40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc02c8d0}, 0x880) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 12:38:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:24 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r2, r4, 0x0, 0x200fff) 12:38:24 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 113.920832][ T4739] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 114.292431][ T70] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.332415][ T70] usb 3-1: not running at top speed; connect to a high speed hub [ 114.402403][ T92] tipc: 32-bit node address hash set to 420000 [ 114.412665][ T70] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.662461][ T70] usb 3-1: language id specifier not provided by device, defaulting to English [ 115.192405][ T70] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 115.201482][ T70] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.209488][ T70] usb 3-1: Manufacturer: 稂⢔ś뤵查듻Ⴤ䴂﷝᯳쇏蛓泭眉缛巛銐་鲕悔ﯜ [ 115.712493][ T70] usbhid 3-1:1.0: can't add hid device: -22 [ 115.718430][ T70] usbhid: probe of 3-1:1.0 failed with error -22 [ 115.726106][ T70] usb 3-1: USB disconnect, device number 9 [ 116.442352][ T92] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 116.842394][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.882406][ T92] usb 3-1: not running at top speed; connect to a high speed hub 12:38:28 executing program 2: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7f}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa}, 0x0, 0x0, 0x4, [{0xe4, 0x0}, {0x3c, &(0x7f0000000480)=@string={0x3c, 0x3, "027a94285b01a8f6bfdb35b959f1e567fbb4c410024dddfdf31baae8cfc1d386ed6c09771b7fdb5d9092b0e20b0f959c946001ed44dbd9d9dcfb"}}, {0x3d, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f00000000c0)=""/34}, 0x20) 12:38:28 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r2, r4, 0x0, 0x200fff) 12:38:28 executing program 1: r0 = socket(0x8, 0x3, 0xfffffffe) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 12:38:28 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:28 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:28 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 116.962431][ T92] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.002423][ T92] usb 3-1: string descriptor 0 read error: -71 [ 117.010120][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 117.041995][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:38:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000640)={0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="c52dc99b9c6c0a", 0x7}, {&(0x7f0000000180)="a2d701120fd126d81fafef078cf44c3a5bde2e33280d1db9e48f2185aed8bf166750c08c6600ca0ba63375a5480e4e4be2e28847359f18c0f7775a43b8de61e30ed0612abc5db1b93580e20d483e3970a89c448a65d290249ee4379fdd99e2c829e4fa1939fb1897cb458887", 0x6c}, {&(0x7f0000000200)="a3e9a45abb920bfd9073b467bfab20b52e86c1d919d993a438b046dd7a373050ab2774440670ba64c7e2eaa6a4119b5ddd8d5022612857a316826911f8f3b28d2185fe43aaf5cac172201d595243c3630efd77575485f28174d372ea85fcd3d2d6994a6032d1a3caf51ac0d1c819ec38b591c7d811d08f1caba442475b2ad3f84f90dba269ed815e01b509ca631b5130c7a7d39abebcf1f17acd53e425d16748024084cee7a38783ceae20bd0ebfc12f1b01332696234b20530b404101", 0xbd}, {&(0x7f00000002c0)="543af1644e8ef9d14f029f3c4734ab4c89716f5bee1c162914626386f00fcdca43b8f18b5f2f5b9fc2b45946ecb486db357d5bc0f605f107e78ee883a13633dc548077d7e3912c68ea7d8027aff07280ac5c72c77401ba4b1eb39445802810c6d77f01aa1b0a8b97aa48ac120f2c17c02006f051a24ac9472df22920b226b24494b4a7e1f57bae1787779ebc58d636ff3f5c99b128398c497985914eb0e3648ba71cb4e57e7b7d24418d32e000dd1f4d95eab73118493186a61787c0a15b14ff68c6656e11ee20790c131be1d04525b9d9e595d4a89e8ae07a710a857368", 0xde}, {&(0x7f00000003c0)="b241113be41261acaf6e835fddad7c286a3e12ea9ee776f8240eabdefd5e42651418831b4a7cb8a196121d38157218bc73dab23da8d96fafa7443be789da95aadce73f9ef5e244f2b0", 0x49}, {&(0x7f0000000440)="a853396d1bb9039b315634be72a360d3e001c13713ac8ee80423aaeb76af6d327af54944a541033ee35b380e1ef2256fbd3fbd628ee4b9fd141a7b42950dd8fd5f89f3d4a7e12b6779bb44cd2b2ab95a4d668768bd4b7ab775dbeee61229c8fe4c087b6d79aec01bf09445e2cdff26ea2294d9e9e3b6554334361cbd2eed50f9d199931169f5cdbf121fb6d5876bac1830", 0x91}], 0x6, &(0x7f0000000580)="2ebea2d2aef96991be2c", 0xa}, 0x48000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14490500000000009500000000000000349d5fbb34a02f7ab7dc15e068fd00000000000000"], 0x14}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 12:38:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$tipc(r1, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) sync() [ 117.082465][ T92] usb 3-1: can't set config #1, error -71 [ 117.107303][ T92] usb 3-1: USB disconnect, device number 10 12:38:28 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000040)={0x1258, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x1e, 0x9, 0x5, 0x1, {0x4e22, 0x4e21, [0x2, 0x1, 0x7ff, 0x1], [0x1, 0x8001, 0x10001, 0xff], 0x0, [0x3ff, 0xde]}, 0x8d0, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "19a847db4ac8ed277f6f0d4c5f2912a490413d32ef8221ef4e31dc8533004775d20bea9ef2f34a057e6c5b2920f97d52ba7dba24e22c8850d859200959e3f4b02824aca468a5176743106a5b4afe7d276580e1d9762477564850d5baf87f804aec8014b9f6856b1243c6a8ab624f498248b66c56030e7a583d38b26820edbb96022beae48572cd1562ed98282198eafbff5867890d9cb8afd89c7e2a962dc6932a7037cbfb8052f7f9b2088908ad7f102a5f3aea237a44a1eec5277c723cccb3468a7a5eaf6e26080b1e7d52914c"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "d5275eb7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "25057fd6ae876a012361b9dfadd5947138964dc6013918bcaf2a540d4e516f61b94f6cffb48fc199ac8ef633a01c66971fe98874c2023f24904052359c75c4d30669f2bbcf7bfe061915cd4c276c267a8b0e2a0dce26f66a3178e69cf509c376466a6bc7debdac8e894b22db5ba94c5cf047366b3af050891121bdc64bbb5903cf33b66d9be2dc606e6328ed1ec01ff8a40559fa820fa67fe197341c6d25226f91305b78a47749bc662deb93012380aba466180b8eea9cb0ec64cf2210f4b23d9051095d2b3a17cdca9e199961efddfa2c8819892b8c141f7bc1488d1d964d991d34ad1ce0f6f23224cd78f1854dbc3abd1359c1e77761f964c40302165149e691e0cd96f3709761a11f8f55136f1c2f1079eb672a6e70ea57453abf76dbab19cafd57e955d8c66d7035d082ef8a4909c43cabec6188e30e87f94c7042dd941e6250bb8bcfc1e275e9dd3cf2132534c8f96f977bced16757014935946072293a3c0bd2efb344b884a8c5f7c9d904a2b09d79908ec37ef4b9caaeb3e3da15f9ad2b0af07d4684b93db09090cb12aae56ba85f75f3a08b64fe4fbd94047351c0676e771143987403f08460038f468e1e9fc14cae169d87a3d20c3f860b9d5b07745ccd8bc5b0f690b31730753a7e5bf33064f5d2ea37a15e8f2312efef53596f5e4419082d4322117f32be87f13880e6961b65eb1a73e4046c8a62052b59a53a77d0bf3e43a56de92e0ec7b29c2a37ea34e291393520010c4f107abb0e80aa9de2c33ae9223326efc3e250f743487e892b2af45c91d479530a0e5ffaf7ff62c615bd0bc6264a11f709169318cac2d429e64798dc458fa5e8412cdd66ac28d12b5ace7846450339d38bb8bb29e369f5e361d08ad2d428cc0067aefdd2451a48655cff0979451d8418a047c0e154ff41ad1897b37eb27f86a8497e02c62c41d77decd59b1a456e9e917e131d09bc719acb4c759884df6a8fdf34686bfcf9990904650a2d138cd349152c1d2f1be1b5e9b8f8bb9239c5b50080a1d5d5f6c1f5d75fc2641a636dcd1401cdf24c000daf735213639d138a3de9a1f21666dbf5165bef77c777de9091bda06b9a76f5074eda51dfdee8cbcc2e421dd693deeac391dd747a85ecee647038ced7ee2a131dfe5ea5c96bddc415ae47456a842bdd15da9518a65fd7113d87c6ab77d787518045bb9c842917cdae9dac0a5bce1a962e1c0cbbbbc7142fd0b627068a60bb337a1b45013cd3b9e071b474242ad0f37aa0bf150eae5e277328acef39719d7f7fc2d064522a98abf5dacd0192a09a94312431945f0f68523f4e7462fb9126baf5d951769f775c6c16e916d6f693c849b16a2e9ad4085747883723221387fa6034d5fd3cb9a1de9bbbd70bc703e0dbd113f6f7ae97e302ab0f804a6e3e313166a1096cdb430722d90e04f83112518a8750735f70dac18a75e1acff40da265319f6218335fbb1c3758d7b17348fadab21829363554eadad69ad7bc3bff635060918681f840dd97057d72506cec8f2e9de1967776dbce9e3730b0738bfc678290c1d1695c02c340c4af184218c3336d9ddb2ab257f326d44685b731c86da182381b7c06506409d4c004a4fd2c27716041ccab425b828c576bddb1398a337067bc836c21f484039a2bbb948a1fff948d098777e24977a10365fd140ebc40aa933b25ff3f95a7aa6a84598cff35da3286f8d661eab7dd06df0a3b21a22ea61ae4ef22c1b5f12fba4922a1cb1032489c284cda64f1e6398b9aa57e1d95b23684ba0bd251337a4c72e97805e8f06f2b8bc33f793e2e0eac718a23c1e7ca28aaf256e9444c20d2bbc50590f544b3bde7542924f12902b879a06ded70260c42d61addcc603387c1b4d0940e62e637b4360cb0bfdca0e3f7e4672f4d3c5a439079cba3eeaebc9daca812087f6fe49f1dab2dcdf050133718538f4abeada8342c1f8ceadcfe40185765f10550f358ab5395d6ef60d44489eda80c58a3b65ba87a0996540183ac812ca8293a23bd2895bde0ebc3159de105837eea011b3f8410f4d77d1cf2118bc3ac11ba427030d6eecf620d9c3c9e07cffb41641bbd7154ef6f9e704e4a3078163acbaa326d014678e461532a2c992ec316ec05acc0652c9a03d952641048f76b4718e3165a032afdaeec303e0d2e257a796b32f80d6cfd3f10284de7729d1e5587f612385b9263552981e786e20fe725ce2331498e247786e4e656fa2c72510cce52979a29aaf0d28c80d3c7ef0bdfae613fe50b5506678d2ba749231ac0636e98285684b02d7bed54c5927428f5d4b39b48b0c9569a3fd89cb0006f6d52785696d36fc693865f1b7d16fa3ef2f624757d3240d7a038af849ab6f63770f7563cdacb4f01d61616b894f9383435a7fb135cfb46507ad420a49225637c84f6f74d1846cfaeb03381acd428351ae82cd3d3c6c2e5f0c82762af5c70f445a7b8a4682405262410527e7116d10ec21ae572c3a8c71306002e4ad0ac54d90fbd88bb23472a76316854ef4c99a8566beb882b30d2f81c49137e01e73e597f7b53fc5dbb1213d5b7419a5c230952af46bdd477c6229ed52c638d34920b4476d6a9b3b5d855886c63eb4934a9df711ea3c49164474659fd4d083740a319113aefaa303f49ead4196d114df6d6b8a77a88ac48ee620b19b28a56a7f7a488571c8bb86516b76f505e51beab5dedcff0e93560965520c037315d46c982a1f197e4b6af267de63a5dd65f3a867063ca9777a60411db4e2141ea9c4e2059b73250ad26e2f235a7bb6f03b5c06f634e4fcfe353cca82e1f9097817e5c5867adcc6113020938352b49b7d846e420d2b63523505519fc429210306dc9ea7c0af88abd350055b766af7bc1f136b338c408b19827fead9e9e4e92312b9170fc65e41406b5488d674bd7528d3a8c89ea5cd1494bf5bc196bcc58fc862f8338a679bbc17990e98735faa281ccc1423db9f618f35e7e936fd876dcc45b353cc917d3387321e52eeccbfcbb50396047403324ff8f594f380dcfaaa8b51ddc26ca0e7d06ff069eed25ba9e76682d521e1cca0d11267fee0e8baf9ae4da9099dc76263232d416eb05a7b1a3238367d15b0837ac1f22c56fc3b27ed4ef262f593b55a2139c1b13ba82667780637677d6aac9ca0dbe7cc4c4d61cc7a5c0e07c286a5ff0380ffe502f50b644fec4e3005e24f4ab73e4c4b69006083dbdb26d9a9f787f93b56d7d2b6ac15c60291d5d6f4233dff1249fe1c2f17ab840cab3aab2127c0ae3ed562e1504bce594eba68561efdbc4f2994a0c59119d75514b02aa388e02b3ec89b9423d919d64cdd3e05e12aa4fe5a727909cc04bbbcf0a099369a4d2d160788aa27ddc6e2c2c1afbcdf73a8c9d91b8546cd0d99dd0b7180cdfa36c8283b5521a63590ed493346b7accbc8ad52dc126318659ae5d5cc19d80c1153d49c59b415c0865ad4687c24187e07d46f48515aad001b3e2cabfa71c08f97d80a4e98248dac5206da50a03e1c8bfc34f8c6a894c78dc4385ac66db54d99b8d38f23d52b16e961599408d3b337f05113ecde705adddf7f0e7958ff71b75cf0c145da4fe875d657cb96d4f3c7623e80033e9ca0eeff77004e4c17ed327be4a6f37fb806439a856f09ee9d46cede88622ae77e2db7e323d261178d16513b47c3e16d03c342ca055ab2f6b2ac5ba7c84ca727f722386a2ceec9292ab99b75fe420cbdc94cbf09fb24dc1d0916335a975556adb961a34814c3a95cb0bcaba599dff22cbfd8a079c787396221b4802ef5f5cedf90c6e123363bf4ebaee0ef0b46742ec1e0dc43ad1f2fffa97d492bc40029dd68f777f915a5f56d440a650491e4c3ba283cdacf8e353339911b77b93c75922edd7f51cb7486a1e6f95b2c9ae9a7ddd9f764669065377e2e262c21179db41b8df470ef75fd29505f3a7dc2cd62859a5bb1b340d47d0b21eebfd3d419a3ef926dd7f65dc9aa6702adc8d2fce01654a07597f3f6c228c1293bf7737e6639b34c235e2b55a61f8252bc574f69c12aed9025b08c7d3137e308d55723f1653d8978c9c4bd4e7a811650c4b356358736cda2f69faef05e8f41ffa4763