a3d7b33531fa6901d05fa8e16126c29be317018ae38f3826f8b0a27078f76f9772be7180cab7d588171305a200658875d51d87f83e5814cec066e69a159f71142e3d7058614bb7bcd1e5842e41c38b7d437eeddfe56e00438e341699b156462b60eb8eab3b8a6b2c34c51365302c6d6a90ead04dc3442f09f0c1be6d04507b28bc904e23afe95789b4ccff4f0f26532bcbec039c2678dbdda47f3c11f046939c9c70a95e6b55159c093ea97de8087c3851aae8342287456339087d393343561a6a2ec1c334e781ac15461abc49d61ba3770a49f9f287edeb0473b945387ec0f8968ea61a561754c5fba3b35198dd79ba365f71e1b79fe1c295f3e142f0688563fedbfd436d4692d429f34ba4e1023452a4acdaaa4ccd0102f49b7a2710ec1baf12501bd9cc1aafad869a0069abba3fd80b246bf81799fcee972ef3778759ee0c1dbdc1d800fcfb39fd93548a9297f0431fa5a4e8d7bd45e45e6e7df5af22d7d5f5d8825df6eb3fe7f20de087c347455cf3d3a24fba13b51d8ec94909ecb935345140caceb73f8ef5f96dca4c04ea7b9a28ed8855b4fd1ae388134b6b4a3bc34c4b62bba7ab862d586e044bb00c22408e0669505e3a0a94d7596b18119a248c96004409a8ac1828273000ca29dff76642456c36e3afeaa3df11109da1d21f2de3a411908d80166f7041e55d93ab48f1837dd1e71f2ba0fc4110e196c0c2472a9681ebb47a9b199e809b1fa1ec0b0e3f65acb09b84d6544dcfe4beede2048366909d03dda2cf3be12f0369ba9ddca222a0fd4373911f6e1d393b4da3f22d854ea3d52aa2ee9461c55a4304e6317a5df2f0e554326b795ce0efae70564cd4a087931ad2dbd5e341be16430750de1b72bebaedf66265ec2f113797957e597e33dfb71a65536d068f9ccd31946b4a6e742f0a51d9390826cc0d4f5cdf08e0eb75feaad79946e9a16cbaecc80c428c2fd6b906cb3841a015accabc8d859dfd06524ea17995148be8a636c99c6dd0483e088f1d80d191cdecdb2219e9ee6dce795b2023d3938fe5cc067458ab1160adc8264af9d0a8aeb6055cf414f07df64dda3fe58ef4272f5275403c067fba5f7ec83e807c416a20d601e17dd8881858d52f6128aa936e73cf6c"}, 0x3ee) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r4 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="f15226563639fa2c524ea700c323335494360f24a23126bffbf6547fbfc9d2a0511416c4a0ee1ac5499bfa4c057c99d0f347c32fe5aea1377bfeeaa0d80f8d5c446725ce1dd315cb8824eae48be25a8dbd690f", 0x53, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r4, r5) splice(r0, 0x0, r2, 0x0, 0x4000c, 0x0) [ 224.846350][T10442] input: syz0 as /devices/virtual/input/input111 06:02:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 224.944960][T10449] input: syz0 as /devices/virtual/input/input112 06:02:23 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:23 executing program 2: syz_open_dev$video(0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4, 0xffffffffffffffff}, 0x1c) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x40}, 0xfe7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x8000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) socket$inet6(0xa, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x2) 06:02:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x0, 0x8}, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:23 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:23 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3f, &(0x7f00000001c0)=""/217, &(0x7f00000000c0)=0xd9) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r0, 0xffffffff, 0x8, "bf96e62e94d1618e24924758de5e1744e8caa37b060ee06847c0c05f22bcc8ff338ef26e83289e985349b28f7761291402de4d5509d576490ff8b071a90c19c21b0bb5051ac7dee4c092ee21b5a5e50e8bd64f4f9c99518572d96d00f1a3d430e1efdb7e774a61d572285b83b561a36df8ea21c8c5a099739e3d707e5df8833744ff613a5c710cacc1a1bdddb26f57b8f843a0e6f9143db44454713bdcfcdb328adb374f"}) sendmsg$sock(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="e7", 0x1}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x100000000, 0x200000) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000340)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) shutdown(r1, 0x1) close(r4) pipe(&(0x7f0000000100)) splice(r0, 0x0, r4, 0x0, 0xc0, 0x0) [ 225.396728][T10484] input: syz0 as /devices/virtual/input/input115 06:02:23 executing program 4: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='/dev/uinput\x00') write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xe0, "a27c789953d6ad301a4c6e5f5b24935a781e1960ae1fc18e5c086ab8954503cf7547e9f4d0219f614f30b1cdfc8961d3f6c63a43f53bc49861549887cb0f68c64cf967f02dc31aa128ed745e6a7b7951aa7e4b168489596e62c46597749d5542b045a0e6e710613b7888e939a2b1a460498e3f71e42c66977ede94d587df17b50439bd1037098dae08214c496408be2d3f9a39751aed99b06d8a5b7b98de81bf1e1145c51194b7ef76136cee083da5c74b7378ad093c51f61be5dc768d5f53ed83b65e2f121919eeba68fb1405f55b12d919472aab28f59d382bbea340d0ee02"}, &(0x7f0000000080)=0x104) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0045627, &(0x7f0000000040)={0x3, 0xfdfdffff, 0x0, [], 0x0}) 06:02:23 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 225.761414][T10513] input: syz0 as /devices/virtual/input/input116 [ 225.806969][T10520] input: syz0 as /devices/virtual/input/input117 06:02:24 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14, 0x80800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001280)=0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000002802908c9b903d0d4757900f164e8e0000e6ffffff000885"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0xfffffffffffffffc, [], r1, 0x0, r2, 0x8, 0x0, 0x1bd, 0x10, 0x0}, 0xfffffffffffffc34) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) 06:02:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f00000000c0)={0x1ff, 0x0, 0x10000, 0xbf}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000000140)={r2, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x1010001e, 0x1, 0x0, 0x0, {0xcb07}, [@nested={0x8, 0x0, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}}, 0x0) 06:02:24 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 2: r0 = socket(0xa, 0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x2, 0x4e20, 0x400, 0x0, 0xa0, 0x0, 0xff, r1, r2}, {0x7e5, 0x4, 0x5, 0x12d30, 0x100000000, 0x9, 0x8, 0x10000}, {0xfd, 0xa0, 0x7, 0x8}, 0x7f, 0x6e6bba, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d4}, 0x2, @in6=@loopback, 0x3500, 0x6, 0x1, 0x26e, 0x2, 0x1, 0x5}}, 0xe8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) r4 = open(&(0x7f0000000000)='./file0\x00', 0x82000, 0x10) ioctl$KDADDIO(r3, 0x4b34, 0xffffffffffff0001) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0x6000, 0x1000, 0x1001, 0x2], 0x74e, 0x4, 0x8001}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x6) [ 226.139067][T10542] input: syz0 as /devices/virtual/input/input118 06:02:24 executing program 0: r0 = socket(0x10, 0x2, 0x1) write(r0, &(0x7f0000000140)="2400000052001f00ff03f5f9002304050a04f51108000100020000200800028001000000", 0x24) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:02:24 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 226.274595][T10551] input: syz0 as /devices/virtual/input/input119 06:02:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x80800008) read(r0, &(0x7f0000000040)=""/11, 0x158) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 226.601548][T10577] input: syz0 as /devices/virtual/input/input120 06:02:24 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 226.723194][T10588] input: syz0 as /devices/virtual/input/input122 06:02:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 227.105790][T10611] input: syz0 as /devices/virtual/input/input124 [ 227.235848][T10620] input: syz0 as /devices/virtual/input/input125 06:02:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:25 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:25 executing program 2: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "a26b43e81902fe458ca8a077ef02b449de922a83"}, 0x15, 0x2) [ 227.468964][T10632] input: syz0 as /devices/virtual/input/input126 [ 227.492234][T10633] input: syz0 as /devices/virtual/input/input128 06:02:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) close(r1) 06:02:26 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:26 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="feb5fa24f0ee05439923f82af580166580a4167cba71fd76da7060f19577924da39184d87c3a587d9d5d723400ad079de56babe7c7d7822e45e627b5fe20a7b31ad865ec25b3ecc51a0397b342edb8df53b02c6bd84a6108306f31660cec8b7faea84854859f3c0f66f13464af6bce49f35044ff58a69dfaded28537273cf1b3646a858c7064c87fd0c1e3984d1498e0b772a1a20fd8fe31ef6bafbab91bdfe3dfa0edc0dc24c9b172798b06cc5f2f905c39a1fe4dc8e113e78f236e", 0xbc}, {&(0x7f00000000c0)="ac09e412dc65f7f0cbaf88d95ce4134f938d1a5b828300fb6907bc836f0fcccec35000bc9644366e41a5871a082ccebdbeece703856d897b7ea4b73763c4fd295ef6160c90d7bfca8280e983b5d1051f575552ffadb367502e589c014680ff568caf8f9cc6ee637d1738f57b15f7af3e7032632473fa31df3e8b2933c2839d475822574418e8b87a565f27d50233766b08898d00c070db148f3312edb97c078d5253f1ee9de93642e440746e92a0685d972c6f490632370e94", 0xb9}], 0x2) r0 = fsmount(0xffffffffffffffff, 0x1, 0x71) fstat(r0, &(0x7f0000000200)) 06:02:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 227.852609][T10648] input: syz0 as /devices/virtual/input/input129 [ 227.879167][T10645] input: syz0 as /devices/virtual/input/input130 06:02:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) getsockopt$inet_buf(r0, 0x0, 0x400000000000485, 0x0, &(0x7f00000002c0)) 06:02:26 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.138681][T10670] input: syz0 as /devices/virtual/input/input131 [ 228.217327][T10671] input: syz0 as /devices/virtual/input/input132 06:02:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:26 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.571106][T10686] input: syz0 as /devices/virtual/input/input133 [ 228.583558][T10690] input: syz0 as /devices/virtual/input/input134 06:02:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) close(r1) 06:02:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:26 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffc2) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000), 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x0, @initdev}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000380)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x5}, [{0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x0, r4}], {0x4, 0x1}, [{0x8, 0x0, r5}, {0x8, 0x1, r6}], {0x10, 0x1}}, 0x4c, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xd17bf22b0e16b0bd) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 06:02:26 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.738626][T10700] input: syz0 as /devices/virtual/input/input135 06:02:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 228.860742][T10711] input: syz0 as /devices/virtual/input/input136 06:02:27 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='+$keyringvboxnet1\x00', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r1, 0x5f, 0xed}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha512-ssse3\x00'}}, &(0x7f0000000200)="531daddd2d48f51b02b365655f371b37b6154090d2ccd9f3707d7892aaf15b2c9de831967e9320fa3c8e7dd9eb54f0e8f60784cc6d4f212ce9342bf343ed05c855833c4a3dbb63edc707fe92d0694c6d1547530f44e1524f273002907ffa40", &(0x7f0000000280)=""/237) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 06:02:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:27 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 229.010751][T10721] input: syz0 as /devices/virtual/input/input137 [ 229.175221][T10734] input: syz0 as /devices/virtual/input/input138 [ 229.192973][T10737] input: syz0 as /devices/virtual/input/input139 06:02:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x40) 06:02:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 229.393633][T10746] input: syz0 as /devices/virtual/input/input140 06:02:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) close(r1) 06:02:27 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0x3, 0x404}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 06:02:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 229.720139][T10760] input: syz0 as /devices/virtual/input/input141 [ 229.736391][T10761] input: syz0 as /devices/virtual/input/input143 [ 229.767610][T10762] input: syz0 as /devices/virtual/input/input142 06:02:28 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 230.101954][T10790] input: syz0 as /devices/virtual/input/input144 [ 230.108643][T10792] input: syz0 as /devices/virtual/input/input145 06:02:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:28 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) close(r1) 06:02:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @rand_addr="c3ce87c87ff2097316072854723445ae"}}, 0x0, 0x5, 0x0, "9cb452970e7cd859de9e3054e67d6fc249beab35daee8db183d7d18b75023ffec7f368ff83296500c328927dae872bef6040904216f64826415d2b83c333f25eda6c97c09750f53a5b3c5bdbe2e04b3f"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x7ffffffb, @empty}, 0x99c3) listen(r1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) 06:02:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:28 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 230.535972][T10814] input: syz0 as /devices/virtual/input/input148 06:02:28 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) getpid() gettid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000940)=ANY=[@ANYBLOB="9402000072d2261a1f05c9a979a04ea12707", @ANYRES16=r3, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x1}, 0x11) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x2000010200f399) r4 = syz_open_dev$usb(0x0, 0x4, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010728bd700000000000030000003c000380080007004e2100001400020073ab00000000000000000000000000001400027465616d5f736c617691d63100000000080007004e200000080004000400000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd, 0x18, "964f8adb3c9caa950b9c451c57b59370228e9e611f47c9ac5a7bb76e7680074d4857293a620eb6d58e47414c07b5b94599e6683a1307bab7a36ee1e677b63541", "c22b18f8285bfab03cbcea7d416577286c2000406f1d3c982fd394d097abec04", [0x8, 0x1]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(0xffffffffffffffff, &(0x7f0000000200)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) sendfile(r4, r5, &(0x7f00000004c0), 0x7) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) shmget(0x1, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000180)=@hopopts={0x88, 0x0, [], [@generic={0x8}, @ra={0x5, 0x2, 0x6}]}, 0x10) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') 06:02:28 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:28 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:28 executing program 5: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:29 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:29 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10300, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3df200bd28ccab12}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x240, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x108, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x915e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe7a0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x15}, 0x475}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3c91}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x979e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf003}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x240}}, 0x20008884) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {}, {}]}) 06:02:29 executing program 5: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000a9cff8)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0xe16, 0xfffffffffffffff9, 0x9, 0x6}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f00000001c0)=@deltfilter={0x1a30, 0x2d, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, r2, {0xfff1, 0xd}, {0xffff, 0xffff}, {0xf, 0xf}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x960, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2871, 0x7fff, 0x8, 0x5, 0x9, 0x3, 0x2, 0x0, 0x76, 0x9, 0xc3d, 0xfd4, 0x8001, 0xffff, 0x9b, 0x7, 0xfffffffffffffffb, 0x4, 0x7fff, 0x3, 0x401, 0x72d, 0x76b, 0x3, 0x1, 0x80, 0xca24, 0x1ff, 0x4bd, 0x1090, 0x4, 0x2, 0x0, 0x100, 0x0, 0x2, 0x0, 0x7b9, 0x7, 0xfffffffffffffff7, 0x1, 0xffffffff, 0x6, 0x1281, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x8, 0xfe0000000, 0x3, 0x0, 0x2, 0x100000000, 0x7a288610, 0x8000, 0x81, 0xfffffffffffff7eb, 0x400, 0x6, 0x100000001, 0x8, 0x7, 0xb8d, 0x1, 0xff, 0x8, 0x2000000000000, 0x3d, 0x400, 0xf9df, 0x0, 0x10001, 0x1, 0x4, 0x4b09, 0x100000001, 0x401, 0x5, 0x4, 0x7f, 0x7fffffff, 0xffffffff9ba213dc, 0x401, 0x3, 0x8, 0xfffffffffffffff9, 0x1ff, 0x3, 0x6, 0xd6, 0x8001, 0x6, 0x4, 0x8, 0xfffffffffffffffd, 0x6, 0x7, 0x0, 0x1, 0x2, 0x5, 0x80, 0x10000, 0x7, 0x9, 0x8000, 0x100000000, 0x0, 0x49f6, 0x80000000, 0x8000, 0x0, 0x9, 0x1, 0xfffffffffffffffe, 0x341307bc, 0x3, 0x9d, 0x2, 0x9, 0x6, 0x7fff, 0xa6, 0x9, 0xfffffffffffffff7, 0x4d7, 0x5, 0x8, 0x100, 0x1f, 0x0, 0xe8, 0x327, 0x33, 0xa00, 0x2, 0x0, 0x3, 0x8000000000000000, 0x0, 0x21, 0x7, 0x2, 0x4, 0x4, 0x3, 0x6, 0x1000, 0x2, 0xfffffffffffffffa, 0xab8, 0x401, 0x26, 0x2000000000000000, 0x7, 0x3f, 0x81, 0x3, 0x9, 0xffffffffffff0000, 0x800, 0xffffffffffffff97, 0x0, 0x3c8, 0xa7b, 0x1000, 0x6d8, 0x52, 0x101, 0x7, 0xb68, 0x2, 0xffffffffffffffc0, 0x400, 0x3, 0x6, 0x6, 0x63, 0x2, 0x8, 0x80, 0xff, 0x303, 0x3, 0x400, 0x1, 0x4, 0x7aa2914c, 0x4, 0x6, 0x3, 0x6, 0x2, 0x7, 0xe823, 0x5, 0x80, 0x6, 0x5, 0x100, 0x0, 0x80000001, 0x3, 0x8, 0x2, 0x4, 0x38ef, 0x2, 0xb0, 0x2, 0x9, 0x9, 0x90, 0x2ec84e59, 0x0, 0x3f, 0x2, 0x6, 0x100, 0x7, 0x7, 0x3, 0x400, 0x2, 0xfff, 0x2, 0x7fff, 0x5, 0x0, 0x8, 0x10000, 0xc, 0xff, 0x7, 0x8, 0x1, 0xffffffffffff370e, 0x3, 0xffffffff, 0x0, 0x7, 0x6e15, 0x10000, 0x1000, 0xcb, 0x9, 0x1942fcc5, 0x7f, 0xfffffffffffffff9, 0x0, 0x1, 0x100000001, 0x1, 0x9]}}, @TCA_BASIC_POLICE={0x408, 0x4, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x80000001, 0x7, 0x20, 0x4, 0xfff, 0x2, 0x1ff, 0x1, 0x200, 0x3f, 0x7b8, 0xfff, 0xdd, 0x0, 0xa40, 0x4, 0x3, 0x7fff, 0x8, 0x8, 0x10001, 0xeaf, 0x9, 0x3, 0x0, 0x5, 0x7f, 0xffff, 0x9, 0x1, 0x80, 0x3, 0x7, 0x2, 0x7, 0x8, 0x5, 0xe1, 0x9, 0xffff, 0x6, 0xf0, 0x30000000000, 0x7fff, 0x800, 0x2, 0x9, 0x8, 0xab4, 0x5dcefc78, 0x7f, 0x9, 0x1f, 0xfffffffffffffff9, 0x101, 0x101, 0x8, 0x0, 0x1, 0x6, 0xffffffff, 0x1, 0x3f, 0x3, 0x7, 0x9, 0x7, 0x9, 0x1301, 0x2, 0xfffffffffffffffa, 0x4, 0x0, 0x1ff, 0x100, 0x7fff, 0x100, 0x8ff, 0x6, 0xfffffffffffffffd, 0x7, 0x2, 0x530f, 0x8001, 0x4, 0x1, 0x9, 0x0, 0x401, 0x0, 0x4, 0xffff, 0x9, 0x6, 0xffffffffffffff23, 0x6, 0x400, 0x0, 0x0, 0x8, 0x80000001, 0x7f, 0x100000001, 0x8001, 0x432, 0x0, 0x0, 0x200, 0x3, 0x8, 0x7, 0x485, 0x71, 0x1000, 0xffffffffffffff81, 0x2, 0x9, 0x4, 0x3, 0x2, 0x4, 0x0, 0x4, 0x1000, 0x5, 0x7, 0x2, 0x7, 0x3f, 0x7d, 0x80000000, 0xffff, 0x3, 0x8, 0x2ee, 0x3, 0x10001, 0x6, 0x40000, 0xa1, 0x5, 0x1ff, 0x8, 0x2, 0x401, 0x3, 0x9, 0x3, 0x6c2, 0x80, 0x86d, 0xffffffffffff19ce, 0x40, 0x8, 0x7f, 0x6, 0x3, 0x20, 0x3, 0x40, 0x9, 0x9, 0x1, 0x6, 0x8, 0x100, 0xfffffffffffffff7, 0x20, 0xfffffffffffffffd, 0x7fffffff, 0xffff, 0x2, 0xfc60, 0xa7, 0x6, 0x3, 0x45, 0xfb, 0x8, 0x8, 0x0, 0x1, 0x10001, 0x6, 0x1ff, 0x5, 0xff, 0x4, 0x6, 0x8000, 0x2, 0x81, 0x9, 0x8, 0x6, 0x2, 0x81, 0x200, 0x2, 0xffffffff, 0x4, 0xfff, 0x5, 0x8, 0x3, 0xffffffffffffff01, 0x0, 0x6, 0x7fffffff, 0x0, 0xb0, 0x4, 0x1, 0x3, 0x10001, 0x9a, 0x3f, 0x10001, 0x40, 0x6, 0x1, 0xb516, 0x8, 0x9, 0x7, 0x1ff, 0x760, 0x5, 0x80000000, 0xfb, 0x80, 0x100000000, 0xe931, 0x2, 0x2, 0x1, 0x5, 0x541, 0x0, 0x9, 0xb5a8, 0xfffffffffffffffb, 0x8, 0x7, 0x6, 0x9f, 0x2, 0xd4a, 0x400, 0x4, 0x4, 0xdd40d29, 0xf9, 0xffffffff, 0x7]}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_RESULT={0x8, 0x5, 0xa7c6}}, @TCA_BASIC_ACT={0x140, 0x3, @m_tunnel_key={0x13c, 0xd, {{0x10, 0x1, 'tunnel_key\x00'}, {0x4c, 0x2, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x7fc00000000000, 0x0, 0xb5fa, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr="3c50929853c280fd45672d96b2a8ae82"}]}, {0xd8, 0x6, "b7b6b45daa820a450e86aff52b9ef4f392f85779e97fdb4c049b0943571f49269ea72f87e7270f356e3c651aee353176a548fb3b43f4d9453e9ec16baada99ebb09a36f9b258799f7d40bffac9228547e5f3eec90d94b02c501fe55bb6932f9d2ba7a078bb80c9f8bc674f817b7788c63f6e8e577bad0e73618e5f9ec82a7cc5358bb967bc3af72c9d470cef0d256f30116ee7c16e4b2814694a2bcb485bd91cbd0f2f32075dd0dea79fe34b03632f936cee8085de27fae7f144681b7e2b25ef60c7211c61c225418bb9bcaf8846f51f5b88a3"}}}}]}}, @TCA_RATE={0x8, 0x5, {0xfdb1, 0x7fffffff}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x106c, 0x2, [@TCA_CGROUP_ACT={0x1068, 0x1, @m_tunnel_key={0x1064, 0xe, {{0x10, 0x1, 'tunnel_key\x00'}, {0x48, 0x2, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}]}, {0x1004, 0x6, "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"}}}}]}}, @TCA_RATE={0x8, 0x5, {0x1, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4}}]}, 0x1a30}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 06:02:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 5: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000580)='sysfs\x00', 0x10002, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x10001) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0x9, 0x4) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/45, 0x2d) 06:02:29 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x3, 0xbf}) ioctl$int_out(r0, 0x2000810080004509, 0x0) fchmod(r0, 0x2) 06:02:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:30 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0xc, 0x807, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) unshare(0x40000000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x81000001) ioctl$TIOCNOTTY(r1, 0x5422) symlink(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000240)=""/130, &(0x7f0000000300)=0x82) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r3}}, 0x18) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0xc9e, 0xd99f, 0xffff, 0x9, 0x80000000, 0x0, 0x4, 0x80, 0xfc0]) timer_gettime(0x0, &(0x7f0000000380)) io_setup(0x81, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0200000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ef000002000000", 0x38}]) 06:02:30 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 231.919622][T10923] input: syz0 as /devices/virtual/input/input153 06:02:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xe) write(r1, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) 06:02:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:30 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 232.283717][T10947] input: syz0 as /devices/virtual/input/input155 [ 232.318760][T10933] IPVS: ftp: loaded support on port[0] = 21 06:02:30 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:30 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000040)={0x0, 0x5, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000740)={r1, 0x1, 0x6}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000003700)=[{r0, 0x289, 0x300}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @multicast1}], 0x10) 06:02:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 232.933053][T10933] IPVS: ftp: loaded support on port[0] = 21 [ 233.024026][T10999] input: syz0 as /devices/virtual/input/input159 [ 233.064396][T10996] input: syz0 as /devices/virtual/input/input160 06:02:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff4d, 0x0, 0x0, 0x404) shutdown(r0, 0x3fffffffffffffd) [ 233.264967][T11014] input: syz0 as /devices/virtual/input/input161 [ 233.395396][T11026] input: syz0 as /devices/virtual/input/input163 06:02:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$inet6_tcp_int(r0, 0x6, 0xb, &(0x7f0000000040)=0x4800000100000001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x40, 0x0, "5c7d866ff43751f8873fcb0dab400c418118817f88dd32c8a5bd1f96947a61b9c9627f989c7f422dd7658bd36505c1c3e348680b100694e23cb170b6156fe10ef3d50b45685df5fda61c86a7608eaf0a"}, 