ef1bc2c4ad4362ffbc85e08081753f3c88e23de9543777e6e689f78aaf614f52a0a0a660eeffef0e90f02341a8c19523976c83158987eae0bce8f7db75a140ec2fabd2e11289fd3c03a4fbcb7ec34ba666de9c5fb9a770b7fff00a33d82bc4f06cc14c071586c8401575f165c42cc169c8cf78637ac5a5619d57372a9178e302da1e347b46f8a2bd376c9a8cbd26303f246f924ae08f0294e250435838324c8b6a1da4b69590aa4020eedd598494d99b94594a93bc89dbb701aeb75fc6eddfe6811186c1288983b3f88be50ecf984016428ccfff187dc4633576b9080dbe7c42b03a0b27c017c0321e75b10b7f1822d5694a8c22d4bbea413a6c351d8e2e799a61e97c6b6d1e092409df0d58f904cbc63716da0d23e54ef353e63e4781205f03a966dac41bf2af6ac254cc24b0b0ea20b7c45522af05c01b32cd9078fcc82cbff941d917e00bf75d14439bc6b81843fc75d70bc701ee5681f7f444be193093dd099c8811b5248316c22471567e6df6c0cb272aea063852c5da1d1279d95a4edcb1cbbec7c058beb1dfaf8aaad9d033d101dad2abce3316a081624e9d8ca7be14c1e0afa4e8c70e7a1473aa92bf0c82e2dbb32be0f2481467ed29c2208d2da691072810a3b69a51d0c3b8f7217e367382a03fabf49eb7ffca2d0eef5ce1a1fb1237cc5801a7e7c4d35a95494e1e0166486f865264cd8b33043f6656632a5b05502703898559b22b401dd502b5486aab9958734ec662b69d48902c5b1ffcb87bf3ac9aa20edf69c8044dc5ee6373469555afcc15b3c6670b773dd5d2fcb2062319371b9cfcaf3b51a502eadf057547fd90187cbeb33749f6e652fd37abb10f7c330838aba91a74de1317d884c623487d2ccf4785ec493d0b79a0c9bf20b7bdc0a761618809d9e536e3c5fd6ebb4b6e8de64934d1384fab397baad78b004c1acc538ce4bbf525bb6f2a458d3dbd50c85e24f36e30595c698f0e7a1eb782ce740cefb427ba3167ba9839edee8f965d5e977f508f9b9b696c0bef380ad3889a51495da0e4aaf2fd31753736c78b9c7321e12f71da174880aa7ca723aded71805a8cc056143cf7f567cb53f31cbfeaf803e699a97197360f35692cfec524d99328412cbadf34674fe67a85d4752b1aa83ccece807c89ba8ca3cd0d7b06cdec11ef99458faae3e5db869929eceee14204d4eb9c63c33e71a8898c8c0138086d33eed26f7994d81bc1406df0b5605620a08cc5b349d245df9e59783209562015e6825c1683aa0b91def897ddce6cfe6fe191de786bb694271faa0069a156666b83782e8728125cb14446f85dbf369e43289017323a88abcdd38c4d671e8a3b56fdf4a567b18b7fe58ddf704122fb7535e0b544c816df11b079ba806246f05858e09c3b493b0f575be4281ddb9eb2a5bd68ce325b287390793603d20699756508443146b300217ef00f9f24812ade30ac8e034d687381f52f4019dfb87dc54d3d08ae94fdc1ca154dd051063ce5e5e6931016baf16c56c3c32f4fb0a794b3d21ccca34f069ad88e319241772792b444ebed782808cbe21fb1610e9ad88033420b9d1a35029fed588823d3d99a5113ed40d7df882ad2c85b4ad25e990e2d107042d92c70725dfbe12539665db5f7e7b9935c8be7fbd2a95dc1f8ea6fc5a3a159b06604bb158408a33362614f0354706beba3810836f3d6d593fb3b3d5b4"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "31f7ae631b632a19f654fa3506e9f6b1174af3767b9129949211ad21c2cf3b15ca639aee8eba5a09e466fb5bba3c76e72748e1c4797072d93b8b319c2f1c82521cf3fd478b624953e2783d732b"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "07adb698e9daeafe2510f209af2f1903dc36ce9d"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "a9ba01de58d5d558eb9dc403e37b96e80f459645be61759c0f4a476f77f1050453eadd2c0d0a2211eec1ef8aac58035d5367a488e1d08da15293c628de5302e4a0f83b3de74272357cd9cf0c86f85ed8069290c330a173fab215ce46d83483b288fa7eaf0fee7a66dc90663c8ccc5d3cb72e5c177a6c68f295892045cb484f36e8541a11ee8c27a5bcceefd503b5cedafda85e081dbdbf2a6d4693bf2bba11792ec28581cf1b0b5c01fbae3a8bb6fb936f0fb71a51eaad946a"}]}, 0x1258}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 12:38:28 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002bc0)={'ip6tnl0\x00', &(0x7f0000002b40)={'ip6tnl0\x00', 0x0, 0x0, 0x2, 0xe, 0x3ff8, 0x20, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x8, 0x20000, 0x1}}) bind(r1, &(0x7f0000002c00)=@can={0x1d, r2}, 0x80) r3 = dup3(r1, r1, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4201}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000891) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 12:38:28 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002bc0)={'ip6tnl0\x00', &(0x7f0000002b40)={'ip6tnl0\x00', 0x0, 0x0, 0x2, 0xe, 0x3ff8, 0x20, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x8, 0x20000, 0x1}}) bind(r1, &(0x7f0000002c00)=@can={0x1d, r2}, 0x80) r3 = dup3(r1, r1, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4201}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000891) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 12:38:28 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 117.265591][ T4801] tipc: Enabling of bearer rejected, already enabled [ 117.285306][ T4803] tipc: Started in network mode [ 117.297158][ T4803] tipc: Own node identity 00000000000042010000000000000001, cluster identity 4711 [ 117.310416][ T4803] tipc: Enabled bearer , priority 10 [ 117.492372][ T92] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 117.892379][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.932397][ T92] usb 3-1: not running at top speed; connect to a high speed hub [ 118.022435][ T92] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.262390][ T92] usb 3-1: language id specifier not provided by device, defaulting to English [ 118.432402][ T70] tipc: 32-bit node address hash set to 420000 [ 118.802415][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40 [ 118.811431][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.819421][ T92] usb 3-1: Manufacturer: 稂⢔ś뤵查듻Ⴤ䴂﷝᯳쇏蛓泭眉缛巛銐་鲕悔ﯜ [ 119.302474][ T92] usbhid 3-1:1.0: can't add hid device: -22 [ 119.308523][ T92] usbhid: probe of 3-1:1.0 failed with error -22 [ 119.315861][ T92] usb 3-1: USB disconnect, device number 11 12:38:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:30 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x0, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:30 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000002bc0)={'ip6tnl0\x00', &(0x7f0000002b40)={'ip6tnl0\x00', 0x0, 0x0, 0x2, 0xe, 0x3ff8, 0x20, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x8, 0x20000, 0x1}}) bind(r1, &(0x7f0000002c00)=@can={0x1d, r2}, 0x80) r3 = dup3(r1, r1, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4201}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000891) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 12:38:30 executing program 1: r0 = socket(0x1e, 0x4, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:30 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'wlan1\x00', {0x10001}, 0x4}) bind$tipc(r0, 0x0, 0x0) 12:38:30 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x0, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:30 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x0, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:30 executing program 1: ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'team_slave_0\x00', {'veth0_to_hsr\x00'}, 0x81}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff8) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) bind$tipc(r0, 0x0, 0x0) [ 119.804580][ T4821] tipc: Started in network mode [ 119.810495][ T4821] tipc: Own node identity 00000000000042010000000000000001, cluster identity 4711 [ 119.826041][ T4821] tipc: Enabled bearer , priority 10 12:38:30 executing program 1: r0 = socket(0x27, 0xa, 0xffffffff) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = getpid() r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) fallocate(r2, 0x0, 0x0, 0x5000f4) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000000)={0x3f, "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"}) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x40, 0x0, 0x4000000}, 0x0) ptrace$setopts(0x4200, r1, 0x4, 0x0) 12:38:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:31 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffff8) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x4, 0xfffffac9]) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2, 0x2200}, {r4, 0x8004}, {r2}, {r1, 0x12}, {r1, 0x200}, {r1, 0x110}, {r5, 0x80}], 0x7, &(0x7f0000000200)={r6, r7+10000000}, &(0x7f0000000240)={[0x5c4]}, 0x8) bind$tipc(r0, 0x0, 0x0) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:31 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x302, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_LABELS_MASK={0x24, 0x17, [0xf6, 0x1000, 0x8001, 0x2, 0x3, 0x7, 0x3f, 0x3ff]}]}, 0x38}}, 0x14) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:31 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) delete_module(&(0x7f0000000000)='\x00', 0x800) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:31 executing program 1: geteuid() r0 = socket(0x9, 0x4, 0x101) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x2, 0x7, 0x10000, 0x80, 0x7fff, 0x2, 0x1}, 0x1c) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x7f) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x100, 0x4) 12:38:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x0, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x40010, 0x8, 0x800, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x3, 0x1}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) 12:38:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004", 0x1b, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "be877d635ef4c7b7aadc202d1d75b162"}, 0x11, 0x2) 12:38:31 executing program 4: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xcde}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x4) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000540)='./bus/file0\x00') r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x20000000239}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x143, {{0xa, 0x4e23, 0x80000000, @local, 0x8a}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x9, @remote, 0x7f}}, {{0xa, 0x4e20, 0xa1b, @private0, 0xcc}}]}, 0x190) 12:38:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xb05, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r2, 0xb0162f10ae656be1, 0x0, 0x0, {{}, {@val={0x8, 0x118}, @val={0x8}, @void}}}, 0x24}}, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffff8) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000002c0)) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 120.444746][ T22] kauditd_printk_skb: 17 callbacks suppressed [ 120.444754][ T22] audit: type=1400 audit(1603024711.458:38): avc: denied { create } for pid=4933 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 120.450927][ T4943] netlink: 'syz-executor.3': attribute type 280 has an invalid length. 12:38:31 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43ff, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 120.519897][ T4950] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 120.528677][ T4950] EXT4-fs (loop5): mount failed [ 120.555871][ T4952] netlink: 'syz-executor.3': attribute type 280 has an invalid length. 