0xd8) connect$inet6(r2, &(0x7f0000000140), 0x1c) 06:02:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:31 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 233.699568][T11044] input: syz0 as /devices/virtual/input/input164 06:02:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xffffffffffffff61) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x41c840, 0x0) syncfs(r1) [ 233.748135][T11052] input: syz0 as /devices/virtual/input/input166 06:02:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:32 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 233.933511][T11063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:02:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 234.002910][T11066] input: syz0 as /devices/virtual/input/input167 06:02:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x155d733c4b277b7f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000040)=0x10001, 0x4) syz_execute_func(&(0x7f0000000b40)="615f0f9df40c353e3e41260f380474c467cd801b69e46962f5696200d9d955901090100a0000005bf91cc18fe9589b26edfec467f3830c00c4c291ac2ae4dac4c25d074b0007168f4808eebce00000802000c421650fd35cb8b0c4c27d78830400000084f10f878c800000fa6f191906bc0601c2c4e3e95cdf09f265dc7f10c30a45d9ce13258e3c24a12e4409566c00082640c401fe1d8bf4f4df64673667666643c4e2791820314f860f0d0f86450fbbd4f3f30b0f16afaf141123d833d55d0f18f5") [ 234.195034][T11078] input: syz0 as /devices/virtual/input/input168 [ 234.220688][T11079] input: syz0 as /devices/virtual/input/input169 06:02:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff85, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xfd13, &(0x7f0000000000)=""/195}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) readlinkat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/175, 0xaf) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)=0x10001, 0x4) 06:02:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:32 executing program 0: pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_smack_entry(r1, &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)='TIPC\x00', 0x5, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032cbd6c0004c18351ecc399218e9ab83dac3e6070c52bec06367696ec8a8d979e231ab28a7731098c4780f5e358760db99c292f96a341f4c9ead865ab0e4cba"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x24040050) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 06:02:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 234.421915][T11094] input: syz0 as /devices/virtual/input/input170 [ 234.584534][T11111] input: syz0 as /devices/virtual/input/input171 [ 234.591265][T11113] ucma_write: process 272 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 06:02:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 234.638793][T11112] input: syz0 as /devices/virtual/input/input172 06:02:32 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x410000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x10000) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3fc8fa6d855028558b31513eccf42f2be76c06c0092e704dd6f1b29260ecc5f69ed8638c448f5c9fb880fd68345e4ad89375c40f56358d6032a4476140933cee5fee7b48b2bb31ac686ad0c92df84f0500e9f879e64d42e16abbbf38f0fcb3ae7ca3513784b48db77c25d3b82266c5fe7a938790e3e954d6590b41506af3fd88b2fa254d4f9afe4f782d59359b62422291a0804951ad1f9099bf9825ada173452b869d151ed7d33aa6bed091810a0e979073d46f51985a447b9e72f4a35887ebd760bbfaa0c975254a56d5cd4f85d5b960f0f3c659"], 0x4, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2f, &(0x7f00000000c0)=0x7, 0x4) 06:02:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 234.882567][T11125] input: syz0 as /devices/virtual/input/input173 06:02:33 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 234.944761][T11127] input: syz0 as /devices/virtual/input/input174 [ 235.009510][T11134] input: syz0 as /devices/virtual/input/input175 06:02:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:33 executing program 0: syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) close(r1) r4 = msgget(0xffffffffffffffff, 0x200) msgctl$IPC_RMID(r4, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) pread64(r0, &(0x7f0000001140)=""/4096, 0x1000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) [ 235.302977][T11151] input: syz0 as /devices/virtual/input/input176 [ 235.336361][T11149] input: syz0 as /devices/virtual/input/input177 06:02:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 06:02:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 235.472718][T11161] input: syz0 as /devices/virtual/input/input178 06:02:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 235.644384][T11171] input: syz0 as /devices/virtual/input/input179 [ 235.753683][T11180] input: syz0 as /devices/virtual/input/input180 06:02:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 06:02:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:34 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.078449][T11195] input: syz0 as /devices/virtual/input/input182 06:02:34 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40) r4 = dup2(r3, r3) io_submit(r2, 0xa, &(0x7f00000029c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1000, r0, &(0x7f0000000080)="f0ecd4fa8ef4cb6e2bc893881c1e4ebdefc15e5e94aff1537a2a3ae3e175ac109a30148c3e6116dcecc6a06c619c90730cb7b442bbf900bfd0c3eb11cf21d1a83a275ee717988c9b404dd3c260abaf2d4a9344740d0a55a731ddeb6da6b9209b5761d4a54ea0a8e43fb0b62a5dcf96f6ad179243691361252ea4f4187b19e643a9ed476aadf8614f09a64be25498858a0136dcf9506c2b3ae548ea25e3dc1946178c4406e0", 0xa5, 0x5, 0x0, 0x0, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f00000002c0)="6eecaa89d2949a0ea66251a11afefb89dafb0007cae4b35838004c2da1d222bd51cfdada1ebce0b717dc38805b310db11cbe662a52947aabc397d0e90d761296ef301dde36b03c1fcf26924acc68db4b0194338c715b01bc35d814819c160ef65c6364a950539b7ce01aae88aa1a53f66589758efeb721670868c9c23f690f8be67e5572f9fec558af25e38cbbc628bad9836ad9207a2185f6076ef61b9dcfb54ffaeb497c3a0fe1d20d82fff2bdd2267b39b3042456dfbcd9a4a9a69e148e9370612dd518ef125817", 0xc9, 0x3, 0x0, 0x2, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x8e, r0, &(0x7f00000003c0)="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", 0xfe, 0x80, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x5c, r1, &(0x7f0000000500)="177ddac951cbb7f4dc299f84202d54f0dedfe1dc6f1b4f0250c48a784a9ae13dc859df3f28aa14f84ad85c4a4f65030a5fee6748925249f0e5e02f2dc0d3783081278ac57acb310987e6bf5cc5ba090ca5bcdf754b36da32f12c639045ee343f5c198adc2612d66d0581e5d0daaba12a90cb27d40076095985cc7b214e11149798c8f5faba", 0x85, 0x0, 0x0, 0x1, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000000600)="9f05a1e779eebdba93ce5b450a844383cb9e0d582d2794d77f3c3417fa6ef7507f2a2fb6cebccf793fb0c3c8fda7c8de3243148a4195e3d186ede61eb7032dd3d598fc1e523c7b3c5ab91e125bc82ce251e1a7e86d9da3866b7225c97e3efa3cf6e9a54682b85ba598c393679750a96e5d96a3f5745e92f0b832f4815a2908cef13af4a3f640b3c1911abca6d4c70534c5d2dc5aea7ed734394886accc93b15d8219605155d0dc46e4b6aa", 0xab, 0xfff, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000000700)="95a9d9fd2c8ce8bf47e383f322c98265ab68f7cac4790595569afdc9f960", 0x1e, 0x80, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000000780)="1d8120594c0375b6f4e1e65170c7962b4e8a6dd1fdd804b9436f7e0bf0f9bf4c415a393b2880f9d5c176f19006833af364e0cd27d4c24fb20f7a01b665791daa0d696f2bab74a5131ebbe0b1b26513a6957fa00fa4f4fe970b9016e384920ebbd1fb4de02e0ee85e1e09ea707a21a78c9209d96ae1a41403d74aab32be6285797f0e759adcd6f4f0599585b53039481beba9a5636c72b206200babb23cf762e5a6d183e2d219940a09db7b2ace7aba30ba1918ba3d96795e129af6330bc7ce8287b721025e56a49c0e9eedc03420e21731681cef875a9f96df43bb3af5e6c7ff6f8e97eb6ca2dfb0facdfad524686ddde8ec47b9de41c5ecefe42b3fb3af56c07b3f54d0ca66e570043ca978921de72d27535b534a796705fce21526ae895272526160dbd77fbed494ef11a99cbb21934cb76493c1f5fc1a23d38a8928cf7835ad26ceeaf40ad681079dac68f661c51d397f60b4d98b66fd43e6a7b87b5d0418477cf88fcc5f88ccf3509b9b26075dacc929297575068d259335045868cba0d2bb48d795395be3c4c7a04753fb9d95c98e0a4f0b7eae5de2d7784c89e2040ee0180afce1dfa9cd6b24326774de1f49438c8e3f20865984072fd259ba250b71a4d5019cd015e22f3cf27a3247dd792465257c2c80954f0ed79190f817c902121d0cd45e5da248ecb9528618834029ab99dcca7815c3a1dc2837a7998e8682ea863e3a42179625257c979ed874336ce5432a89c181d5e2535608d392e979cdde34fa138af168690e11dff90fa20e6dd135f645832a5e3c2a26cc5fb38baf3112bb9116b0c42880240dcd3206125423d0ec5874694e10074a5820738a0d70ad3de29e5ad9acb74f425ade2a381880118953a2b54ef567d018cc3c715c8b95e6549e07026551f66edb4f9b85c60adca3be05b28970ab58890df33fc856accc1848a232fd36fa7f23c27b9eb72affeff6aaa35fb919a1d6dd40d8fc3b16eb06edda1a3fd96f6e2e6fb7a2101a42d4dccd9704adaf6b7e752ae506879eacf1a963f3a4749b1709578a40686c17452850111efdc6b138cbd0554f0dc5fd38557aa20e516b5fac4b2e57abe503b3d1670841b3a5a056f47fad108437168dd2e33b01ee6cfb4c8c1fd7797e62f4f594c60a5ce40f9c1703114c07ffed559b340488d66d40c38d30f0cc3eed24f3c634d8f31c0ffba8d8d08f05ee6c14f2f872bac1aae44b2cad4533b4f6784e94c9eb1c2b57db6536faad24251f553e3df450e6a1d284dbb40391257426a5adbb4e1bf847b679a1566b962647f289ff22250eefda54d86b2b807464b62e0a1490eb314d0e9135812293b11086e6200562466fa55df40ff1205848e6005faa332897d73df36399a343684fe475bc944bd81472aa9f7d9f534c8545a5d958eeada7cef1a88e3e2c81afc3a695b7b46c17e0b9a0282c5ef23707c39317749dc0743f2d721774c4e69be0aa8033a4b35fdbb75c6df7737ae589a63d270a61dc4d77b148d4b05d606714e927cd226ee6500ff2ed0c5dc91c79f1e4fb75a65a38c152746d1e752e3470490b3ca3f491a86624cb8d54bb5adda34d36ebf067b52b6a03b3cb6ca526a6ee0ed5ed2e1b15084c802226b264e90a8bd678c0eb168d333134384d965e5472087a20372eef629f4c710c6fd9cb2a5a720bb7072fbea66b00563229386213aa4130e094cf856c00862a871bf9a1fb4c74d4dcfb40695fc841ff309a5eefb6e647b2a66e4eb0b7192be7a585236c234802a0a6a8ba4553510b2fd09e1f4f4e5d8251dcbd319d2ee74c2e75fe7bbdc0d6e15f7fe5be26b9792f0ace0ab88f1ed60251f0216469f5b576bdaf561978044fdf26754f19afa25c556ff5fa3149c40a7e933811bb9d3447e3d4155e3a7e135004dbaf003024acae4ebc2737165d6fe81a40a31dc645fba945874facc399183d86dba8b788d14c3d8d69d89df55dfc0d8243a42b6a9d773a62819185afa8a71512e95b620d0594946a4176b6edbcc0ce1a28ed7bd2381e8c2186cf6d511f34c1b3cc085127fa2d4fc340384047cce73a551be4889735ad1380f34ea4e3f90df7f66dde26c8837be44e1bf3733824f8d6b1aace8a206589b4077ff3808000c13bc2fcb53794c3d65cc6e735c17d6a239de9590b3ccf0138dc502e55de8df9a326c9aed25021e7cb38fbdc1aa74b894ff65803f330f5450cda7f91503eaf15832ec822a9390765c89fe89f5487930ddc9ef2228ec4338e6b36a72d8368a5d0c6635dcb197db795f523f48ba30706c8bd40d1b39f5696e8d818c62e76c76043bb611f210336353be3bc1d85b5c1c4385dffd8668629ea2d84ab1845c6469468d7e2962880cc35cc7ac5b114c966360c080f2afc1028847cece5a45c2f8314b7d93ac0fe2363212d70e0de95f4ede28054a50abe08ab46b9a394748fce8cfba2aa8b878b06d4ef4c60171733beba4a0a9ffb06cb5b0d41de8bc8657041a6d7212e84ac2a6abaa0ad99bae93fcc89dfd572c9b5e334e427f66223cdd2560f8ca8c495a8a1603bfb766d393283578d41a0a3e556a943a1d58de8526383f8134846d5c3cb34ff339a540d4edaaf2cae2d66fccbe06f91f8e9be7ef4878e2477f3b655de3e98cb490a87df766577cca3b7f32e49b53a884a1ae57c42516a891ec5c79f9ea051995e7c5062082394392e577f1abdb3104368a02af05a79cddbce3ac8873c254db69fd88d8ada1a0d40f78f58725576ce3a3c696a135e99c67204e54a5c0cead9fc414d302b3aa2cb9445e084a0f37a631ceaa91dd7b6672e42b787fbbddb81b376917d92f631fe4d2dc3eaf8b02cce2cb770726786c398a9b86d63f220b2e5612d6813d573f60adb272f6398f048ac9aa53df2bf3abb40b8ad1da913962695bd345cdf5546256305139edc74e21ab08d29f771a88aed2c80273b864f989a5335cf0b255072376d56f63038411c876d9abf1f99230914cdcd30adaeefa1bec795a625bbbf1b44dbbc4fa2e217543e374ad59b4a436330a5ba565a9c5b19f8f7878aa931e61e781e6b11d4a714bdf7a293818fa3892be29973d3e844dbade2e05d4a4bcd69cad9f9ce546fdb1667795fb412e92e44c331089e75e6c856bcd0218f4cf1d15f8d08e93ccd78cca28a2ec0893093292549f1681893f4889be6c0157e9951268dd9f53c1cf006efe4fb964207dc61bf023d0e77c493c12cc2da46554ff8ec3ced2c37d7620fef7a6b014aaef68ab1e5ffbb1852395e3be73cd2b047d0fec76b639f185134