12:38:31 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143102, 0xa2) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="ec4f558d57c3a229e63882d99ceade38021da17b1d295a9987cf5454c2cb0024dbf47e363ca3229c2bc83f254044c9949eddf9035f89191dd14f0b7521141a72c4578f335ee54b3ccae2faa4329ff61b82aa4de4098d7b9d4439", 0x5a, 0x3}, {&(0x7f0000000180)="dbd736e3eb4e6478637050bc349bfb4da3e5742bee3e3fd5dac2215b716fe69d737afa864f8d9ef1a840c4a24b4a24774c4c2a60c2fa773b91", 0x39, 0x9}, {&(0x7f00000001c0)="07bb785cc08ca75dcee546461080bc4e3bfaafc845e4149e80ee8a3c1992230bde91c0cbd39150108dbc5fec9138fd438e2d824636842263db57fff51e504841bf7d2c2700e149545088fa7e83dad9297f46186cd908ddc65fd4c465552087f4e3febaf997dc", 0x66, 0x5}], 0x80, &(0x7f0000002300)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x34, 0x3a]}}}}, {@huge_within_size='huge=within_size'}, {@gid={'gid', 0x3d, 0xee01}}, {@gid={'gid', 0x3d, r3}}, {@huge_advise='huge=advise'}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x32, 0x6b, 0x67, 0x74]}}, {@huge_within_size='huge=within_size'}, {@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x31, 0x35]}}, {@huge_advise='huge=advise'}, {@huge_advise='huge=advise'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise='appraise'}]}) bind$tipc(r2, 0x0, 0x0) 12:38:31 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 120.656532][ T4950] EXT4-fs: failed to create workqueue [ 120.662038][ T4950] EXT4-fs (loop5): mount failed 12:38:31 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43ff, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 12:38:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0xc00) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'veth0_to_batadv\x00', {'bridge_slave_0\x00'}, 0x6}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000004c0)={0x6, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x38}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0xf0, &(0x7f00000002c0)=""/240, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sched_yield() 12:38:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000000c0)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x2, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x8, 0x4}, {0x3, 0x200000000, 0x0, 0x1}, 0x0, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x180000, 0x0, 0x1, 0x1, 0x5, 0x0, 0x1}}, 0xe8) socket$inet6(0xa, 0x4, 0x2) [ 120.821094][ T4988] tmpfs: Unsupported parameter 'mpol' [ 120.866454][ T5000] tmpfs: Unsupported parameter 'mpol' [ 120.942630][ T5005] tipc: 32-bit node address hash set to 420000 [ 122.357320][ T5012] overlayfs: './file1' not a directory 12:38:33 executing program 5: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x7) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') 12:38:33 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x800) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x1c542) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(r3, 0xffffffffffffffff, r5) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x80, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@audit='audit'}, {@audit='audit'}, {@appraise='appraise'}, {@obj_user={'obj_user'}}]}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1ac, 0x0, 0x0, 0x70bd26, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24008894}, 0x0) 12:38:33 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x2c, 0x40009, 0x31}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x4b, 0x1f, 0x9, 0x71, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x1, 0x7, 0x7f, 0xfffff046}}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0x400, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x80, 0x2, 0x3, 0xfd, 0x1, 0x1200}, [@RTA_IIF={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x1f, 0xde69, 0x400, 0x5, 0x3, 0x1ff, 0x3a}, 0x1c) bind$tipc(r0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002b9692b4008b2a170dbf51cbf1faeec36981057f3f1650bb57a3bbdfcd0acbff5ebeb679b39acdfc3bccf1be2d", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf25050000000500020004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10008051}, 0x2004c045) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000180)=0xfffffffb, 0x4) 12:38:33 executing program 4: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xcde}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x4) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000540)='./bus/file0\x00') r1 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x20000000239}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x143, {{0xa, 0x4e23, 0x80000000, @local, 0x8a}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x9, @remote, 0x7f}}, {{0xa, 0x4e20, 0xa1b, @private0, 0xcc}}]}, 0x190) 12:38:33 executing program 2: r0 = epoll_create(0x101) add_key$fscrypt_provisioning(&(0x7f00000001c0)='fscrypt-provisioning\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)={0x3, 0x0, "01d8ec4d3b0059b19edf644a8b9f8ad67b0afe46a32baf0f341c5b93972024b3606d3787f34d9a1ab8bc0080572dddf9cd7b8d675dfc32cf45e94306202c6723a312805d4c1be26f7ca88f95b3cbdfdb648df4a250cb5b35fe47fe2f7873a79b1b821935a9e7328bdff0596c7cd6bd0add6efd7baeac374ad097d1965a08be49e2d59c6803ba549d7a8a9306d6c2f0bcf235d3677c892625715eb94f8fd186f9fd1f1141733acc1776b2ac7147b6db8ddaf47e3d0879bdddf0c50ccd4c1c5a20c40a53bc32"}, 0xcd, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffd) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={{0x3, 0x0, @reserved="a104346ce3a26de1ba3710405a3a2a9c2eb4722db2c1c4a08560bf49b8331eb3"}, 0xf6, r1, [], "5f3b462f9379b64c9933fbb4765e50651c021ad94084128a681398490a25f5800e4cb5382b222b7701f1af9b6b1b43063a23e753faf6d5e863ef02e5a9ad54e4418df234e463417d216b277a2f6761b991da19a0d8d78b2c12c69c650fed452f1c6bb839da007e8fb200ddfc02f55a19234412939290dd9c2fce638cac2f20672f6bcd1ce29629becaef76c011a5457db707adb887b63a531973c28b9141429911aa817235b72dcd8d41edca2d3983e2841d5f7203fdb9cbacfd1f39b6f1ef018ab7b1b4eb1f05e26a7ee31108301bee37cc2a0f4641af47f3c2a910927fc1f4fed252910e111c15665d2fe0380e7756157eb9476e92"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xde, 0xaa, 0x62, 0x8, 0xa4e, 0x4040, 0xcbba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x5d, 0xd, 0x0, [], [{{0x9, 0x5, 0xd, 0x0, 0x20}}]}}]}}]}}, 0x0) 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000001340)=@usbdevfs_connect={0x20}) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000001300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000040)="eaf35602ee2bd9afa19d883f131a29139cf4b830d3daa4492504f9cc04", 0x1d}, {&(0x7f0000000080)="82996d9a81b5b3d5fe09aa2f2fdf7e65948513e430ef1b7e35508aee2a6a7b7106323efddc6c2a8a5166dd408af415edfaf8f9676b8c01e31a044f6f33dbed284c52ce82d09497245c8e3b5081726ffe746a4442f0d8d335bde74677345a81fcee651f0a677ab8fa2f6e3a8d9abff33d83bde441a15b1426fa2cd266de9349a092a5b1b734ea4690f527d81a09d6ec019485686ac368a79ba532b52320ef20b9e4382463029dd0448e84cdc05f18d307c7f2497fd6a456b30ec8c220ea8c3754e905a70645837ac1f595f33cdca041b5224d6eca6e6b558bff76d5c5", 0xdc}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="b0c5d57b97768cfcd0afba04cda82aef2fe5f8b42517205e884baa5a4cb28e258cd5e8d7034cf9f9aeb810d545372b20554af66a699b77be975bbf5508ade7ebfad70eda70f3091b1e1578e565ea251e5aee7316376f88bed4b4fe9fcc065878812c4042ac122f67363d9b54e74c4b9f96d3302c3231d2c833ec29ee061ed96a187d87defcd86104d9cdd5f7cf33e2e06ff0fe0d4d433b74454053c7dd1e926c80717e0db412ec3e742515f6d8", 0xad}], 0x4, &(0x7f0000001280)="67997388d4fbc72111a4014038176ea9f04cd0b18875d4235c78d10b3b8b15764770f731a3ac2692d48016fa172e262a71542ecc9d60121b3a5cc91d5f2b190802", 0x41, 0x4000000}, 0x80) [ 122.408532][ T4942] syz-executor.4 (4942) used greatest stack depth: 20976 bytes left 12:38:33 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x54, 0x90, 0x5c, 0x10, 0x17cc, 0x1010, 0x8d66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x54, 0xf9}}]}}]}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 12:38:33 executing program 1: r0 = socket(0x2c, 0x4, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:33 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000300)={[0x7f]}, 0x8) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000340)=""/235) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffff8) io_uring_setup(0x69b9, &(0x7f0000000480)={0x0, 0x7a65, 0x21, 0x0, 0x125}) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x74, 0x1, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044085}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x20, r5, 0xa85ec0f565c12c5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x43}}}}}, 0x20}}, 0x890) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000440)=@req3={0x0, 0x6, 0x7fffffff, 0x1, 0x76f5, 0xbaf, 0x7fffffff}, 0x1c) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xcb}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x4008000) [ 122.537388][ T5048] fuse: Bad value for 'fd' 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1000, 0x9, 0x9, 0x4, 0x5, 0x9, 0x7}, 0x1c) bind$tipc(r0, 0x0, 0x0) 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0x82000) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) [ 122.712402][ T12] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.782399][ T5003] usb 6-1: new high-speed USB device number 12 using dummy_hcd 12:38:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 12:38:33 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:33 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4aa040, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000041c0), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) [ 122.861542][ T5071] fuse: Bad value for 'fd' [ 122.866479][ T5023] syz-executor.3 (5023) used greatest stack depth: 20848 bytes left [ 122.962330][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 123.032324][ T5003] usb 6-1: Using ep0 maxpacket: 16 [ 123.242477][ T12] usb 3-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice=cb.ba [ 123.251575][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.259689][ T12] usb 3-1: Product: syz [ 123.263959][ T12] usb 3-1: Manufacturer: syz [ 123.268564][ T12] usb 3-1: SerialNumber: syz [ 123.274035][ T12] usb 3-1: config 0 descriptor?? [ 123.342401][ T5003] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8d.66 [ 123.351573][ T5003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.360261][ T5003] usb 6-1: Product: syz [ 123.364742][ T5003] usb 6-1: Manufacturer: syz [ 123.369375][ T5003] usb 6-1: SerialNumber: syz [ 123.375409][ T5003] usb 6-1: config 0 descriptor?? [ 123.604409][ T12] usb 3-1: USB disconnect, device number 12 [ 123.632440][ T5003] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 123.640784][ T5003] usb 6-1: USB disconnect, device number 12 [ 124.282362][ T5003] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 124.382347][ T5002] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 124.522372][ T5003] usb 3-1: Using ep0 maxpacket: 8 [ 124.622387][ T5002] usb 6-1: Using ep0 maxpacket: 16 [ 124.802410][ T5003] usb 3-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice=cb.ba [ 124.811491][ T5003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.820129][ T5003] usb 3-1: Product: syz [ 124.824655][ T5003] usb 3-1: Manufacturer: syz [ 124.829223][ T5003] usb 3-1: SerialNumber: syz [ 124.834961][ T5003] usb 3-1: config 0 descriptor?? [ 124.902380][ T5002] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8d.66 [ 124.911413][ T5002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.919894][ T5002] usb 6-1: Product: syz [ 124.924304][ T5002] usb 6-1: Manufacturer: syz [ 124.928879][ T5002] usb 6-1: SerialNumber: syz [ 124.934529][ T5002] usb 6-1: config 0 descriptor?? 12:38:36 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000000)=""/249, &(0x7f0000000100)=0xf9) bind$tipc(r0, 0x0, 0x0) 12:38:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 12:38:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000340)={0x2, 'vlan0\x00', {0xff}, 0x1}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbe3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@random={'user.', 'user_id'}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 12:38:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1, 0x3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x204cc, 0x4, 0x5, 0xfefffffc, 0x1, 0x3, 0x9bc}, 0x1c) bind$tipc(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x6, 0x7, 0x101}) 12:38:36 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 125.194241][ T5002] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 125.203209][ T5003] usb 3-1: USB disconnect, device number 13 [ 125.207222][ T22] audit: type=1400 audit(1603024716.218:39): avc: denied { block_suspend } for pid=5121 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 125.213402][ T5002] usb 6-1: USB disconnect, device number 13 12:38:36 executing program 2: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x5}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x301000, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) dup3(r1, r0, 0x0) 12:38:36 executing program 1: r0 = socket(0xb, 0x4, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x400, 0x7f, 0x2, 0x4, 0x6, 0x8, 0xfd}, 0x1c) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:38:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0xef41, 0x6, 0x6, 0x6, 0x10001}) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on']) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x1174, r1, 0x630, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0xa20, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x434, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x400, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x8}, {0x2, 0x6}, {0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x8}, {0x0, 0xa}, {0x2, 0x5}, {0x7}, {0x2, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x6}, {0x3}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x6, 0x3}, {}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x7}, {0x5, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x6c, 0x2e, 0x16, 0x36, 0x1, 0x1b, 0x5, 0x48, 0x24, 0x5, 0x1b, 0xec2e07ce082a6b72, 0x18]}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x1, 0xcf, 0x2, 0x436, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x28, 0x58, 0x16, 0xb]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x2}, {0x4, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x4}, {0x4, 0x6}, {0x2}, {0x2, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x3, 0x4}, {0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x3}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x7}, {0x2, 0x1}, {0x4}, {0x5, 0x2}, {0x1}, {0x6, 0x2}, {0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x3, 0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x9}, {0x4, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x3}, {0x3, 0x3}, {0x4, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0xc, 0x12, 0xc, 0x0, 0x1b, 0x48, 0x48, 0x16, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0xb, 0x6c, 0x36, 0x60, 0x1b, 0xc, 0xb, 0x3, 0x7d, 0x6c, 0x16, 0x24, 0x6c, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x9, 0x2, 0x2, 0x6, 0x7, 0x20]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x3790, 0x2, 0x7f, 0x100, 0x8, 0x994]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x2}, {0x2, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {}, {0x0, 0x4}, {0x5, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x5}, {0x7}, {0x3, 0x8}, {0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x48, 0x18, 0x18, 0x93, 0x5, 0x5]}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x18, 0xb, 0x1, 0x1, 0x18, 0x3, 0x30, 0x1, 0x9, 0x4, 0xb, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x5}, {0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {}, {0x2, 0x4}, {0x1, 0xf}, {0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x1}, {0x6, 0x2}, {0x7, 0x3}, {}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x6}, {}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x0, 0x0, 0x979, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x9, 0x7, 0x7, 0x9, 0x8, 0x4d, 0x9]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x16, 0xc, 0x24, 0x48, 0x0]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x4}, {0x7, 0x6}, {0x3, 0x2}, {0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x5}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x5}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x7}, {0x1}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x4}, {0x3, 0xc}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0xc, 0x24, 0xb, 0x24, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x4, 0x62, 0x0, 0x5, 0x441e, 0x22d]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x5, 0x8, 0xe0e5, 0x5, 0x132b]}}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x53, 0x6, 0x24, 0x24, 0x4b, 0x1b, 0x5, 0x2, 0x3, 0x36, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x53f6, 0x2af, 0x5c8, 0x3f, 0x8001, 0xfbff, 0x80, 0x2f4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x9}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x5}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x9}, {0x5, 0x2}, {0x0, 0x9}, {0x3}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x5}, {0x1}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x6}, {0x5, 0x2}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x9}, {0x1}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x5}, {0x4, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x6, 0x16}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x5, 0x4}, {0x4, 0xa}, {0x4}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x404}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x60, 0x6, 0x60, 0x3, 0x24, 0xb, 0x18, 0x5, 0x30, 0x16, 0x30, 0x6, 0x60, 0x30, 0x12, 0x9, 0x1, 0x6, 0x36, 0x30]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x5}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x9}, {0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x3, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7ff, 0x3, 0x376, 0x800, 0x4, 0x4, 0x2]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd, 0x3, 0x9, 0x2, 0x7, 0x59e5, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x12, 0x0, 0x4, 0xb, 0x3, 0x5, 0x16, 0x1, 0x6c, 0x876965d519fc5ace, 0x5, 0x9, 0x6c, 0x3f, 0x0, 0x8, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x5, 0x3}, {0x3}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x60, 0x18, 0x2, 0x6c, 0x24, 0x18, 0x18, 0x16, 0x24, 0x1b, 0x16, 0x48, 0xd8, 0x36, 0x6c, 0xc, 0x2, 0x3d, 0x36, 0x1, 0x9, 0x48, 0x9, 0xf, 0x2, 0x9, 0x1b]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x5}, {0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x3}, {0x1, 0x8}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x11}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x4}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x7, 0x3, 0x400, 0x7ff, 0x2, 0x68c]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x5}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x2}, {0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x30, 0x30, 0x6c, 0x3, 0x9, 0x16, 0x1b, 0x2, 0x16, 0x6c, 0x2, 0x18, 0x60, 0x0, 0x3, 0x48, 0xc, 0x16, 0x24, 0x3, 0x60, 0x2, 0x30, 0x1b, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8000, 0x4, 0x2, 0x5, 0x4, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x24, 0x2, 0x18, 0x48, 0x18, 0x60, 0x5b, 0x18, 0xb, 0xb, 0x3, 0x6, 0x16, 0xc, 0x4, 0x16, 0x6c, 0x3, 0x16, 0x48, 0x48, 0x30, 0x16, 0x30, 0x18, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0x8}, {0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x7}, {0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x1, 0x6c, 0x9, 0x16, 0x48, 0x3, 0x0, 0xdc, 0x2, 0x60, 0x1, 0x1, 0xc, 0x1b, 0x18, 0x6d, 0x60, 0x1, 0x36, 0x12, 0xc, 0x8e314fcc24980a34, 0x6c, 0x16, 0x3, 0x4, 0x6, 0x2, 0x1b, 0x12, 0x6]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x79, 0x100, 0x4, 0xffc0, 0x1, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc9, 0x9, 0x3, 0x2, 0x3, 0x3, 0x2, 0x3ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x7}, {0x5, 0x9}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x3}, {}, {0x5, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x5}, {0x2, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x4, 0xa}, {}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x6}, {0x2, 0x6}, {0x3}, {0x3, 0x1}, {0x1}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x1}, {0x7}, {0x2, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x7}, {0x0, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x6c, 0x54, 0x48, 0xb, 0x30, 0xb, 0x1b, 0x1b]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x4}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x6}, {0x3, 0x4}, {0x0, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0xe2, 0x3f, 0x3, 0x6ddf, 0x40]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x5, 0x6, 0x12, 0x6c, 0x2, 0x0, 0x24, 0x60, 0x16, 0x48, 0x18, 0x6, 0x30, 0x12, 0x48, 0x9, 0x24, 0x4, 0x1b, 0x2, 0x30, 0x12, 0x26, 0x18, 0x18, 0x3, 0x6, 0x16, 0x30, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x3, 0x2, 0x41, 0x18, 0x18, 0x3, 0xc, 0x10, 0x9, 0x60, 0x4, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x3, 0xb98, 0xfff, 0x9, 0x40e9, 0x2, 0xf1ff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x12, 0x12, 0x36, 0x18, 0x3, 0x4, 0x1b, 0x3b, 0x18, 0x30, 0x36, 0x9]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x9}, {0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x2, 0x6}, {0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0xffff, 0x70e, 0x5, 0x1, 0xff33, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x12, 0x46353ab912593635, 0x24, 0xc, 0x1b, 0x3, 0x16, 0x1, 0x16, 0x30, 0x48]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x1, 0x2, 0x2, 0x24, 0x24, 0x0, 0x1, 0xc, 0x1b, 0xb, 0x6, 0xb, 0x24, 0x4, 0x48, 0x3, 0x36, 0x6c, 0x1b, 0x24, 0x16, 0x4, 0x30]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0x1a6, 0x4, 0x2, 0x2, 0x6, 0x401]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x18, 0x2, 0x36, 0x4, 0x16, 0x24, 0x41, 0x3, 0x3, 0x30, 0x7a, 0x30, 0x6c, 0x6, 0xb, 0x5, 0x0, 0x48, 0x18, 0x6c, 0x48, 0x6c, 0x18, 0x17, 0x3, 0x24, 0x60, 0x48, 0x1f, 0xe3ec3d5657028ff5]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x101, 0x7, 0x1, 0x6, 0xd84, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x6, 0x8001, 0x4467, 0x800, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x16, 0x18, 0x36, 0x9, 0x36, 0x48, 0x60, 0x0, 0x3, 0x18, 0x2, 0x60, 0x0, 0x1b, 0xe, 0x2d, 0x16, 0x9, 0x2, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x36, 0x36, 0x1, 0x16, 0x16, 0x30, 0x48, 0x48, 0x2, 0x6c, 0xb, 0x2, 0x6, 0x1, 0x30, 0x1, 0x16, 0x24, 0x4, 0x60, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x4, 0x7ff, 0x1, 0x3ff]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x8}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x4, 0x6}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x3ff, 0xff01, 0x1, 0x8, 0x5, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x0, 0x2, 0x5, 0x7fff, 0x3f, 0xffff, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9c2ddeec2862a1b6}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x30, 0x5, 0x30, 0x6, 0x18, 0xb, 0x1b, 0x60, 0x12, 0x48, 0x48, 0x24, 0x4, 0x16, 0x30, 0x1b, 0x2, 0x9, 0x6, 0x60, 0x16, 0x30, 0x36, 0xc, 0x36, 0x52, 0x30, 0x6c, 0x16]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x22]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x9}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x4}, {0x4, 0x7}, {0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x1}, {0x5, 