a68f9dfdb9a0e59e697b1582e9bab531920e4086ff6aa6b6611944d2c0a120ea3b7245264b9f65ae4211eab119d7a8affdce5266c6c9b1d85460cc32def25499570f8221b857a1fc79ce1b1de2e81731ccdc4ba7acfde09885d011b87c96b3fc4898fb404070a23a285f371a3981fc177f5a1b7dd7892ca1c61ce3b0d70592c622004e40a68d51715533094c5d51681e45482630f4a5122bfd1d710dba28a9d4412dd9f7a0710aa9d967d74ea1df73725a923f6c412b805ae7ace48b2d6c86a247ea73a25999d058e63a7b16e753c218eb2acf772120e3f8a7b5ee49dc581cb7bc231a9f1850158f8b6257504bc5fe4966f439d678eb24ab37d7e210395de3e77f3fbf87304d1363bba7e4421a064793ec2e8b5bd93a535b30e60d0cb4e707e2f57d06f0b3ce965d27d480ca95584ad9589e6465d93000931756e65da723b3cfdf616742af73645716471f06ee1eab01b7002318484e15d6585823624346ee2ad0a8502dc15d8a0a8ff7799ba5a917db37cfe793da94a671464db0aa51a6d8f347b79b38044523ecc15f40edc5a5d2c273d1f0f0fe6e23f89711f32590390eb7c027607a6f2cf0e7c74860d43e60e3ff2ede88f3ef97f895530b4df5c7c04b844702a7fd63e3bf01e98a350f6ec7e0598a8bc5208539f71ba3b4a346f0e0211787c64136f181d5f6e2d5f9b17ae4f6929d8579d66f39df62815dc2e4593402ccc23397c4053975543f60fd2b01a27677db07dba54745cbadb5e134be375623389adc1286f11b4230bdefe84b1b2bac9ba4213fe137081d8f4a64c1ad026dbb5ac8d20a66b088268b45fc55a275fa5c120bc69e3af3f744621e81aabe1f3f53529155fedcb92ded7e516edb0d1cf8788139102e50976814ec23d3c9393dc693524d7df632324043e98230fec981f956d6c1991e6201b51e784c8e921edf1a3f2ad1f5f2a847a06a9cc6b32ed60ea86bda940bce0c7750c475b8d800dd6af15c2c97291ec96491d221f58b258677c3d7cadf62807f869085861ecd3b0d14008d025ad9cc6cadd6ab4d4ead00019858fe6660adf735dc03acd31353e3b4da24b938bf777c1a487ae2b8c958ac63c4cca75c5f019fd8ef86935c0023ec2a978844bd624faa343f189eb2e830f81b11fa6e0e626a5334a7d513e9e5ab38c5a337e369bebec057314d97a8f1a1b40c7300b6224f01a98251d4345d63280c8eff59e1db51ca4dce87075aff0a03c3c5c567d340801db1d7160c891d645f7a8ff524db6dfe4001e11e2ec53bc0a49e5f92889fecf1b2e3cf6333d45a3f698da6ec34c8363729dccdd5660c34bf6b95813d8b1bf62af50d3af75c76c3f5ea15721dfcd33b83e439906a025a536d3174a68681cd94fb7fbdf95e0a03186fa535762d4fb61f817a9a84c4aa7c46e65eba01b2e7c200d34acacbdbd1ce425e42d2913ba610bf8ec0276762cceb731b74272214be23e816486a6cb1410f36c4164d73240f51ee5f06ff03bbae877de736335bf278e2cf492870306e373342678c77e8fc3212f6d5a4a044b57ccbf5bfde5db3aa9aca81ee3895309011af1906b3860d4175cc7855e6c5afbbc72873be60530e3175d0bde32c70951453b50fe13ec2fb1ce89f6e1c93a3a2f2583d460c4daa95bba2c07f8e3e2139ea3bbd109f8151a0cc4ee368befb18935889bf1a57940b02a04946d4fcd563d0c419c92bb56a29b4c190ddad4c29d2c668e4dbc731d1f8326b957e0d4cb235d1f87eee7d27366bb26c1ad41a12f2b1ef39a1f386486e6fb670842578b99fdd9c3ae322c8d4787c9a1bf11194f6c6f3116b456e95f58d19e13aa681a4cb5dcd9fb72642a34c1c51921370ebbb113412cefd846204c1e99dc437fcda3051df8585934134a64a2343485b7f7a3ca815951e06198482ef688d0f40fa9973a3cdda7d48624fdf48a39338d763d289f86b52deaa73ca7871b2174bdae8d22b7af5bfb5354f232997ab8beb977533330d8e61b0adb2059d40d959d3f58bf702d870c74a77064223f245124dcd9f0b7e3e4f95538682e4afb2548dc5a18270326a677e6a678ce7224264230b5c8225989f4aa4ead71f18d32f792fef1c94d15dcafd01e8d3f1023f26ab61ee5746027d4d4e9353ffbebaae22c595fe3a0c06c6cdf5c214230efc32f0d6145ceb39ba5da2966db2034717e2346af9b92537e83c8a0301eb6ee10963800aff36de0de2058904ee38a1127aafd5c1c3d714e005e63ace2d70d9019cd2aaf660cb14ee1b5cabeb644a3010871a040524f62f1e804e8672e170efd55be3c4c2fac9b651ba2733cb353c4933d56b536fc5a7f7fb4be8d263d8031fb9a98e8fbf253b5b2bd7313279f87b64bdcc0b60ca067d6379457d5b7dbecfe7e0f56d29b8c156060881cda679b57cc743fb02024ff8bce89720fab6d47f2665359bea623962ce3a6dfbc519301639319000a682967354812d3f08c40fdfb83e8c2ff911f1744cd7bb03eef06d9ff44111370e8dd1411d9017c691bb6f877d8ebdcf5a", 0x1000, 0x7, 0x0, 0x2, r3}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f00000017c0)="32cbcc72cd4c5d1ebb4a02e434665cca69cf49a93a35793c6acb5c1a2fb7bed5e7b68f8fa1e641732ff1e8fb17d8ecbe6712cc88e54019acd0503a67d5fb88889e2e52d95c93819f3fe841b376147a844cb65d6b5071dea3347037f58585016bec628cd72288", 0x66, 0x7, 0x0, 0x1, r3}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000001880)="1362fddeb5ee93f09bc5e86c62e5d5b7c70251a07b259a80f7fdde162243a59588d020ba21196508b2299a2fae0c9c7a843cb70c9976bad8e54b8955ba98520d820acab4604c9725c08c6b432970d36bc56ad7cfbddc5eb7b817fa843429549f1f0ebc9b9505e150c30dff736c82aebd3907e4bc50df2b4050efa786046ab8e9073537cac9ac02d7f03d52e49fa2467c4c3b501b60af3167459d5ad189d0e5966794b1", 0xa3, 0x4, 0x0, 0x0, r3}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x6, 0x6, r3, &(0x7f0000001980)="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", 0x1000, 0x5, 0x0, 0x2, r4}]) 06:02:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.243874][T11211] input: syz0 as /devices/virtual/input/input184 06:02:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:34 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) read$FUSE(r0, &(0x7f0000001600), 0x1000) close(r0) [ 236.399958][T11222] input: syz0 as /devices/virtual/input/input185 06:02:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:34 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000001380)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000013c0)=0x4, 0x4) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) fcntl$setflags(r2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000012c0)=0x1) splice(r5, 0x0, r3, 0x0, 0x420000a77, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) accept4$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000001240)=0x10, 0x80000) close(r4) r7 = msgget(0xffffffffffffffff, 0x200) msgctl$IPC_RMID(r7, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/196, 0xc4}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0245720, &(0x7f0000001340)={0x1, {r8, r9+10000000}, 0x20, 0x9}) 06:02:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:34 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x24c4, 0x101800) ioctl$TIOCNOTTY(r3, 0x5422) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f00000001c0)=""/236, &(0x7f0000000080)=0xec) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) ioctl$NBD_DISCONNECT(r4, 0xab08) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4a) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x5, 0x4c0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x100, 0x2a07, 0x1, 0x6, 0x5, 0x8, 0x3, 0x6e3c, 0x1, 0x8, 0x0, 0x10001}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000000c0)={0x9, "2373b3e79d3bccc83533ba01c374a860c613c6bd30eb11380a30cbb446e6e097", 0x2, 0x1}) 06:02:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 236.641805][T11233] input: syz0 as /devices/virtual/input/input187 06:02:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101280, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000001380)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000013c0)=0x4, 0x4) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001280)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) fcntl$setflags(r2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000012c0)=0x1) splice(r5, 0x0, r3, 0x0, 0x420000a77, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) accept4$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000001240)=0x10, 0x80000) close(r4) r7 = msgget(0xffffffffffffffff, 0x200) msgctl$IPC_RMID(r7, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/196, 0xc4}], 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) close(r5) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0245720, &(0x7f0000001340)={0x1, {r8, r9+10000000}, 0x20, 0x9}) [ 237.084045][T11259] input: syz0 as /devices/virtual/input/input189 06:02:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x24c4, 0x101800) ioctl$TIOCNOTTY(r3, 0x5422) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f00000001c0)=""/236, &(0x7f0000000080)=0xec) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) ioctl$NBD_DISCONNECT(r4, 0xab08) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4a) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x5, 0x4c0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x100, 0x2a07, 0x1, 0x6, 0x5, 0x8, 0x3, 0x6e3c, 0x1, 0x8, 0x0, 0x10001}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000000c0)={0x9, "2373b3e79d3bccc83533ba01c374a860c613c6bd30eb11380a30cbb446e6e097", 0x2, 0x1}) 06:02:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:35 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 237.539803][T11289] input: syz0 as /devices/virtual/input/input194 06:02:35 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffb}}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x05\x06\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12000, 0x3, &(0x7f0000fee000/0x12000)=nil) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x101, 'queue0\x00'}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '@vmnet1mime_typebdev('}, {0x20, 'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00'}], 0xa, "12f6a93d2da95c9fb5578162139967af51d2eef20b65cc4ad4954ae4f5b8de42b0047a151156d4e1ba9fff61878ee45eb3b055d4e130f88f4e0342b58c2ee080b21e3cbac744dda0690b"}, 0x7b) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x1, 0x2}}, 0x14) 06:02:35 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x100) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xf5, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/245}, &(0x7f0000000240)=0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x2b, 0x0, &(0x7f0000000440)) [ 237.707985][T11297] input: syz0 as /devices/virtual/input/input195 [ 237.723353][T11299] input: syz0 as /devices/virtual/input/input196 [ 237.828456][T11303] bond0: Releasing backup interface bond_slave_1 06:02:36 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x8000, 0x800c}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x40800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x400, 0x649, 0x1, 0x8, 0x2, [{0x7, 0x4, 0x3, 0x0, 0x0, 0x48a}, {0x3, 0x4405, 0x5, 0x0, 0x0, 0x2000}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xf1, "3bbfdd3552cf638f344b333eb7e13ecc7a2a90836737f37896f2677a07d22c22bbe1d5c18d2072828535c20ad09ec4585c0ae3f2c326b34d1a1124fbe3ce6fe639303e9d609edc3629e372ab73dcee26b0cb95359c13031a15a6086cba2e56df13907644ffb9666c2ca0c349617dabedd28226755385a8499cedede9f3c958a1b3fc109f11f9fbb43262862ca52a0f9077ff999cb23407c9497afdda8ba3577c35efffb19d7457d9a27bde868e6589db72ca71746e3586e6ca8c94047af7a9a5ccd793fec2adedd771decd0b696d0eeb249a51247d639c1b32eca6645097510014785988ba21a2653a494e4a610ade0bcc"}, &(0x7f00000002c0)=0xf9) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x1f, 0x1, 0x5, 0x8, r2}, 0x10) 06:02:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 238.139045][T11320] input: syz0 as /devices/virtual/input/input197 06:02:36 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:36 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0xffffffffffffffc9) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x94, 0x0, 0x702, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2738dcb3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48001}, 0x40004) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000600), 0x4) [ 238.276221][T11334] input: syz0 as /devices/virtual/input/input199 06:02:36 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 238.504916][T11340] input: syz0 as /devices/virtual/input/input200 06:02:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 238.650860][ T26] audit: type=1804 audit(1558764156.804:34): pid=11348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/81/file0/bus" dev="ramfs" ino=38128 res=1 [ 238.793645][T11363] input: syz0 as /devices/virtual/input/input202 [ 238.974403][T11308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.035064][T11313] bond0: Releasing backup interface bond_slave_1 [ 239.155918][ T26] audit: type=1804 audit(1558764157.324:35): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/81/file0/file0/bus" dev="ramfs" ino=38162 res=1 