0xa}, {0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x4}, {0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x5}, {0x6}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x7}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x484, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x414, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x410, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x0, 0x5, 0x9634, 0x9, 0x1, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {}, {0x6, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x7}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x6}, {0x4}, {0x1, 0x6}, {}, {0x0, 0x4}, {}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x1d, 0x48, 0x6c, 0x0, 0x30, 0x48, 0x18, 0x0, 0x1, 0x6c, 0x30, 0x2, 0x36, 0x1b, 0x30, 0x0, 0x3, 0x12, 0x1b, 0x16, 0x4, 0xb, 0x3, 0x1, 0x60]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x7, 0x9}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x6}, {}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x16, 0xc, 0x6, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb, 0x7ff, 0x101, 0x2, 0x3e3, 0x3ff, 0x0, 0xf000]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0x0, 0x3ff, 0x1, 0x4, 0x9, 0x22]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x46, 0x8, 0x2, 0x2, 0x8, 0x3f, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbb7, 0x9, 0x7, 0x0, 0x6, 0x4, 0xe8, 0x2]}}]}, @NL80211_BAND_2GHZ={0x10c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x24, 0x9, 0xb, 0x26, 0x9, 0x18, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x1}, {0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x7, 0x6}, {0x0, 0x9}, {0x6}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x3}, {}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x2}, {0x6, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {}, {0x4}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x5}, {0x1, 0x8}, {0x3}, {0x5, 0x4}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x7}, {0x6, 0x9}, {0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x2}, {0x4, 0xa}, {0x3, 0xa}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x1}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xfffa, 0x80, 0x7f, 0x100, 0x7, 0x1, 0xa840]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x98677f0c9df930d, 0xc, 0x5, 0x5, 0x1b, 0x4, 0x9, 0x69, 0x1b, 0xec, 0x3, 0x18, 0x4, 0x5, 0x24, 0x6, 0x26, 0x1, 0x3, 0x4, 0x36, 0x18, 0x4, 0x48, 0x30, 0x4, 0x60, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x7}, {0x5, 0x1}, {0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x15}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffe, 0x2, 0x8, 0x40, 0xfffe, 0xff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf83a, 0x8, 0x3f, 0x2, 0x1ff, 0x7, 0xa0, 0x1000]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x1}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0x7}, {0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x8}, {0x7, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x6, 0x8, 0x7, 0x7, 0xc9, 0x400]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0xb, 0x9, 0x36]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x7a, 0x9]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x1b, 0x3, 0x12, 0x24, 0x6c, 0x36, 0xc, 0x2, 0x6c, 0x3, 0xb, 0x3, 0x7b, 0x1b, 0x6, 0x36, 0x9, 0x1, 0x24, 0x9, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x900, 0x0, 0x2, 0x9, 0x40, 0xe7a, 0x401]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0xc, 0x2, 0x16, 0x9, 0x2, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x80, 0xfc, 0x1f, 0x27cd, 0x8, 0x100]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x6, 0x9, 0x6, 0x400, 0x0, 0xff]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x1}, {0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x5}, {0x7}, {0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {}, {0x5, 0x2}, {}, {0x4, 0x6}, {0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x5}, {0x1, 0x7}, {0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x4}, {0x7, 0x9}, {}, {0x2, 0x2}]}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfffd, 0x101, 0x1000, 0x9, 0xf7d, 0x7, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x75, 0x51, 0x4, 0xfffd, 0x1, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x4}, {0x5}, {0x0, 0x6}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x2}, {0x7, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x5, 0x9, 0x18, 0x60, 0x6, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x9, 0x48, 0x49, 0x1, 0x6c, 0x1, 0x1b, 0xb, 0xc, 0x6c, 0x6c, 0x16, 0x5, 0x9, 0x18, 0x16, 0x48, 0x6, 0x3, 0x60, 0x36, 0x3, 0x12, 0x7a, 0x60, 0x30, 0x1b]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x3, 0x16, 0x3, 0x6, 0x6c, 0xc, 0x1b, 0x1efcdfe4b8e6e45e, 0x1b, 0x16, 0x18, 0x30, 0x12, 0x24, 0xc, 0x36, 0x36, 0x16, 0x18, 0x6c, 0x60, 0x60, 0x36, 0x9, 0xb, 0x12, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x44]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x8}, {0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x16, 0x6c, 0x24, 0x6, 0x36, 0x53, 0x4d]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x1, 0x3, 0x36, 0xb, 0x6, 0x30, 0x16, 0x3, 0x2, 0xb, 0x1b, 0x18, 0x60, 0x12, 0x7d, 0x3, 0xb, 0x24, 0x60, 0x60, 0x9, 0x30, 0x1b, 0x36, 0x6, 0xc, 0x28, 0x6, 0x2]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x81, 0x3, 0x70, 0xfca, 0x8, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x1000, 0x30e, 0x1f, 0xff00, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x9, 0x10, 0x8, 0x1, 0x8, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x3, 0x9, 0x2, 0x6c, 0x3, 0x4, 0x16, 0x5, 0xc]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x9, 0x9, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x1174}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000001640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x78, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x3f, 0x5b, 0x101, 0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x8, 0x101]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x1000}, 0x4040111) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x0, 0x7, 0x8000, 0x1, 0x2, 0x200, 0x3ff}, 0x1c) bind$tipc(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5000f4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2) 12:38:36 executing program 4: r0 = socket(0xb, 0x4, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x400, 0x7f, 0x2, 0x4, 0x6, 0x8, 0xfd}, 0x1c) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5000f4) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5000f4) write$P9_RWALK(r2, &(0x7f00000001c0)={0x57, 0x6f, 0x1, {0x6, [{0x10, 0x1, 0x6}, {0x0, 0x3, 0x4}, {0x20, 0x4, 0x4}, {0x22, 0x0, 0x8}, {0x80, 0x4, 0x5}, {0x40, 0x4}]}}, 0x57) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x5000f4) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffff8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x24000, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffff8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r5, 0x0, r7}, 0x10) [ 125.446533][ T5143] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 125.461589][ T5143] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 12:38:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2, 0x9) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000540)="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", 0x183) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xc, 0xfff, {0x52, 0x8005, 0x5, {0x0, 0x7}, {0x1, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x0, 0x9, {0x0, 0x1f}, {0x7, 0x5}, @cond=[{0x3, 0xfe01, 0x9, 0x9, 0x7, 0x5}, {0x6, 0x1, 0x9, 0x81, 0x9, 0x6}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x410040, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x4, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0xe53c, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, 0xfffffffb, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) getpid() syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f7b3178666c6f707079268f"]) 12:38:36 executing program 1: r0 = socket(0x1e, 0x4, 0x8000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:36 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:36 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1, 0x3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x204cc, 0x4, 0x5, 0xfefffffc, 0x1, 0x3, 0x9bc}, 0x1c) bind$tipc(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x6, 0x7, 0x101}) 12:38:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xf, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xd01cc000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x187) r5 = dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000484) unlinkat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 12:38:36 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000080)='overlay\x00', 0xc800, &(0x7f0000000040)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x3) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000100), 0x4) sendfile(r0, r0, 0x0, 0x7fff) 12:38:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@set={{0x40, 'set\x00'}, {{0x1, [0x0, 0x1, 0x0, 0x4, 0x2], 0x3, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x7ff, 0x3, [0x2f, 0x40, 0x36, 0x35, 0xa, 0x24, 0x18, 0x1a, 0x2, 0x2b, 0x23, 0xe, 0xe, 0x13, 0x29, 0x2c], 0x0, 0x1ff, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @broadcast, 0xff, 0xffffff00, 'ip_vti0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x8, 0x1, 0x20}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x1000, 0x7fffffff]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x7ff, 0x4, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, 0x0, 0x0) 12:38:36 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000040)={{{0x8}}, 0x36, 0xf677, &(0x7f0000000000)="e074078162b009faea0724a6ded2494690d2bf223909f234e3e0fa25b86deb95aa5d33fae1d240d06074b46656d581a694dba4fb399e"}) 12:38:36 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000000000000001791656bcf8b0500000000"], 0x14}}, 0x0) 12:38:37 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40001, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x4}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 126.035561][ T5197] FAT-fs (loop3): Unrecognized mount option "do{1xfloppy&" or missing value 12:38:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2, 0x9) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000540)="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", 0x183) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0xc, 0xfff, {0x52, 0x8005, 0x5, {0x0, 0x7}, {0x1, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x0, 0x9, {0x0, 0x1f}, {0x7, 0x5}, @cond=[{0x3, 0xfe01, 0x9, 0x9, 0x7, 0x5}, {0x6, 0x1, 0x9, 0x81, 0x9, 0x6}]}}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x410040, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x4, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0xe53c, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, 0xfffffffb, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) getpid() syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f7b3178666c6f707079268f"]) 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:37 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) bind$tipc(r0, 0x0, 0x0) 12:38:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100)=0x2, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x187) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 126.173581][ T5216] x_tables: duplicate underflow at hook 3 [ 126.214783][ T5212] FAT-fs (loop3): Unrecognized mount option "do{1xfloppy&" or missing value 12:38:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=@ipv4_newroute={0x34, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private0}}]}, 0x34}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x1f, 0x2, 0x43, 0x0, 0x0, 0x7fffffff, 0xc000, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x4013, 0x8, 0x8001, 0x8, 0x5, 0x7ff, 0x8}, r1, 0x6, 0xffffffffffffffff, 0x6) 12:38:37 executing program 1: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x62, 0x3, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0xb8, 0x100, [0x7, 0x9]}}]}, 0x28) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:37 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x7fff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcpc_exec_t:s0\x00', 0x22, 0x0) 12:38:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x94300000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x105, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x10000}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x20010010) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') write$binfmt_misc(r0, 0x0, 0x0) openat$cgroup_freezer_state(r3, &(0x7f00000001c0)='freezer.state\x00', 0x2, 0x0) 12:38:37 executing program 1: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x0, 0x40, 0x1, 0x8, 0x0, [0x2, 0x10001, 0x81, 0x4]}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:37 executing program 4: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x62, 0x3, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0xb8, 0x100, [0x7, 0x9]}}]}, 0x28) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:37 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80, 0x80800) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendfile(r1, r2, 0x0, 0x8400fffffff8) write$P9_RREMOVE(r2, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x0, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:37 executing program 5: setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0xb3) pwrite64(r2, &(0x7f0000000040)="01", 0x1, 0x0) 12:38:37 executing program 1: r0 = socket(0xf, 0x80000, 0x400) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x43fb, 0x2, 0x0, 0x5}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @identifier="f817befdcb57769b34e959e8021bd71b"}}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000100)={0x1, 0x5}) 12:38:37 executing program 3: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000540)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f0000000200)=@random="6695da16c92f0c6f7d3ffac2abc9cad45bb6ac7dfbd4", 0x16, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300)='fuse\x00', 0x80000, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfsfloor={'smackfsfloor', 0x3d, './cgroup.cpu/syz0\x00'}}, {@fowner_gt={'fowner>'}}]}}) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000000000429bd7000ffdbdf250a001000", @ANYRES32=0x0, @ANYBLOB="06000000140001000000000000000000000000000000000014000100ff0200000000000000000000000000010800020001000000080002000b000000080002000c000000"], 0x5c}}, 0x40) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) rmdir(&(0x7f0000000340)='./bus/file0\x00') 12:38:37 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x0, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f00000001c0)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x8}}, 0x24, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000140)='./bus/file0\x00', 0x1, 0x7, &(0x7f0000000980)=[{&(0x7f0000000440)="413ac9f5b3baffd8d6a4f389ecf02ca25f0a9e0b3cf75d363062f2a932525be95bfc0ac23e00323b5b98570c272657fb808e7da682b613c23c66976186c59b8e8bd5743e13ed39f83576d112e8ecdf86280acbda89f20ad1ef3d831fd2c22975172f3f3fb03f74cd543d3b0ee5a17afe0f8180020b3047b1382cd20761710f45c21ec27322cf7da17ee60e1a", 0x8c, 0x1f}, {&(0x7f0000000180)="d2ddd720b837267087a85bc21394112a5f8c3589dc1c3a8490", 0x19, 0x1131f73f}, {&(0x7f0000000500)="28ff8b3cab78c8962933fa3a131a19246091817efdc64f9302ab56afb613cfb15a91b89cc7211e212027787358cc15a7629558abd6505a1eeb454628b1219c4ee4eeec4c6b87441dbb2d4b6fa3c8292c1cca584296a7512171288c12dee29574646744c112ddbe3d8a2e54768570300733ce415e98ffc2326a88bb95ecb7a703b037c86c4897567cc0a99d832d62a888f6f8227adc6a526352549cf0fce56a474d6291829cccfe1c47c574f8885d8b6c5908", 0xb2, 0x8}, {&(0x7f00000005c0)="22d47e17c25627f0f1cb81dd6330b384fb2811417617410e429e72e8ab1e9b435c902c8d35b68453bd85339a40f12b62baf85c4b591792ef438b0f98a8150500d38aeb73dba6fa9e4578a2b19bcf9aea8b7a20644dde71420d43f893c0b3a0fb08d427312c1ae0e8471885a3cf65e546401f80219e6adbf54c06fe5744394238feba6afd9dde44e29bca7bb81a3830741b4b54217bbc9ca759d2b5819a", 0x9d, 0x78dd}, {&(0x7f0000000680)="7494948cf81224de4430717d876d2e790c3bf365fd087d5cbea21ee0d135bb0a0fb825daefa32378faaa244be21a2e803500a0fc12f313302021f61477698e340f9db66669ac8c2c480857efd4bb0e3bd74e81af3e2b08ba52026c55bf8eee5f023a1dc090c6194b6061d5b1531def7efd19f2d9d9e4be302a7edf2504b37dd86fc9630d7637f40f82707d66856b2d5665a671132169fbf63c44ea661c4954160f154d380dbf44454084ca5f4030e336ad2a191dafaa511aed96ab6715850a43496fb407d983d2626f2aa3a4d2ab01ef0323687c", 0xd4, 0x1}, {&(0x7f0000000780)="5ef8bf23131bbc8ea7b2064dd74a2819f63227ba611d1f5b2c7a10e88b6182dea60c2de49c33957e2d49301afd3e3a88957619e98055f3915adc8c15cf35f4e7844c38c7c032a90215831f28a4d532fbebf679985063ba8f75350d8f68bf225b46e830ff1c6d826c284130ae417b90c4be3da485598d51335eb78b1eb5b95ae63984491f767f98615f6d7cb6360fc887dc85c6c1bca161d31d83c330a107f54d8d5957ce26476961892f55a567cdadac42ce8ca976fbeaa6ce60d98a49ac726c62d0cdb98fe7e8423e113db0c06b34cc47f289a25ce174bcb8554f5d6619bf9b8cb66820d5022e087d4d632e4d43ffd8227f", 0xf2, 0x81}, {&(0x7f0000000880)="c62ef29bb8d95b56ffbe7536bda96df6c068f34aa54c758bae669e2a5436bcb8072062369bf59d2cc5ffd9c0d1f6fb14fb730581e72c847d70f2e02b293ee0ea2c22d1656bb5b057023099db9661bfc1d255efb51586ef282d13c73000464fc658265e3f2f99c93b5b331ade73aaad6582abb41344", 0x75, 0x8}], 0x1000, &(0x7f0000000a40)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@test_dummy_encryption='test_dummy_encryption'}, {@resuid={'resuid', 0x3d, r1}}, {@user_xattr='user_xattr'}], [{@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}]}) [ 126.534252][ T22] audit: type=1400 audit(1603024717.548:40): avc: denied { relabelto } for pid=5234 comm="syz-executor.2" name="NETLINK" dev="sockfs" ino=23673 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dhcpc_exec_t:s0 tclass=netlink_route_socket permissive=1 [ 126.578432][ T5272] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 126.605454][ T5272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5272 comm=syz-executor.3 [ 126.620172][ T5280] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 126.623460][ T5279] overlayfs: './file1' not a directory [ 126.636902][ T5272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5272 comm=syz-executor.3 12:38:40 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x0) io_setup(0x400, &(0x7f0000000000)) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) 12:38:40 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x0, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:40 executing program 1: r0 = socket(0x1e, 0x4, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000040)={r1, r2+10000000}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:40 executing program 5: unshare(0x44000600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x200, 0x48000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xfec0ffff00000000}}}) 12:38:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x102, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() dup3(0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x400000, 0x0, 0x1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x5, 0x1, 0x0, '\''}}, 0x22) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000100)) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) 12:38:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00800007000000050000b9dceca009bdfe760000fd299014aaf5ffffff0028d4d6"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x6e, 0x8, 0x42, @remote, @private0, 0x7800, 0x40, 0x10001, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x40, 0x0, {{0x3b, 0x4, 0x1, 0x19, 0xec, 0x68, 0x0, 0x7f, 0x4, 0x0, @loopback, @local, {[@cipso={0x86, 0x47, 0x3, [{0x2, 0x2}, {0x7, 0x4, "191c"}, {0x7, 0xb, "c9d10890903a717bda"}, {0xb, 0x9, "5d3bb2c7d8cd14"}, {0x1, 0x5, "c9bf12"}, {0x7, 0xb, "fb05aabc74e5871922"}, {0x2, 0xf, "a397ddb20fd693bf8a67e458a4"}, {0x0, 0x8, "658770c58408"}]}, @generic={0x89, 0xb, "c1efaaf36c298422f3"}, @end, @timestamp_prespec={0x44, 0x54, 0xef, 0x3, 0xe, [{@local, 0x4}, {@multicast2, 0xcdbf}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0x1f}, {@local, 0x90}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@remote, 0x5}, {@empty, 0x80000000}, {@multicast2, 0x8}, {@loopback, 0xd4dd}]}, @ssrr={0x89, 0xf, 0xb4, [@rand_addr=0x64010101, @remote, @local]}, @ssrr={0x89, 0x1f, 0xd, [@multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r5, 0x10, 0x20, 0x7, 0x4e99e06a, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0xf9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r5, @ANYBLOB="00800007000000050000b9dceca009bdfe760000fd299014aaf5ffffff0028d4d6"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x6e, 0x8, 0x42, @remote, @private0, 0x7800, 0x40, 0x10001, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', r5, 0x10, 0x700, 0x40, 0x0, {{0x3b, 0x4, 0x1, 0x19, 0xec, 0x68, 0x0, 0x7f, 0x4, 0x0, @loopback, @local, {[@cipso={0x86, 0x47, 0x3, [{0x2, 0x2}, {0x7, 0x4, "191c"}, {0x7, 0xb, "c9d10890903a717bda"}, {0xb, 0x9, "5d3bb2c7d8cd14"}, {0x1, 0x5, "c9bf12"}, {0x7, 0xb, "fb05aabc74e5871922"}, {0x2, 0xf, "a397ddb20fd693bf8a67e458a4"}, {0x0, 0x8, "658770c58408"}]}, @generic={0x89, 0xb, "c1efaaf36c298422f3"}, @end, @timestamp_prespec={0x44, 0x54, 0xef, 0x3, 0xe, [{@local, 0x4}, {@multicast2, 0xcdbf}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0x1f}, {@local, 0x90}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@remote, 0x5}, {@empty, 0x80000000}, {@multicast2, 0x8}, {@loopback, 0xd4dd}]}, @ssrr={0x89, 0xf, 0xb4, [@rand_addr=0x64010101, @remote, @local]}, @ssrr={0x89, 0x1f, 0xd, [@multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x198, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r11, r10, 0x0, 0x100000003) 12:38:40 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:40 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2, 0x1a, 0x6, 0xffffffff}]}, 0x10) bind$tipc(r0, 0x0, 0x0) 12:38:40 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x3f}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sched_rr_get_interval(0x0, &(0x7f0000000380)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000002c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, r0, 0x9, r1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={@private2, 0x9}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) 12:38:40 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:40 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:40 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4004880) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[], [{@uid_lt={'uid<', 0xee00}}, {@obj_role={'obj_role', 0x3d, '-#$'}}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, '.