06:02:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 239.215436][T11351] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:02:37 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0xffffffffffffffc9) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x94, 0x0, 0x702, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2738dcb3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48001}, 0x40004) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000600), 0x4) 06:02:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:37 executing program 4 (fault-call:6 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4003) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffb}}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x05\x06\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12000, 0x3, &(0x7f0000fee000/0x12000)=nil) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x101, 'queue0\x00'}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '@vmnet1mime_typebdev('}, {0x20, 'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00'}], 0xa, "12f6a93d2da95c9fb5578162139967af51d2eef20b65cc4ad4954ae4f5b8de42b0047a151156d4e1ba9fff61878ee45eb3b055d4e130f88f4e0342b58c2ee080b21e3cbac744dda0690b"}, 0x7b) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x1, 0x2}}, 0x14) 06:02:37 executing program 1: pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 239.328514][T11376] input: syz0 as /devices/virtual/input/input204 [ 239.358908][T11378] input: syz0 as /devices/virtual/input/input203 [ 239.382806][T11376] FAULT_INJECTION: forcing a failure. [ 239.382806][T11376] name failslab, interval 1, probability 0, space 0, times 1 [ 239.449431][ T26] audit: type=1804 audit(1558764157.614:36): pid=11377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/82/file0/bus" dev="ramfs" ino=37344 res=1 [ 239.465037][T11376] CPU: 1 PID: 11376 Comm: syz-executor.4 Not tainted 5.2.0-rc1+ #7 [ 239.479191][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.489278][T11376] Call Trace: [ 239.489310][T11376] dump_stack+0x172/0x1f0 [ 239.489329][T11376] should_fail.cold+0xa/0x15 [ 239.489348][T11376] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 239.489368][T11376] ? ___might_sleep+0x163/0x280 [ 239.489387][T11376] __should_failslab+0x121/0x190 [ 239.489412][T11376] should_failslab+0x9/0x14 [ 239.489422][T11376] __kmalloc+0x2d9/0x740 [ 239.489437][T11376] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 239.531973][T11376] ? rcu_read_lock_sched_held+0x110/0x130 [ 239.537723][T11376] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 239.543484][T11376] tomoyo_realpath_from_path+0xcd/0x7a0 [ 239.549062][T11376] ? tomoyo_path_number_perm+0x193/0x520 [ 239.554737][T11376] tomoyo_path_number_perm+0x1dd/0x520 [ 239.560231][T11376] ? tomoyo_path_number_perm+0x193/0x520 [ 239.565896][T11376] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 239.571729][T11376] ? __f_unlock_pos+0x19/0x20 [ 239.576452][T11376] ? __fget+0x35a/0x550 [ 239.580645][T11376] ? __fget+0x381/0x550 [ 239.584834][T11376] ? ksys_dup3+0x3e0/0x3e0 [ 239.584849][T11376] ? fput_many+0x12c/0x1a0 [ 239.584871][T11376] tomoyo_file_ioctl+0x23/0x30 [ 239.584892][T11376] security_file_ioctl+0x77/0xc0 [ 239.584912][T11376] __ia32_compat_sys_ioctl+0xcc/0x620 [ 239.584937][T11376] do_fast_syscall_32+0x27b/0xd7d [ 239.604501][T11376] entry_SYSENTER_compat+0x70/0x7f [ 239.604515][T11376] RIP: 0023:0xf7efe849 [ 239.604532][T11376] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 06:02:37 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 239.604540][T11376] RSP: 002b:00000000f5cfa0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 239.620083][T11376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 239.620092][T11376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.620099][T11376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.620106][T11376] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 239.620112][T11376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.634476][T11373] bond0: Releasing backup interface bond_slave_1 [ 239.721089][T11376] ERROR: Out of memory at tomoyo_realpath_from_path. 06:02:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:38 executing program 4 (fault-call:6 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 240.056721][T11398] input: syz0 as /devices/virtual/input/input206 06:02:38 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0xffffffffffffffc9) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x94, 0x0, 0x702, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2738dcb3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48001}, 0x40004) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000600), 0x4) 06:02:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 240.451875][T11421] input: syz0 as /devices/virtual/input/input209 [ 240.655432][T11431] input: syz0 as /devices/virtual/input/input210 [ 240.722097][T11385] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.750070][ T26] audit: type=1804 audit(1558764158.914:37): pid=11434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/83/file0/bus" dev="ramfs" ino=38283 res=1 06:02:38 executing program 0: unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, 0x0) setns(r1, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x6) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 06:02:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:38 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 240.856628][T11442] input: syz0 as /devices/virtual/input/input212 06:02:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x2) 06:02:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:39 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 241.131046][T11458] input: syz0 as /devices/virtual/input/input213 [ 241.157350][T11460] input: syz0 as /devices/virtual/input/input214 06:02:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2000, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00006558000186dd06100003aaaaaaaaaaaafe80000000f6ffffffffffffff0000bbbf18f0f647c700000000000000000000000000000001"], 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x311}, 0x4}}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x18200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) [ 241.276925][T11466] input: syz0 as /devices/virtual/input/input215 06:02:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0xffffffffffffffc9) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x94, 0x0, 0x702, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2738dcb3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48001}, 0x40004) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000600), 0x4) 06:02:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x10) 06:02:39 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:39 executing program 0: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000327bd700496ff5fb701000060dd4db541c00000010000000000e079069a0dc1da039d9c2a327f357611cce53dd49d07c6f12387ea80da5be79243acb073e945274e828fd039c7e3f7cb62a59a1b3285448f8a13d76f1102cd0100e4ecc4ae2a15b10cd5905beb00000000000000000000f3588ecc9628b0bf7937e767186381"], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) unshare(0x600) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) uname(&(0x7f0000000300)=""/66) symlink(0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x2, 0x1, 0x86}) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) getpid() [ 241.836144][T11494] input: syz0 as /devices/virtual/input/input217 [ 241.845190][T11495] input: syz0 as /devices/virtual/input/input218 [ 241.917171][T11497] input: syz0 as /devices/virtual/input/input219 06:02:40 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, 0x0) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 242.045026][ T26] audit: type=1804 audit(1558764160.214:38): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/84/file0/bus" dev="ramfs" ino=38368 res=1 [ 242.084524][T11494] input: syz0 as /devices/virtual/input/input220 06:02:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:40 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x127d) [ 242.340709][T11521] input: syz0 as /devices/virtual/input/input221 [ 242.433767][T11523] input: syz0 as /devices/virtual/input/input222 [ 242.546312][T11531] input: syz0 as /devices/virtual/input/input223 06:02:40 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, 0x0) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 242.773900][T11534] input: syz0 as /devices/virtual/input/input224 [ 242.838616][T11543] input: syz0 as /devices/virtual/input/input225 06:02:41 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7fff, 0x20000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0x0, 0x0, [], @string=0x0}}) 06:02:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:41 executing program 0: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000327bd700496ff5fb701000060dd4db541c00000010000000000e079069a0dc1da039d9c2a327f357611cce53dd49d07c6f12387ea80da5be79243acb073e945274e828fd039c7e3f7cb62a59a1b3285448f8a13d76f1102cd0100e4ecc4ae2a15b10cd5905beb00000000000000000000f3588ecc9628b0bf7937e767186381"], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) unshare(0x600) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) uname(&(0x7f0000000300)=""/66) symlink(0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0x2, 0x1, 0x86}) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) getpid() 06:02:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x2276) 06:02:41 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, 0x0) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 243.251068][T11555] input: syz0 as /devices/virtual/input/input226 [ 243.263065][T11557] input: syz0 as /devices/virtual/input/input227 [ 243.280171][T11561] input: syz0 as /devices/virtual/input/input228 06:02:41 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 243.413517][T11557] input: syz0 as /devices/virtual/input/input229 06:02:41 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000280)='./control\x00', 0x0, 0x0) 06:02:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x2285) 06:02:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:41 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 243.774157][T11588] input: syz0 as /devices/virtual/input/input230 [ 243.790490][T11593] input: syz0 as /devices/virtual/input/input231 [ 243.808586][T11592] input: syz0 as /devices/virtual/input/input232 06:02:42 executing program 2: r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x181080) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000040)=""/24) [ 243.996639][T11588] input: syz0 as /devices/virtual/input/input233 06:02:42 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)) socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000380)={0x1, @vbi}) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000180)="8831db1e743c7a537733bc1b5e340c1177d20ef5c85e5658c950cbd29065ecd998e5a6588c7ae79d1c3644d8499774d7ea15384a6a62129e2c22df37b21d106dc2d5631cfb5de279840e6c92843811ed54e8682ffae489f32103915c6f9a22be544279ca58373b89e8f2831dd31769d323858524bc735ec5b07b26702ee32e415394e5e4a30db6a02b8a9d72be0c7336216aa4d3ba02239d55178ede696622cf3bcd39f7ff082ce763fa", 0xaa}, {&(0x7f0000000240)="ade015b9c3c77b6439a71f35179091ff62e438a81c13c5da9395478d2b7d581983e602848497221deaf39979c0443c14841e449b7c92a4c6aa193e1fdc87e90ce3a0c396cea5f9b25a2fde4b9586d74ec4f08dea0796ede27aa5c201940177f90b79d10a510dbde730557fc62da89c15ed50a91e3efe15e230617046b4abd6ae1bdbc56b23d913161687d0e4c549ee3dd7866e5bb936005cbba4fa1786747f1acbbc2c09a9bb2da9885e02c66a080e78bcdd26f08735cba2da59693ea4a01e93d1593aae4a8940b6263d35", 0xcb}, {&(0x7f0000000340)="41f13aec8af104a5596157071c9801b8bcf2a396d94c3e65a92bb5e5e5f9", 