{..'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat'}}]}) 12:38:40 executing program 5: unshare(0x40040000) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @ipv4={[], [], @multicast1}, @mcast2={0x0, 0x8}, 0x40, 0x0, 0x10000000}}) 12:38:40 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x3, 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24044011) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x11, &(0x7f0000000200)=""/20, 0x14, 0x9ac42000}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x100000530) 12:38:40 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000400)=""/140, &(0x7f00000004c0)=0x8c) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000200)) sendmsg$unix(r0, &(0x7f0000001940)={&(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000580)="348bda43a7fef6bba899412cee948f2a9a1ebccf95e8acf9fa23f75778cbb4a1565fc53ee01b68946d9851cc51a21c9301a6e87b0a4de96fa7db6f96b7994ac1645b67a05dbd6e3f48d4c39fec8ab5948804fcb27c94d7b09657eba4765bf4512c925e75e426b1f95b702cf8671c5fbaeda0b07127227228cb2177dc763fa7bf29ae84ad35c2db9a9def2a470c2c388874bca192f71b7eb8b337491e4c60915d817a7a49d966cfdc531f28b83bb9a1c5fbe63242f1dfc6318fd895dc976e3d9bb20103f899d1", 0xc6}, {&(0x7f0000000680)="f25fef3594687d6a9d7917358d91727b9ca3cf9d7be4dbfa4a24ea40df5818f1e13273c89bcd77d4750300799bd52382f9c5dcc319c4d3e14317c3594eb2885a5a3eab4dec0e97b9754554614d1f12580980d0c9858f2ac7ef3e5e3d1beec74e45f125ebd776334acc23273326709491a0f6e1d99afbb4ca86cf164dae6d8a776a7ba1b2b31313570f53d1e54c268e51e5a3987ab2", 0x95}, {&(0x7f0000000280)="697c475a83b147d3b7db5d49c3b0b6063be750b2e607454c4e5fffbefdadfa2a0a5ff1d7215519794e5fdd485a94f725b90e665233249f", 0x37}, {&(0x7f0000000740)="c53a214df85b88ba2ea30b3fe7a21e2e10d8a416acbcb64f4bf3b9c1a3251b30010cd91fb0beff6a8ae76a8e45533c3071d10882135ceb6a1793d7d3c7e6a7d44d2499a92a00dcc730d9ea3ecd1ef0d897e231d2f46b16b33ca5ff29bae09083a648", 0x62}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="5eec16577fb10e6a91f2229326df1406577515d59244d9de043d301bdd2cd135312a4b4f0ce0cc41e57208010e9ba12c8568edecbd0adfde9e92c590ec34133e8a303fef7ee3bae14868fc8718756c31dc5eaaa1334866fb049b39f06b359604374e6445a0700df4a670a9abc4e9f4901a6d7c83e80c0422897550f04257e5376d8d515492a8e05a5bac91c51ca45812", 0x90}, {&(0x7f0000000340)="dbc453ed5599e033b307457fe9a9053a64c7137120cf648e243e98e42d086302606a9955", 0x24}, {&(0x7f0000001880)="922ab4f71a9d4efbf23ac39b625b33", 0xf}], 0x8, 0x0, 0x0, 0x801}, 0x41) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000002b00)={{0x2, 0x100, 0x8, 0x9, 0x0, 0x2f}, 0x283, [0xf54, 0x2, 0x400, 0x7fff, 0x6, 0x0, 0x4, 0x7, 0x40, 0x8, 0x7fff, 0xffffffff, 0x5, 0x200, 0x6a4, 0x8, 0x3f, 0xef4f, 0x8, 0x7, 0x200, 0x1000, 0x3, 0x8000, 0x1, 0xd5ec, 0x97, 0x5, 0x3f, 0x5, 0x6040, 0x358, 0x8, 0x3, 0x0, 0x4, 0x1000, 0x5, 0x82, 0x7c7, 0x7ff, 0x7ff, 0x5, 0x2, 0x80000001, 0x1f, 0x8, 0x9, 0x400, 0x400, 0xf0e, 0x3ff, 0x6, 0x10001, 0x8000, 0x0, 0x6, 0x4, 0x3, 0x1, 0x7, 0x93e3, 0x4, 0x2, 0x1, 0x8, 0x1, 0x8001, 0x2, 0x3f84, 0x6, 0x1ff, 0xffffffff, 0xffffffff, 0x8, 0x6, 0x29, 0x10000, 0x20, 0x7, 0x2, 0x4, 0x8000, 0xffff, 0x6, 0x3, 0xf3e9, 0x3, 0x5b, 0x9, 0x0, 0xffffffff, 0x40000000, 0xfffffffb, 0x4, 0x2, 0xfff, 0x8001, 0x8, 0xfffffff8, 0x3, 0x1, 0x200, 0xfffffff7, 0x3, 0x9, 0x2ee0, 0x0, 0x4, 0x81, 0x9, 0x7fff, 0x6, 0x7314ea80, 0x1000, 0x6, 0x9, 0x3ff, 0x5, 0x0, 0x3, 0x4, 0x9f, 0x8001, 0x8, 0x7fff, 0x4, 0x0, 0xf6, 0x7ff, 0x80000000, 0x8000, 0x27c, 0x1, 0xfc8, 0x1, 0x3, 0xdc, 0x1, 0x1, 0x80000001, 0x3, 0x7fe, 0x3, 0x3, 0xff, 0x9, 0x7, 0x770d, 0x8, 0x6, 0x3f, 0x1, 0x4, 0x6, 0x3, 0xfffeffff, 0x7fffffff, 0x27, 0x3, 0xffffffff, 0x48a2a1af, 0x5, 0x80000000, 0x7f, 0x699, 0x3aba, 0x1, 0x1000, 0x9, 0x68d7, 0xffffffe0, 0x8000, 0x4f3, 0x9, 0x101, 0x0, 0x1, 0x8, 0x0, 0x3ff, 0x5, 0x9947bc, 0x0, 0x5, 0x8, 0xfff, 0x2, 0xa57, 0x4, 0x1f, 0x3, 0x7ff, 0x10001, 0x7ff, 0x10000, 0xfff, 0x2, 0x3ff, 0x2, 0x2, 0x1, 0x2, 0x0, 0x8, 0x4, 0xb454, 0x6, 0x8001, 0x7, 0x4, 0x8904, 0x5, 0x0, 0x6, 0x1, 0x9, 0x40, 0x101, 0xfffffc01, 0x0, 0xbd9, 0xfffffffa, 0x5, 0x2, 0x3, 0x3, 0x7, 0x400, 0xffffffff, 0x100, 0x8000, 0x9, 0x1ff, 0xffff0000, 0x0, 0xfce, 0x101, 0x1ff, 0x8, 0x7b4, 0x1, 0x0, 0xffff3813, 0x0, 0x8836, 0x401, 0xb6a, 0x900, 0x0, 0x0, 0x1000, 0x8000, 0x7fff, 0x8, 0x5, 0x1, 0x5, 0x80, 0xe4, 0x5, 0x40, 0xffff, 0x10001, 0xfd, 0x51, 0x3ff, 0x8, 0x9, 0x0, 0x1c05, 0x3, 0x1, 0x6, 0x5, 0x6, 0x80000001, 0x38, 0x2, 0x81, 0x8000, 0x10000, 0x80, 0x7, 0x200, 0x1ff, 0x5, 0x8, 0x1, 0x9, 0x8, 0x1, 0x74, 0x2, 0x6, 0x2, 0x7, 0x0, 0x79d91100, 0x7ff, 0x6, 0x7f, 0x80000001, 0xc0000, 0x9, 0x8, 0xc6, 0x9, 0x7fffffff, 0x1000, 0x3, 0x9b, 0x1, 0x100, 0x3f, 0x200, 0x5, 0x7ff, 0x34ba, 0xffffffff, 0x4, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x58c, 0x3b, 0x0, 0x200, 0x3, 0x7, 0xfffffffd, 0x1, 0x5, 0x6, 0x9, 0x0, 0x4, 0x4, 0xe8b, 0x4, 0xab0, 0x100, 0x3, 0x8000000, 0x5, 0x0, 0x1, 0x200, 0x0, 0x87, 0x5, 0x4, 0x0, 0x7, 0x0, 0x80000001, 0x0, 0x7, 0x16, 0x2, 0x0, 0xada, 0x6, 0x101, 0x3f, 0x6, 0x8, 0xc5b, 0x7, 0x4, 0x3b, 0x7, 0x0, 0x8, 0x8, 0x9, 0x8001, 0x0, 0x83a, 0xfff, 0x800, 0x8000, 0x2, 0x5ca033d, 0x7fffffff, 0x20, 0x6, 0x40, 0x3000, 0xce, 0x28c5, 0x7ff, 0x6, 0x6, 0x7, 0x6, 0xffffcf2a, 0x7ff, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0x3, 0x1, 0x6, 0xd0, 0xfffffffe, 0xe6a3, 0xfff, 0x5, 0xd24, 0x597, 0x3d83, 0xffff, 0x1000, 0x6, 0x0, 0x5, 0x7bfa, 0x2, 0x9f2, 0x200, 0x40, 0x96af, 0x7fffffff, 0x1, 0x1, 0x3, 0xc63, 0x0, 0x9f2, 0xfffffffe, 0x4, 0x401, 0xe1, 0x7, 0x6278, 0x101, 0xfff, 0x5, 0xff, 0x6, 0xfffffff7, 0x74cf, 0x4, 0x6, 0x60, 0x5, 0x3, 0x5, 0xb31, 0x54c, 0x1f8, 0x3, 0x2, 0x96cb, 0xc2, 0x8, 0x5, 0x5, 0x3, 0x3ff, 0x50, 0x9, 0x3, 0x2, 0x80, 0x1, 0x81, 0x40, 0x0, 0x1, 0xd5, 0x4b, 0x7ff, 0x7, 0xfffffff7, 0x2, 0x8, 0x2, 0x4, 0x6, 0x3, 0x2, 0x400, 0x20, 0x4, 0x0, 0x8, 0xff, 0xc6, 0x1, 0x6, 0xff, 0x6, 0xcfef, 0x7041a101, 0x1ff, 0x4, 0x0, 0x0, 0x20, 0x6, 0x5963, 0x1, 0x2, 0xd56, 0x10000, 0x8000, 0x3ff, 0x6, 0x8, 0x1, 0x7ff, 0x5, 0x3178d924, 0x5, 0x1, 0xfffffffd, 0x7, 0x55d, 0x8, 0x10001, 0x2, 0x0, 0xffff, 0x20, 0x9, 0x6, 0x5, 0x800, 0x7, 0x10000, 0x454, 0x3, 0x10001, 0x1, 0x1, 0x9, 0x3, 0x3f, 0x200, 0x8001, 0x9, 0xc0000, 0x800, 0x1, 0x7a938e21, 0x3, 0x7, 0x401, 0x80, 0x1ff, 0x1, 0xed1, 0x2, 0x5, 0xff, 0x3, 0x4, 0x1, 0x6, 0x9, 0x4bb868e7, 0xfffffffe, 0x6, 0x6, 0x20, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x5, 0x6, 0x6, 0x0, 0x5, 0x20, 0xffff, 0xa0b0, 0x0, 0x2, 0x7, 0x1, 0x4, 0x401, 0xb, 0x7, 0x6, 0x9, 0x200, 0xff, 0x7, 0xa7b, 0x1, 0x22, 0x10000, 0x3, 0x403, 0x8, 0x3, 0x51a748fb, 0x5, 0x101, 0xfffff001, 0x4, 0x6, 0x3, 0x10000, 0x100, 0x9, 0xaa6, 0x40, 0x1fcf, 0x7ff, 0x1c0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x4, 0x1f, 0x1, 0x5, 0x2, 0xa92, 0x306d, 0x10000, 0x1, 0x140daecc, 0x2, 0x8000, 0x8, 0x7fff, 0xff, 0x60, 0x3, 0x1ff, 0x20, 0xe, 0x7fffffff, 0x6, 0x1ff, 0x6, 0x9, 0x81, 0x400, 0xfffffe00, 0x7, 0x1f, 0x6, 0x3671c90a, 0x1, 0x1, 0x0, 0x95, 0x4, 0x2, 0x6, 0x7, 0x6, 0x4000, 0x2, 0x8, 0x4, 0x1, 0x8, 0xd5e, 0x1, 0x8, 0x9, 0x2, 0x7, 0x1, 0x5, 0x1, 0x4, 0x40, 0x7, 0x8, 0x0, 0xd1c6, 0xc2, 0x3ff, 0x400, 0x1, 0x5e, 0x1f, 0x7, 0xffffffff, 0xe5, 0x91c, 0xdc, 0x1, 0x4, 0x1, 0x3ff, 0x1, 0x3, 0x8, 0x9, 0x5, 0x21be, 0x40, 0x100, 0x1f, 0x1ff80, 0x3ff, 0x0, 0x1, 0x19b0, 0x7f, 0x96, 0x400, 0x2, 0x0, 0xfffffeff, 0x1, 0x10000, 0x8, 0x3, 0x7, 0x1ff, 0x87, 0x1, 0xfff, 0xffffffa7, 0x0, 0x5, 0x7ff, 0x80000000, 0x8000, 0x2, 0x8, 0x80, 0x4, 0x8, 0xd6c, 0x8, 0x81, 0xb3a0, 0x9, 0x4, 0x200, 0x630, 0x2, 0x7, 0xdb, 0x1000, 0x8, 0x8463, 0x40, 0x0, 0x9, 0x1, 0x0, 0x30, 0xfff, 0x7, 0x81, 0x837, 0x2, 0x5, 0x1000, 0x3, 0x0, 0x9, 0x20a, 0x20, 0x8, 0x3987, 0x81, 0x0, 0x0, 0x1f, 0x3, 0x8000000, 0x9, 0x1, 0x650, 0x800, 0x800, 0x7, 0x9, 0x1, 0x9, 0xb0, 0x40, 0x0, 0xffff, 0x3, 0x5, 0x0, 0xc0, 0x8, 0x7, 0x0, 0x8, 0x4, 0x109, 0x3, 0x5, 0x7f, 0x5, 0x62ef, 0x81, 0x100, 0x3, 0x0, 0x3, 0x2, 0xfec5, 0x0, 0x8, 0xcacb, 0x6, 0x5, 0x2a, 0x9, 0xfff, 0xdf28, 0xd50, 0x9, 0xffffffff, 0x6, 0x8, 0x80, 0x100, 0x100, 0x0, 0x6, 0x8000, 0x1, 0x9, 0x3, 0x6, 0x74c, 0x9, 0x5, 0x80000001, 0x28000, 0x4f, 0x8, 0x81, 0x316, 0xdf, 0x40, 0x80, 0x8001, 0x3, 0x5, 0x9c56, 0x8c7d, 0x0, 0x200, 0x0, 0x7, 0x5a7, 0x9, 0xffff8000, 0x8, 0x7fff, 0x0, 0x0, 0x8, 0x9, 0xfff, 0xfffff800, 0x8, 0x492a, 0x4, 0x100, 0x8, 0x5, 0x0, 0x7fffffff, 0x8001, 0x2e90, 0xffff, 0x4, 0x8, 0x8, 0x1, 0x2, 0x3f, 0x7fff, 0x1, 0x4, 0xfff, 0xdf98, 0x1, 0x6, 0x4, 0x6, 0xe11a, 0x4, 0x7fff, 0x1f, 0xa7c, 0x800, 0x1, 0x8000, 0x6, 0x5, 0x10000, 0x9, 0x6, 0x4, 0x4, 0x7, 0x9, 0x6, 0xdd, 0x0, 0x100, 0x6, 0x325, 0x0, 0xfff, 0xfffffff7, 0x1000, 0x0, 0x5, 0x7fff, 0x40, 0x2, 0x1, 0x7, 0x269, 0x3, 0x10001, 0x1, 0xe000, 0x6, 0x401, 0x3b, 0x76, 0x89a, 0x4ad, 0x80000000, 0x6, 0x7ff, 0xeb6b, 0x80, 0xc21, 0x9, 0x10000, 0x0, 0xfffffffc, 0x25b, 0xfffffffd, 0x4ca4, 0x7fff, 0x800, 0x80000000, 0x7, 0x1, 0x80000000, 0x7f, 0xffffff99, 0x7fffffff, 0x5, 0x7, 0x5d, 0x0, 0x6, 0x3, 0x20, 0x7, 0x7, 0x5, 0x5, 0x28f, 0x6, 0x1e57, 0x20, 0xfffffff8, 0x8000, 0x8, 0x4, 0xfffffff7, 0x5, 0x80000001, 0x7, 0x2, 0x0, 0x9, 0x6, 0x5, 0x0, 0x868e, 0x7, 0x0, 0x1, 0xb36b, 0x8000, 0x61, 0x8001, 0x5, 0x5afb, 0x10000, 0x7, 0x3ff, 0x5, 0x43e2, 0x1, 0x2, 0x2, 0x6, 0x0, 0x3ff, 0x6, 0x2, 0x10001, 0xfffffff8, 0x4]}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) accept(0xffffffffffffffff, &(0x7f00000002c0)=@ax25={{}, [@remote, @rose, @bcast, @default, @remote, @remote, @null, @rose]}, &(0x7f0000000180)=0x80) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f72070069723d0e2f6669d906312c6c857729eba66b6572641298f0734f245d09cc3b665dd7e59501161ccc3a22ec946a0071b114132560290d4e9a53e9078224687dd47aea8a5d60f6f847f243da96ba3bbbad869a6661e82e45b9a775872e3145e1a44da07f9f4a63895a6bce09dc37638d72b3d5da33ae309ec9bc078b1c2227a2b3fed7032728e0b3e094a28fecd2e40c86041fae84c59544d309425b25f9aa6cda27accc6f85d306af580758abf4fcea7536e065564bddb0c6aa8e98be14b9beb4b02e37605442dcee50f081000000a32f1a0d14721f94eca4d9b0ef703d21670dc996562bf7"]) chdir(&(0x7f00000001c0)='./bus\x00') unshare(0x20000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) unlink(&(0x7f0000000080)='./file0\x00') 12:38:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x3f, 0x0, 0x9, 0x228, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000005c0), 0x1}, 0x40010, 0x8, 0x3, 0xc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000000600)='./file0\x00', 0x5a) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x3b}, {0x9, 0x4}, {0xc88, 0x200000000, 0x3}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@local, 0x180000, 0x0, 0x1, 0x1, 0x6, 0x0, 0x1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000000480)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="47713136af4c0609fda6979c8ce656cdef31cfc073375989dd9c7028820adcecf0b74cd8d5851f835dc62233f77a5e2a301c9d62ac368308a16888e7b0f0f9ce4225986b7ad82601029a2a9324562e2b3880e53130badf2ae7938d374bad9e1aa1bad7834a8e0aa821ab30b2ad651488c3383f57344206deec09208208226add8ddd6a744ca66d029658cb64a257d4cb", 0x90}, {0x0}, {&(0x7f0000000640)="397ffe426d7278475462bbd7ef4082728817268626891c83efa6e462694c295f3dd5e7481abb547b39b4d2d3f77e7bc637b7dea923adea11110a077e8c35c54884ef7b14c3b9ce44e9c9c6221886536d7cf537977be12a0802d09b2123e0d9c34c9d71e33bf9cc5ff81b78f028a5d3ae05d1b9a6621e11f95532dcbfb2b8de99977e7460ba92426eed9821ec39c27b8ebc1378b0f856a99423f3a790ab98b9165f9be99330d77a44567ea89433e0de560302ede1703836faae717cb850121929bfcf5b718fea6b764b9e87095a3bb1c3b04e579f68c9a4b3ec3a530fe9c3937bbb3961a1dec78838", 