0x1e}, {&(0x7f0000000480)="03d4f40306e82e00c331554f53d4c08fa787308c1a0b725734068ed4d81dedd540974408c6783cfe63cc510aa1401bdfa7f3a295063b837960ab92d0d50b74f508dba7c41537cebbecce12dd7d8896e9e1b474335ba5ef4fbdb763d68e274b9514ca1b017678cb2f4effa0556377c79fe6f02229abf703e7d3268cbb2d03d8a4a35c8f9ce29e8b", 0x87}, {&(0x7f0000000540)="5441e2d3489d6b564618ae9525287c0213832febe3ef0d66a7b861f0478f36a87bc371a9ef94c1519d9603be8bddda4d65f4487d8ec4b9d975455ee5c8306a23dbd5368286664384cd55f9fe7dfd29f83223b90a7630837fabf21f54a316ba9dc35a6b22d067d96611d7a0294e0fbc73f6333f78396bda021059afaf5b60070d2f6af365a525c014c249ec6e1728e54c257752e4303029c94584cf93d5ca8f6f8f76c65c3bc1eda96a688e4b9df971c1910286c7b14ac3d634f62aeb202787174bbe5b737d33017b12c82fb90a88be", 0xcf}, {&(0x7f0000000640)="f40b67ff500384af00949def58e99fc7d00bd91643f5e0d5c43df33068f61fd66cf409c602ca28cb46bfbcdd7a686e1ae7aa5cf2288a5e132179c0a884f068cd02260f5c228a9ae1954139ebd296403260b7d4efd2ad293d8607eaf9e96686c659f8803d59b2df", 0x67}, {&(0x7f00000006c0)="ac6e577f10668849f488cf32ab80966ca3af61c0a3a102de1f9b54942eec94f7135f2e8a6879d865e0254c5f441615f968b92d426ea81fb5100d3e60d46d91d62aaacb616e0eb9b3f75336972f1a036bdc04e86510f5d5fc741ee29e3bb2d02139ba033fb6641bf202c4018304f4ce59d48cf1cca56d6ee49d2dfcda345c6c33a4ff5178de2a043f84a3ee59b080358f954bdd6cfd45d1fcfb", 0x99}, {&(0x7f0000000780)="7f18b15dbaceba135fbf3bb59a0f87808f9ebb72ecd1f5e6be77e5bee119ad88fea64e013b56fcb901c01688d3b1baa5602f07c9381c880d3944255ca064cecf4f734bef34ad7796cde6569810f11197bdf5868491f7a2366ccf5aab4de9b9edaea0b6523639f98abbe93e2098672e7cdb8b7fa1807f95e43b3e6961ed97e45fcf8d1e2105a07fb50186744b7c8af19aacdd81b9209061420e9864bc54ed8bf417a6075d889f61a805e0510f4ad25fdcf6d72c1cb304f83055b68b4878b02cacdc8dffcc9b4728c43b46785b63b7a3aff434b14d1f63b335626f6e91238643ad752448716f8e29b426118f3e4c76930eb2d486bb4361", 0xf6}], 0x8) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x8000) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x2, 0x2}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="1e0cfb50e54312166b0144a22c6284231093398b3fe823ec620c1bf5cf4158c70576e629671fe222bfa42e4336b78cdc9b8523b52292643c", 0x38}], 0x1, 0x0, 0x0, 0x5}, 0x10) 06:02:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4b4e) 06:02:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) r2 = dup3(r0, 0xffffffffffffff9c, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x0, 0x1, @ib={0x1b, 0xffffffffffffffff, 0x7, {"b60a80f1c4b4faa3c8e9587c91a07d33"}, 0x400, 0xfff, 0x2}}}, 0xa0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2100) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x60000, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r5) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/81, 0x51}, 0x40002102) mlock(&(0x7f0000b97000/0x4000)=nil, 0x4000) [ 244.425117][T11621] input: syz0 as /devices/virtual/input/input234 [ 244.432443][T11624] input: syz0 as /devices/virtual/input/input235 06:02:42 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:42 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 244.573870][T11632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.604097][T11638] input: syz0 as /devices/virtual/input/input237 06:02:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x216400, 0x80) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @multicast2}, &(0x7f0000000180)=0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="dda9829e2f186028dd47e79b32574821"}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x484}, 0x1) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg(r4, &(0x7f0000000680)={&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="7b43aab0650fc2e05665d19b91e1f6d419b6ca0c95d9026902aced1f96045bd17c108cc08389ded044a6a5a730e846ddc0d3b7061d2d48e7f1cc69714e7ca9f6745dbf96eb4b25f6b8c0c60d6ac1f0376fd11ab073cf2d31199d91b32497985ff94adce82333051c", 0x68}, {&(0x7f0000000440)="8ccc1fe28434022f77f569d09fbae3fcbc4d6f18dd40117419007e5830d976b0b1f8a14092864feb835807092248247f892a22e671b6bee13a8c42205eced99dbd75ba35d28203c6afb247299471ce1a9d2365154955e8efe32a4ffcc0d2ad7f70397c2060c9e436f25720efbf470140ed17b4a8b3644b95", 0x78}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)="ee3f24ede230c6940339f61ba46b2b5f89d4e4350dfe5f32403875cf3acdd9e63f7db1046b054da351d8f8979adcbc3f195674b3355081a3b4f7e9cc62b17feb693968d7f796627d923096bb465cbbff635b88037bd513fe08230b50d733f30bf911536e7c1503ee3912fc58471ebb6fc365e040b5bf215741bf4a059f75ab7e12ba3ee936e4f7905263e4d85a61acf7e45036deb00fe3abb7cb8cdde9574197ec660f583674f0d6479783adba9a6cb1993b1fe0", 0xb4}], 0x4}, 0x80) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 06:02:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4c01) 06:02:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) r2 = dup3(r0, 0xffffffffffffff9c, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x0, 0x1, @ib={0x1b, 0xffffffffffffffff, 0x7, {"b60a80f1c4b4faa3c8e9587c91a07d33"}, 0x400, 0xfff, 0x2}}}, 0xa0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2100) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x60000, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r5) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/81, 0x51}, 0x40002102) mlock(&(0x7f0000b97000/0x4000)=nil, 0x4000) 06:02:43 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:43 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400) connect$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x5, 0xbb08, 0x800, 0x200, 0x7, 0x9}, 0x3}, 0xa) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x100000001}, 0x8) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x3f, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x100f4}], 0x1}, 0x0) [ 244.987714][T11665] input: syz0 as /devices/virtual/input/input239 [ 245.067324][T11668] input: syz0 as /devices/virtual/input/input240 06:02:43 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 245.193934][T11672] input: syz0 as /devices/virtual/input/input242 06:02:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:43 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/pre\xc3\xa4') perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x74000000) 06:02:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.384950][T11690] input: syz0 as /devices/virtual/input/input243 06:02:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000a98000/0x3000)=nil, 0x3000, 0x3, 0x80011, r0, 0x0) mprotect(&(0x7f0000a97000/0x4000)=nil, 0x4000, 0x1fffffd) 06:02:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5001) 06:02:43 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:43 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x12, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x5b8, 0x10c, 0x460, 0x10c, 0x350, 0x718, 0x718, 0x718, 0x718, 0x718, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'vcan0\x00', 'ip_vti0\x00'}, 0x0, 0xc8, 0x10c}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={[], [], @remote}}}}, {{@uncond, 0x0, 0xc8, 0x10c}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@initdev, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xc8, 0xec}, @HL={0x24, 'HL\x00'}}, {{@ipv6={@mcast1, @empty, [], [], 'ip6_vti0\x00', 'sit0\x00'}, 0x0, 0xc8, 0x104}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}, {{@uncond, 0x0, 0xc8, 0x10c}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@mcast1}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x63c) 06:02:43 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 245.605595][T11705] input: syz0 as /devices/virtual/input/input244 06:02:43 executing program 0: r0 = socket$packet(0x11, 0xfffffffffffffffd, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x0, 0x7}]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') [ 245.714700][T11712] input: syz0 as /devices/virtual/input/input245 06:02:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:44 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 245.873592][T11712] input: syz0 as /devices/virtual/input/input246 06:02:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x541b) [ 246.106696][T11730] input: syz0 as /devices/virtual/input/input247 [ 246.116938][T11737] input: syz0 as /devices/virtual/input/input248 06:02:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:44 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47b") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 246.253209][T11749] input: syz0 as /devices/virtual/input/input249 06:02:44 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:44 executing program 2: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0xfffffffffffffd11, 0x3, 0x0, {0x1000000000}}, 0x71) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/70}, {&(0x7f00000002c0)=""/173}, {&(0x7f0000001640)=""/4096}, {&(0x7f0000000380)=""/104}, {&(0x7f0000002640)=""/4096}, {&(0x7f0000000400)=""/171}, {&(0x7f0000004640)=""/4096}], 0x1dd) [ 246.443641][T11756] input: syz0 as /devices/virtual/input/input250 [ 246.493427][T11749] input: syz0 as /devices/virtual/input/input251 06:02:44 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf0") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 246.589534][T11767] input: syz0 as /devices/virtual/input/input252 [ 246.610776][T11771] input: syz0 as /devices/virtual/input/input253 06:02:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5421) 06:02:45 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x1, 0x400) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000001500)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000001540)=r1) socket$inet(0x10, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x2, 0x0) getgid() r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000002c0)=""/255) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20211, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00826b"], 0x0, 0x0, 0x0}) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x700000000000000, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000480)="f2"}) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x2, 0x0, 0x4, 0x4, 0x1000}, 0x20) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x1000, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 06:02:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:45 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf0") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 246.923891][T11787] input: syz0 as /devices/virtual/input/input254 06:02:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 247.037683][T11789] Unknown ioctl -2130675966 [ 247.120890][T11796] input: syz0 as /devices/virtual/input/input255 [ 247.150054][T11789] binder: 11788:11789 unknown command 7045632 06:02:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5450) [ 247.178107][T11801] input: syz0 as /devices/virtual/input/input257 [ 247.218884][T11789] binder: 11788:11789 ioctl c0306201 200001c0 returned -22 06:02:45 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf0") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 247.278202][T11808] binder: 11788:11808 unknown command -449105306 [ 247.311239][T11797] Unknown ioctl 21596 [ 247.315927][T11808] binder: 11788:11808 ioctl c0306201 20000400 returned -22 [ 247.352525][T11811] input: syz0 as /devices/virtual/input/input258 06:02:45 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf0") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 247.473952][T11797] Unknown ioctl -2130675966 [ 247.519347][T11797] binder: 11788:11797 unknown command 7045632 [ 247.543877][T11814] input: syz0 as /devices/virtual/input/input259 [ 247.574136][T11789] Unknown ioctl 21596 06:02:45 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x0, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 247.641373][T11797] binder: 11788:11797 ioctl c0306201 200001c0 returned -22 [ 247.668288][T11831] input: syz0 as /devices/virtual/input/input261 06:02:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5452) [ 247.912740][T11845] input: syz0 as /devices/virtual/input/input262 06:02:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth1_to_hsr\x00') 06:02:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:46 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x0, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 248.138331][T11845] input: syz0 as /devices/virtual/input/input264 06:02:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1f, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u32=0x0}}) [ 248.223852][T11862] input: syz0 as /devices/virtual/input/input266 06:02:46 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x9}}, 0x100000001, 0x78, 0x5350, 0x7e7e, 0x24}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={r2, 0x2f, "7eb4e0059d4d8bce2307385d29e4aecf01fccb6785f43fb7de690470d8b4a12f76d5e788f31e49ad2413124238fa47"}, &(0x7f0000000180)=0x37) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x28, 0x22, 0x0, 0x0) 06:02:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5460) 06:02:46 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x0, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd4) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r9 = dup3(r1, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x17}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0201000210000000000006f6fffffc000000000000800000000000e000000100000000000094f40337ff6b4ed6cd69675e973e00003500bb7a7a2d00000000000000ff0000000058d52a000000bb00000000eeff48f89f48a0d44b9e8238ce8005ffff03000500000000e90200423b00000000000000400000000000000000000000002000d40470c90b2bc791a93d1260cfcb71b779839a8713564f074461669c16c64aedc3c25152e01a8ce5141e33580d608bf181e9f9d2e98e88e508f32571efa7ae4630fc30eca5a3769370b5f39e26fec23cee7a88cbab031bc46152"], 0xdf}}, 0x0) 06:02:46 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffff9c, 0x0, 0x1c, &(0x7f0000000140)='*trustedmime_type)\xcf-\xb7wlan1$\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000640)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001800)={0x0, 0x0}) lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() getresuid(&(0x7f0000001f80)=0x0, &(0x7f0000001fc0), &(0x7f0000002000)) lstat(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002400)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="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", 0xfb}, {&(0x7f0000000300)="5330e5f1f28da2e869cba8316cc98c2f1ac08a84e065bc6e53138c3299de6e42e4377eae0e98fd5385e4b41219f14214ddd1e515c358e3dd19c968df18679f3603134b3b851357cfdbda3ddba8fcfca49a57b0058e105cbfa49979651505fa9840c038a19f13b52daa7cffb2be8566155d315c17c592e90c861bf0e38d547612b8460a335853fccac070169748", 0x8d}, {&(0x7f0000000440)="e3d0ff3d077080c48e0b6f9abb5eda2584f7c1d079230bd55b2e38523a38e6c98d919dc8894865b41f32f90191c7e11d10aa64351f03f7c79291617b3b39b65a792e87e57b0578a40decfe96c285e557daa9bde81ca6dee703eba938078f04aafd06f6bf98e16d8059c95e525e75e3f92b680363531181c669b3e064aa08687a8193e7c35af6fd7a9d0afb1f0753527f4d636daf97f3a8f4689be05162d6cc0bfa4ee577f8b7c676030352ae730f7df2806ad4b768707ce289be85780ff1c02b520bad5d4ccdffef42bd5e25fa94713d9fc5dcd0baef3fb7fcbdff", 0xdb}], 0x3, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r1, r2, r3}}}], 0x18, 0x24008800}, {&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f00000019c0)=[@cred={{0x18, 0x1, 0x2, {r4, r5, r6}}}], 0x18, 0x20004800}, {&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001a80)="afcc982f54b28b6bf615b83e568506f2144029f5c439444511558a68e6405d03b170c771331a01356b641e3fe392c6bdd041ad4ee058970e6fe2886a4fbd61d93782c0dbffb72809c063ef9faa3e24248bfcac21e5e2ac2ae0ea561dba98a922977b300e4d8829c99913e88ffcb6549506f2a0fdbe777bfacfda59ca13b5ec421028d0040bdad09f8a963fda1b1c", 0x8e}, {&(0x7f0000001b40)="48026173caab57436ad5eb50dd8dfcb895241efabd20c09526205c33f41a91f836d1c81dac1012618c425dab72964097be0a13383f7d20dc6109d9e4ba12c5b5666939a063d2014318ca691fcfe8804d5f0f5c6af0745ad2b97f0a855657ab32fe16790c1156c0049bbfdaa9aaa71793807a3ffe7d", 0x75}, {&(0x7f0000001bc0)="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", 0xfe}, {&(0x7f0000001cc0)="f7d77e79aa7fe8556e0415943a3bc82a848f9217c05761d3d4a0b74c3cd4d317a9ae2e743e5d3d770f1fa64ec6fb2c10d9a3bc64f4f921a9bcba75d7e8991911c1d2d37b12aa61371656a9affd1eb8e32d", 0x51}, {&(0x7f0000001d40)="cf17cc07ed271ec460c11c49a5b93ab424a4a5f04d9c841369e32b0f9b646ca3edc123425c531f32311d4e1cc3e9912815f711d1b6af023492406a45086b5f51a409e3b5aef647a84b0b541b31f8135531792b9a59d54a", 0x57}, {&(0x7f0000001dc0)="0d8dd8129c7de1215d2a2b4a4adee1315aa172dba462ff9b74c7853a29ca229d116cedbb2637086e142beafdfc144ad738e181f8d4fbcf8c68681e31c9841250ac408562904a2b130032a1c6ccd53dfa68888cdc939dd66e2f331a473fc92a1d739faea24a14ba", 0x67}, {&(0x7f0000001e40)="69a64393b4169cd203684aa5dc76bdca0c75048a4e7fec9d81c97d17f48bbd4cd47a0f1aa999b5ab1b5ff9131027f83822c8cccb97ed35d8eb6b7c7b92a62adb7614d3ec3cfc27f85475bc3963249828b4a1e82222ec68ba64adf61f2eccabcdc789f012a8e49dccaf02ec14ba4f561f73cfb576aa8a55697ad073916a05dff12339ed76ee80cf6972f5acc75213c7b622e7ea12afdc72b7d0df2aa4baf8d103e629f81b37969b8bb91efcac2f5c0c7c2f5b46fbc8dfb5609fd433ca332303437122bef951df3b2c0fde86f898fe410bbb6a3f4705766985b6b205c22abdc557d0d21951a7480b044458221b2c2430fcf357", 0xf2}], 0x7, &(0x7f0000002100)=[@cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}], 0x18, 0x2000c000}, {&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000023c0)=[{&(0x7f00000021c0)="19ff503ef7d882010e895b8af7745c11c85e4b9da46f0c727922cbdbe087b3f43e2cb06ae426fb7bfb98df8ca90d280526ab88e68d7c90c5f86dc96cee24f6f50411689321347d6b44bbec6dd7b70dd4f4776f6b67e10edbf812dae9a79d10c39c173b4e4c863bcc3df647cde8eb94a663fd0c894d7bdf1e1ab5de41ab4ad3cb2618700a934f495fe91fa06a3c61ff63a636f026c1ea6e529f68cf4e8e781816fb784930fd48c245f4baf37457513abb2543976e302b017cb4", 0xb9}, {&(0x7f0000002280)="128b", 0x2}, {&(0x7f00000022c0)="9a7dca08373c55571f2d1a332bb9b4d5e417e0d5033c894f5b463d35c09578974f2319fc46c593c67ce50f3392ac11aa2dd6363170181540112d10c29b676e383f7260d299ee2dac50ae936a426278f99e61e18923ec8233b0502760346fc599553ade3a7bde3ca694690ba50ba52693edcffa7e9e67396e653f231f5e24c4d82913d38c69f34e8f04e2cef63ca4e39385da", 0x92}, {&(0x7f0000002380)="c03ab71936fc888150c28010d6697f770806131bdb", 0x15}], 0x4, 0x0, 0x0, 0x8001}], 0x4, 0x20000800) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf32(r11, &(0x7f0000000400)=ANY=[@ANYPTR64], 0x8) setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r13 = request_key(&(0x7f0000002480)='trusted\x00', &(0x7f00000024c0)={'syz', 0x2}, &(0x7f0000002500)='\x00', 0xfffffffffffffff8) keyctl$assume_authority(0x10, r13) vmsplice(r11, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x4f}], 0x1, 0x0) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r10, 0x0, r12, 0x0, 0x10005, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 06:02:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 248.616083][T11888] input: syz0 as /devices/virtual/input/input267 [ 248.623637][T11891] input: syz0 as /devices/virtual/input/input268 06:02:47 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 248.819808][T11908] input: syz0 as /devices/virtual/input/input269 06:02:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 248.895929][T11904] bridge0: port 3(gretap0) entered blocking state 06:02:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5501) [ 248.951486][T11904] bridge0: port 3(gretap0) entered disabled state [ 249.044323][T11923] input: syz0 as /devices/virtual/input/input271 06:02:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 249.160894][T11931] input: syz0 as /devices/virtual/input/input272 [ 249.169637][T11904] device gretap0 entered promiscuous mode 06:02:47 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(0x0, 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 249.251127][T11904] bridge0: port 3(gretap0) entered blocking state [ 249.258463][T11904] bridge0: port 3(gretap0) entered forwarding state [ 249.349642][T11939] input: syz0 as /devices/virtual/input/input273 [ 249.375531][T11940] input: syz0 as /devices/virtual/input/input274 [ 249.454010][T11934] input: syz0 as /devices/virtual/input/input275 06:02:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd4) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r9 = dup3(r1, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x17}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0201000210000000000006f6fffffc000000000000800000000000e000000100000000000094f40337ff6b4ed6cd69675e973e00003500bb7a7a2d00000000000000ff0000000058d52a000000bb00000000eeff48f89f48a0d44b9e8238ce8005ffff03000500000000e90200423b00000000000000400000000000000000000000002000d40470c90b2bc791a93d1260cfcb71b779839a8713564f074461669c16c64aedc3c25152e01a8ce5141e33580d608bf181e9f9d2e98e88e508f32571efa7ae4630fc30eca5a3769370b5f39e26fec23cee7a88cbab031bc46152"], 0xdf}}, 0x0) 06:02:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:47 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:47 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="b284c538a23618f3e1ea45d1092598394436823ec933d6d7ec15c968c412627aa86ec2300e593d0560490648253669c9d7389fa4098472e73eb90b5c2eca6f5a21fb7b6d57c812d0f4eff27822fd57b4857c23c7e4118a6d7c3ef784fcb6471d7f27072e8b7d2a4c0d0eee81085979d4e88cfdd919a648e541a3e737a380b38e6a821291b355b5e23e6300dd3451ac26ca59e912e0c2f5bee2e3c4d2bf", 0x50d}], 0x1) 06:02:47 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5503) 06:02:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 249.939912][T11974] input: syz0 as /devices/virtual/input/input276 06:02:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:48 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd4) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r9 = dup3(r1, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x17}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0201000210000000000006f6fffffc000000000000800000000000e000000100000000000094f40337ff6b4ed6cd69675e973e00003500bb7a7a2d00000000000000ff0000000058d52a000000bb00000000eeff48f89f48a0d44b9e8238ce8005ffff03000500000000e90200423b00000000000000400000000000000000000000002000d40470c90b2bc791a93d1260cfcb71b779839a8713564f074461669c16c64aedc3c25152e01a8ce5141e33580d608bf181e9f9d2e98e88e508f32571efa7ae4630fc30eca5a3769370b5f39e26fec23cee7a88cbab031bc46152"], 0xdf}}, 0x0) [ 250.045378][T11980] input: syz0 as /devices/virtual/input/input277 [ 250.105708][T11977] input: syz0 as /devices/virtual/input/input278 [ 250.154086][T11989] input: syz0 as /devices/virtual/input/input279 06:02:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5504) [ 250.230744][T11988] input: syz0 as /devices/virtual/input/input280 06:02:48 executing program 3 (fault-call:7 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:48 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 250.463189][T12005] input: syz0 as /devices/virtual/input/input281 [ 250.506524][T12007] input: syz0 as /devices/virtual/input/input282 06:02:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000100)=0xfffffffffffffffb) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000000c0)={0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x0) [ 250.631138][T12007] FAULT_INJECTION: forcing a failure. [ 250.631138][T12007] name failslab, interval 1, probability 0, space 0, times 0 06:02:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd4) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r9 = dup3(r1, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x17}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0201000210000000000006f6fffffc000000000000800000000000e000000100000000000094f40337ff6b4ed6cd69675e973e00003500bb7a7a2d00000000000000ff0000000058d52a000000bb00000000eeff48f89f48a0d44b9e8238ce8005ffff03000500000000e90200423b00000000000000400000000000000000000000002000d40470c90b2bc791a93d1260cfcb71b779839a8713564f074461669c16c64aedc3c25152e01a8ce5141e33580d608bf181e9f9d2e98e88e508f32571efa7ae4630fc30eca5a3769370b5f39e26fec23cee7a88cbab031bc46152"], 0xdf}}, 0x0) [ 250.706916][T12019] input: syz0 as /devices/virtual/input/input283 [ 250.721716][T12007] CPU: 1 PID: 12007 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #7 [ 250.729689][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.739771][T12007] Call Trace: [ 250.743101][T12007] dump_stack+0x172/0x1f0 [ 250.747478][T12007] should_fail.cold+0xa/0x15 [ 250.752107][T12007] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 250.757951][T12007] ? ___might_sleep+0x163/0x280 [ 250.762841][T12007] __should_failslab+0x121/0x190 [ 250.767814][T12007] should_failslab+0x9/0x14 [ 250.772358][T12007] __kmalloc+0x2d9/0x740 [ 250.776636][T12007] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 250.782393][T12007] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.782409][T12007] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 250.782424][T12007] tomoyo_realpath_from_path+0xcd/0x7a0 [ 250.782439][T12007] ? tomoyo_path_number_perm+0x193/0x520 [ 250.782456][T12007] tomoyo_path_number_perm+0x1dd/0x520 [ 250.782468][T12007] ? tomoyo_path_number_perm+0x193/0x520 [ 250.782482][T12007] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 250.782495][T12007] ? __f_unlock_pos+0x19/0x20 [ 250.782514][T12007] ? __fget+0x35a/0x550 [ 250.782543][T12007] ? __fget+0x381/0x550 [ 250.782567][T12007] ? ksys_dup3+0x3e0/0x3e0 [ 250.816314][T12007] ? fput_many+0x12c/0x1a0 [ 250.816340][T12007] tomoyo_file_ioctl+0x23/0x30 [ 250.816360][T12007] security_file_ioctl+0x77/0xc0 06:02:49 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000020032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 250.816380][T12007] __ia32_compat_sys_ioctl+0xcc/0x620 [ 250.816405][T12007] do_fast_syscall_32+0x27b/0xd7d [ 250.864167][T12007] entry_SYSENTER_compat+0x70/0x7f [ 250.869300][T12007] RIP: 0023:0xf7f1b849 [ 250.873391][T12007] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 250.873401][T12007] RSP: 002b:00000000f5d170cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 250.873413][T12007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 250.873420][T12007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.873428][T12007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.873435][T12007] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 250.873444][T12007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 06:02:49 executing program 2: r0 = socket$inet(0x10, 0x806, 0x1ff) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100607031dfffd946fa2830020200a0009000100121d85680c1baba20400ff7e", 0x24}]}, 0x0) 06:02:49 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) r1 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r1, r2) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 251.127218][T12005] input: syz0 as /devices/virtual/input/input284 [ 251.176080][T12007] ERROR: Out of memory at tomoyo_realpath_from_path. 06:02:49 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x0, 0x4, [0x1]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x200000003, 0x300) r5 = getpid() fcntl$setown(r4, 0x8, r5) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000140)={0x0, 0x4, 0xf0, 0x16}) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x7ac, 0x7, 0x5}) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000100)={0x5, 0x103, 0x0, {0x3, 0x7, 0x80000001, 0x81}}) 06:02:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5505) 06:02:49 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:49 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 06:02:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 06:02:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) r1 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r1, r2) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 251.473003][T12052] input: syz0 as /devices/virtual/input/input285 [ 251.570813][T12055] input: syz0 as /devices/virtual/input/input286 [ 251.599742][T12060] input: syz0 as /devices/virtual/input/input287 [ 251.623402][T12052] input: syz0 as /devices/virtual/input/input288 06:02:49 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 06:02:49 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x714, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xc8b, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='\x04dev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 06:02:50 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5507) 06:02:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 251.973391][T12079] FAULT_FLAG_ALLOW_RETRY missing 70 [ 252.004799][T12083] input: syz0 as /devices/virtual/input/input289 [ 252.004815][T12079] CPU: 0 PID: 12079 Comm: syz-executor.0 Not tainted 5.2.0-rc1+ #7 [ 252.019139][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.029210][T12079] Call Trace: [ 252.032554][T12079] dump_stack+0x172/0x1f0 [ 252.036924][T12079] handle_userfault.cold+0x41/0x5e [ 252.042085][T12079] ? userfaultfd_ioctl+0x3aa0/0x3aa0 [ 252.042105][T12079] ? __handle_mm_fault+0x3601/0x3eb0 [ 252.042121][T12079] ? find_held_lock+0x35/0x130 [ 252.042138][T12079] ? __handle_mm_fault+0x3601/0x3eb0 [ 252.042153][T12079] ? kasan_check_write+0x14/0x20 [ 252.042168][T12079] ? lock_downgrade+0x880/0x880 [ 252.042184][T12079] ? kasan_check_read+0x11/0x20 [ 252.042208][T12079] ? do_raw_spin_unlock+0x57/0x270 [ 252.057582][T12079] __handle_mm_fault+0x3612/0x3eb0 [ 252.077515][T12079] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 252.077530][T12079] ? find_held_lock+0x35/0x130 [ 252.077547][T12079] ? handle_mm_fault+0x292/0xa90 [ 252.077572][T12079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.077595][T12079] ? kasan_check_read+0x11/0x20 [ 252.087853][T12079] handle_mm_fault+0x3b7/0xa90 [ 252.087876][T12079] __do_page_fault+0x5ef/0xda0 [ 252.087898][T12079] do_page_fault+0x71/0x57d [ 252.087913][T12079] ? page_fault+0x8/0x30 [ 252.087926][T12079] page_fault+0x1e/0x30 [ 252.087939][T12079] RIP: 0023:0x807a53f 06:02:50 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008914, &(0x7f0000000040)="11dca5055e0bcfe47bf070") socket$inet(0x2, 0x3, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000020032, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/17, 0x11}], 0x6) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) [ 252.087960][T12079] Code: 24 10 8b 74 24 14 8b 5c 24 18 85 db 0f 84 89 0f 00 00 89 f1 89 f8 83 e1 0f 0f 84 4a 02 00 00 83 e6 f0 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 01 cb 66 0f d7 d1 d3 ea 83 fb 11 0f 86 0c 04 00 00 85 [ 252.098278][T12079] RSP: 002b:00000000f5d3fc20 EFLAGS: 00010202 [ 252.098292][T12079] RAX: 00000000f5d3fccc RBX: 00000000000003ff RCX: 000000000000000e [ 252.098299][T12079] RDX: 00000000f5d40a88 RSI: 0000000020012fe0 RDI: 00000000f5d3fccc [ 252.098305][T12079] RBP: 00000000f5d40168 R08: 0000000000000000 R09: 0000000000000000 [ 252.098312][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.098319][T12079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.103859][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 252.103929][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 252.236624][T12092] ------------[ cut here ]------------ [ 252.242571][T12092] refcount_t: increment on 0; use-after-free. [ 252.249052][T12092] WARNING: CPU: 0 PID: 12092 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 252.258283][T12092] Kernel panic - not syncing: panic_on_warn set ... [ 252.264899][T12092] CPU: 0 PID: 12092 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #7 [ 252.272805][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.282880][T12092] Call Trace: [ 252.286206][T12092] dump_stack+0x172/0x1f0 [ 252.290584][T12092] ? refcount_inc_not_zero_checked+0x1b0/0x200 [ 252.296771][T12092] panic+0x2cb/0x744 [ 252.300702][T12092] ? __warn_printk+0xf3/0xf3 [ 252.305331][T12092] ? refcount_inc_checked+0x61/0x70 [ 252.310549][T12092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.316822][T12092] ? __warn.cold+0x5/0x4d [ 252.321178][T12092] ? refcount_inc_checked+0x61/0x70 [ 252.326410][T12092] __warn.cold+0x20/0x4d [ 252.330678][T12092] ? refcount_inc_checked+0x61/0x70 [ 252.335914][T12092] report_bug+0x263/0x2b0 [ 252.340295][T12092] do_error_trap+0x11b/0x200 [ 252.344924][T12092] do_invalid_op+0x37/0x50 [ 252.349368][T12092] ? refcount_inc_checked+0x61/0x70 [ 252.354597][T12092] invalid_op+0x14/0x20 [ 252.358781][T12092] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 252.364615][T12092] Code: 1d 00 84 48 06 31 ff 89 de e8 1b 6d 3c fe 84 db 75 dd e8 d2 6b 3c fe 48 c7 c7 40 96 a4 87 c6 05 e0 83 48 06 01 e8 3d b1 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 252.384241][T12092] RSP: 0018:ffff8880635b78a8 EFLAGS: 00010286 [ 252.390349][T12092] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 252.398342][T12092] RDX: 00000000000129a1 RSI: ffffffff815ac7e6 RDI: ffffed100c6b6f07 [ 252.406332][T12092] RBP: ffff8880635b78b8 R08: ffff88806a72c080 R09: ffffed1015d040f1 [ 252.414331][T12092] R10: ffffed1015d040f0 R11: ffff8880ae820787 R12: ffff888066cc4b30 [ 252.422335][T12092] R13: 0000000000000000 R14: ffff88808f41b7c0 R15: ffff888086557ed0 [ 252.430354][T12092] ? vprintk_func+0x86/0x189 [ 252.434975][T12092] ? refcount_inc_checked+0x61/0x70 [ 252.440199][T12092] kobject_get+0x66/0xc0 [ 252.444491][T12092] cdev_get+0x60/0xb0 [ 252.448508][T12092] chrdev_open+0xb0/0x6b0 [ 252.452870][T12092] ? cdev_put.part.0+0x50/0x50 [ 252.459156][T12092] ? security_file_open+0x87/0x300 [ 252.464309][T12092] do_dentry_open+0x4df/0x1250 [ 252.469102][T12092] ? kasan_check_read+0x11/0x20 [ 252.473984][T12092] ? cdev_put.part.0+0x50/0x50 [ 252.478784][T12092] ? chown_common+0x5c0/0x5c0 [ 252.483491][T12092] ? inode_permission+0xb4/0x560 [ 252.488465][T12092] vfs_open+0xa0/0xd0 [ 252.492480][T12092] path_openat+0x10e9/0x46d0 [ 252.497099][T12092] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 252.502959][T12092] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 252.508371][T12092] ? __alloc_fd+0x44d/0x560 [ 252.512905][T12092] do_filp_open+0x1a1/0x280 [ 252.517456][T12092] ? may_open_dev+0x100/0x100 [ 252.522172][T12092] ? kasan_check_read+0x11/0x20 [ 252.527082][T12092] ? do_raw_spin_unlock+0x57/0x270 [ 252.532234][T12092] ? _raw_spin_unlock+0x2d/0x50 [ 252.537117][T12092] ? __alloc_fd+0x44d/0x560 [ 252.541662][T12092] do_sys_open+0x3fe/0x5d0 [ 252.546114][T12092] ? filp_open+0x80/0x80 [ 252.550390][T12092] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 252.555881][T12092] ? do_fast_syscall_32+0xd1/0xd7d [ 252.561024][T12092] ? entry_SYSENTER_compat+0x70/0x7f [ 252.566336][T12092] ? do_fast_syscall_32+0xd1/0xd7d [ 252.571479][T12092] __ia32_compat_sys_open+0x79/0xb0 [ 252.576729][T12092] do_fast_syscall_32+0x27b/0xd7d [ 252.581786][T12092] entry_SYSENTER_compat+0x70/0x7f [ 252.586920][T12092] RIP: 0023:0xf7fa5849 [ 252.591023][T12092] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.610643][T12092] RSP: 002b:00000000f5d7fc14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 252.619070][T12092] RAX: ffffffffffffffda RBX: 00000000f5d7fccc RCX: 0000000000000000 [ 252.627058][T12092] RDX: 0000000000000000 RSI: 00000000f5d7fccc RDI: 0000000000000000 [ 252.635052][T12092] RBP: 00000000f5d80168 R08: 0000000000000000 R09: 0000000000000000 [ 252.643069][T12092] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 252.651050][T12092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.660499][T12092] Kernel Offset: disabled [ 252.664939][T12092] Rebooting in 86400 seconds..