0xe8}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x198}}, {{&(0x7f0000000780)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1f8}}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x3f, @remote, 0x1, 0x1}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002b80)="1c24fec37ed9f7f8bbcb6c86649c13cc81673fd270e89b8fd45a1a0656847a7caa96bf30ae7c1af73824383d8e49a23ac059974b267347a16331337816e1eedbcbc8b90e5a74fe41959f7ca6b91a00d00b1f4c7923e53363bc591f8e04861d4b6847fa4d867745b36d9dea8cb327d8e75001447f6bacc4b56d7f95597d5a742a2f9e5f85d15ad3b972e0a6c41daea9b0e41a26aa4e01312a7eedb8e1a846701847568278736b95dcc4b96272fff9b62c54c3b3e75a506bf5203129dd91e8eb7158cc610ff3c0a378b20c185edb9d8639c71e88bab230f397c77189bfa2298d59db23f353ea3411e90a0610d7fed9cda18e4a4d0b1bb759b1226c33ee7603acff26a9d8bf0f09502c0abc8656af0577115e0551ab19813e31e395ed0d496a9636c1dff5d0b0f3a10e947bbc7570f3a8ee43237bb9afd26dbfecc4ec11c901776a03bf1be7f89a90af9fc3ec687d7ca5172d24590cc7b90fe71b7213400303c2405f524352445df222b4b5295d600a723ed0e95c0c99bf2045f4c04571fe576cec8ec2517278c0ad224b37bda920b1da3569cc7d1448b4b0dca14260feb2319d140a42b621f9704602502a02ca804984ad53fa292e89e5326489b87000568b65fa04fc62e83e30dbb1e4a7255d9351c69218b3f6be8a0c2df2897b0c2ea7277dad203acf314883d5636de57139d8d09a4f31ad89750962bd21e120250da9e5459e09296bca27631071a9a2792f7b5f36b70ed3e419444ddd03b7fbd00bfae71fc6b2b290ffae8e93ec9c4bd8b883cf53de51adc5594a50d192680d1d9b23c0e80ede37e025f482a98a96e51ba0c084b3436f80009484c8d6df9c389f0c95a15ac23b2be8d7e5beb1cbb287f978dc17d043a79e24b43adfedc67ccfbc7fe1db861cd48f1a0b89b4b7586a2dfed3baa1922c45250e77e5bf6211537eb0d38b0e8da5fe22dad78847f6467b1ee91a18b302a93356bbd9072dd4025b70b907519e95ecf54e47b0a5cf999f02744523272f73b5fb487bcd9402e648307a00a3b8087bf5317838c8195dc69fd230402adc50d762c746e41d3379ad535026c6198048e9e2a6b326fde09e3f82da4393250760129a61bc10c61a925831a3d3800b1866d18f8370e2d7d9e8c59010d05aaba88121e7e43b6c422fa2255b5d260a7be110292e014401af8d5b39db9878e41c75f16177592b42fbdd4e33ccf6c9d391a36d83d9ed47400f9dd5f5e09c228e4f110db3b9c88cd7025823f09560a09542e2734d91229c6fd5a7dbee814239442d738acac9405048caddf773a31d573ec7d4310c95ec600d0711766f01d440e72e4f3125baca572ea290982e11b88e5eed1ddaf361fb77a9ff37fa4f88b885cd1a11c3dc66d6515ae06fc6148d5f47e5447b941b01784dbbf38e42253280ed232055923ee5c2ae8c817cca3967e2332ef25c7a65e2a47d68de8e797bfe7e53f0476304f63ddccfe2b0e21202c93b4b44e9b06d5a1796c3a54ef7f6443dd8c931135cdef9e9427a2e6de306db4f0b1cfe01d2262e4121b36db5c504059341ce5fe24c7c605adc8bba0a124b7d1afbbe868e01ba8f6ba0c4f6695eedc0dd6f70f94ef1da2492add161855d7bd9addc6c2e893631d3656c598b8590ec0f8de03959181235519f3ee8f5b925796e568f60d568ed5b99a90021763d4c8781098839f7ff4b87757b16ecf591d0e7550c3a744c7cd0aaf361e6b32f13614163e199b1063b04ee1e9a00202be3df24c1cc577404aff698e0b1f5f05ce494261f7fba5e1aa0e50dc0602786c4a1b3f15478b130c1ae2fe2383c079d8514c87210b485cb4d46a65e23993960566f0b627cd76e375b42e6f9f1eb8b237f887f7bb2053d806e6c182323566011913a51dd3f75b7d86dea1cd8d42a617b4347caa9a6ad7f4b47db52aa88f58706d1a02e735856b908e8df2b365e060d03899ba851cd585e8ee48dee1454f128b18a11fcb71f63b1ef7b11b5c269a80290a93a6d220be97d3617d60a5818b8a0d99cba27b5486db4ebb53a293b6453e4409783155e5407cf747c4a594fd2f2d5431c538b805378d25bca9a6ccf6163c356fc9267c5c8f22fc8c35e8a8363bcedbdb5883752d7c4812ef4e9ae517f41376ff5d3bfcea603069ca17839c06221023eba3adb07ca3cd6f925efd2f2a2acc1348dd61722f329b8985f11df559c0394363f16acf684c843e4b96b2199bf1f10e2608d695aeb345c3c516d06c25fc73de604ef4e9408124c23c5e90134259ba31b05207d7610bf63dbf9c27c5abd96d8edfcbf11041188e0ad3ea355b88d2d72efe45f1aaa71d6a9aa4f4ce422733ad6efb36badab1a09a3a37894fb492bebb4cd00810841f5f72de203d8f0aeacac2331fd8c41487116067b38eafc39993a6c0d8e62bf2d48893c14ce01b78a9641df9e4aaacf937950c556037d05e9ba73b7ccad7b414c5ec2e8cbaabb7491610f3424db590d4072a45e5d51fa905ee8d0167843457547dfb8fdda47061e00f1be292c291b4d2d243663db048fd4d26a6242787b07c15d115275cdf87177476db999b6c65dbe6d2e2d9e05152fbbd3b683b6c349a05810d71d794a1fbd594034c03f3cc63fb22b2743a961ec4705e77454b79aca98166d13c37067c3abf7c1944c2168bdb811d1efc1f0248a29a5b597c4335e02c43222b997542ef4e4027951c68ec95fefc19782e00d04ec3545d50efe5e567833e760b0588a121091b81ea08cfd4607525f47b6add09acc1fb0c4d90e276679c836e7f6f1624d578a95852e20403daebdd51783019125f3f9381590a3446839f2fb9debd8dfa9e4f2925adae22542ddaa3260af0fb163dc5f7ede3a649fdd5f497b192aefda75335c52a91689a9b2336afabdb494a3b31571428353d5ffc1b03e79a234f4abdf255edfa7c53fa65fcb078814d5e3ae40686540d9aa310f95492d23865f5ef662649fb21f90a4406b4c81f22fd4584c6e33cd0fd9826b2f3510850e592e2ddf4bd925086708769372d4a6a0e0a9eabc9656959d9a6e5681af3ed5db05fba85a4f366a7f42b82bfa7374afbbb7eafc7b0d99167dc19862a8ee57c94aadcbde1c5f71f2f8a49c4be46245c6c7f072fc7b4ffc11c5deb943a8026684c96f061a88ca5d497a6d5bb1fc24268bcc486fd79ea0f1ac4322b3a110259dc86847ed2cabe171d71cab506793f8d4e79d16a68e7b583edf3bbe458eb026c3e6eb2758ddf2b53ccc0e2b8a5d969c6aa192ed30306b12603096ece382973714f3974346f1a872b4ccfbd8c43374496b80d1f3f2fa4aae5d2a479a1a7c0b53da0d53e6d6beaf59fcddf6a2e8df56ebee576e952bbdbb485df5fd9befa61c83b1c1c8d2e7d133937552cd0098ac9858505db3328f9208e4dbadf872ca4bee0e7a9504b2331fb7b407cedd0b53070d470cfd430a3299ae6f7ff13d35c56eef4413cdbf92d464479acbf357b182d79f6f2e0af471f0754008a777d96df954e6affb5b33dab3e3633ffaf3d25a2adaac65ba7856b831f63e12f302fe11328f10fee958ad85dfc3059384f32594e8416b6f145e5fea27fb319817b6ac2aaaaebd0b2bbc484e6f30a08beaf7fddc4a42d5b778232da2d42877bfd4ec91e739b2c41064a18888df927ec29df5b6c50c24c045f4ea0b1b45d8169c6cece28c7c099cae3c671dbdcbd2a42ea0f084227c40bee9fd0d6e03f688228cb87abb310787bdb5346a7098850633efa4af9e1424995850eeab7f7d668b844804b7d521d6976d4997caffe7273a722e43ba54bdb270abba1602aada95e25f201a48a7883c639c56753083a26828fb130f3211cdd905da3bc606fc93eb20d27b68daccd91db10daff43c63239ecfc0192eafdee2e38cc6ba569c3cddc47079bad4988d41b1ac8aea3a967d51608b46757c7244b73c2d0285aea40f98825bd19fa902b5bdf6912fc3385e0c2bc9435ba38a0f5b49758e1102d2f2acba4aea7f9c9db0d5b61ff2443b3c419333bc5df3d5084e5aec9935d7ea9b30eaf85f7e32706fe01769661c495d0e5c31f948f0b98773889832f310027196d97ec44b472be30ddcafcab12c6682cfe935c7e0e93d5e58c6a5468f9e242856c658a0c9f01894203a9b8296bbd06d4486efc66e0efd391500909a554be0d9c969bef2e271e8d0598b546f3abdc485c869e98198453b5bfd10ea9067924e8bade4c5ae60237058080dcd0173f6898bfd8ed8e3651fb447cd36db6485b50a5d0da76ff3b6a7b49bc72722a92ed29b41505b4e70fc7c258089b2a3e049bef397e77da0b0eb0ffbc666baa80a262c7216526e37e4fcc9f69c9200b4379596005ecd2dcffca0094c021b647d559d5c3e0d5e05cd609dae2a7a8f700b0091cc58ffb492fac52afb70e6d707608d7ba934c04349b6c9bc6511b764947500aad28c5ebc6e4758f47988d03e20b242e1b11b2e2dde27edf4ecd315da0bb8fa0c86e4dfa5fd8b0aef58a8124beaaddff953ae89c9df4f373247b3b689d6ffa8a65701c5574fa1349e85aa6926f78c0ca3f2f91c41e62689c587a089c1ddadd1b0f8a7c293366de009bbd1f4d6b941f218254883f51e7c4bb594131508a621f29acb4778377c0c3f6fea67b9ffa358b2fcf3fea2280d8f962d28d5f7561ce5d419d98db243fa35e4535b9c3fc8303ae043e51569c76b2008d8e7220af8778782100067381c4e022305ce445e775fdad1e9a245f59a30506ecc60227bb2f94760e2641695a99be292d01669fe131cb1bcac1bb6929631e45b507170ed591cbe9dba7e2fe26553e138258d05bbba19526c91da95c5bcc899109c4f1d13e09a6a28d1f2b4ee20da9972d8748970c5b0c1d8ec51c1202139314867e32db061a5d74614d03e4abab3d7afb565b82297a13f66c5f0b40f228848e925580d1ef1bf2a801da5638ff6bfaa72d0f06aae6570a85efe167a76acc8fd4dc947192aba7cffd1903d4d9f4a4dbe453bcd283350a428b8ae6a398bff27427a4e6c247dba8f3dadfddcccc70be6ff720816f92e82ab8b1f92de5f551b2d7bce298eb79a50b3c1a2739171c24d8d1a812c493f2a18c579fb79998c64c7f5326742ba15129453c35f87f300539d0923061580fce9a2d5a276337ea567f0f70cdf0ef697f2b1b7fdfa7aa0b39e1036e1cf6a4c37d7a70127e4c92d9481519d38dd011b2a97bc6f51e702923862f28cc43a19e85238785def07840f0012f3ee3a372102ef19e0d0b053a4455175b31bfe5b43d7c905b8c13253f049918294707d9314c61d1cb70ca1ea39524e707e69e03c63ae294b3fa4010b3138d3916e1ead9f5fa30545b91d6ab4e4e3f6207437d2eda671596414685bf8243fc6177e9984f18def84b209504dcf0faf3090dba05be000f8d64b75469ce1a0f7f90eae3270c5f9a8a0bb0c2f7c3c1839a1f28c880d8589fa828d5392a5d9c7bc1566e0cad8cf16405f48d139b813c7c012c4e1d334a152aa7315b6ed06c053869528602da0512feb77520688a9bc50c130e96226dc5f3aab355f23eb9840e08f0a7a0a313fbab68c57304f2f8437e53165b0d053c03dac4679a1f696413a8a4788d39342fb909b3c640532c0bed16b9ba5a9aed6800b4e8a010236918c5d6f5bd8e7a797764fcdb4c52322765eedd11f2bf7d575a8a3201982d835097833c5cf170a38187a7c8c81c109e5a9cdd2fee526f46b07908514e813caf57bf55706a604175aa5803ad0d421bb0aebaf6fc9638981ca56483a5745111c5449b713bfc3bf5218238a80380d17c70a9fc7b9860386f0cd59a541b56357052bb48e7b5293", 0x1000}], 0x1, &(0x7f0000006b80)=ANY=[@ANYBLOB="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"], 0x1490}}, {{&(0x7f0000005080)=@in6={0xa, 0x4e23, 0x9773, @local, 0x8}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1233bc3af40968d0e801d95b724303a7c86c329b4be79c19ad34b8bdf40aaeee9a8f872e77d4b17d15351dcab18a2aba4f550ccb68700e5acef48eb47cfaf19841253d08eaffeb", 0x47}, {&(0x7f0000005180)="efe1e1b266d75b910bc333c117d603b71b81eea9fcdf5a5f56c3948bfe166521e1be683cba5f5d8eb8ce2b514b06836db672cfdf007503a2d5aa4a7db3cabd32355083d186dc4ec83f90ae26961416948960123aea24ad6f073455184f900ede541d538971bd358fc5c85c90b265b49dd9ddca9de78a93064d290a335d09e422ce9f", 0x82}, {&(0x7f0000005240)="60065e8cbb71267ed7fb6ca095740de9d61af79d5613afc1ffe1fe92a2b29529fcf635a60d1ce64a5044fe1a40696324e5337fa80196c263ae1343a696", 0x3d}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x110}}, {{&(0x7f0000005400)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x40, "457ddbec9a8d45980335126b97e9179eec63ad716192566949434b8718520f6e4c9cbe118c80bd4f242eb2b6b5d2734b63ba1e23303b24409ab52444fd9946", 0x3f}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)="7a6a217e944702b11e7b6fab22ec71182cfad0480ffd3bc2584ee102026d999701c363f59c71414a36a781b0e24e244617095a0bf21632270ca4419f17a830d6a77042aa49b1d2499086792bf38b87e59b5c22af51743a4dc65286f24877a117c50a1b9d13d11cb7d3fc4c676d19c55c620f005a07cc2ef21fcf1ee8a3f81e850e070b4274e66f281ed56e600c72b924a3a72320ae406e6b53fc5b0aff72be1e6585cfed618030d9e171ce7fe178ae494c65d0ba519db3e21111658a2dd602776e061e8e58d81f8d81c48a3ccda9432f51e2395b9c07a316d4857889e9f145e1497b0123b1f333582462647e095dac96fc81", 0xf2}], 0x1}}], 0x5, 0x2000ff01) socket$inet6(0xa, 0x4, 0x2) 12:38:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x2, 0xb9, 0x1, 0x8, 0xc, "51d999a1296f6249"}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5000f4) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000280)=0x2) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x80}}]}) r3 = accept(r0, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc274, 0xe}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000044}, 0x480c1) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000240)=0x4) 12:38:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x4aa, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bb7195080819151300000000000109029804010000000009044a000e3a8559015504", @ANYRESOCT=r1], 0x0) 12:38:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b800000013000100000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff000000000000000000000000000000667d245c99bec35dcf951b8973d47811000000000000000000000000000000000000000000000000000000000000230000b8876e000000000000000000c3b6daf516029e2300e3de1afcbd9938e701393ed5f32b02cf98bcba46bd047a2a3f8b3e21f09c6170d18e05f3fb7633375b36b1d18b7e09ade7547519c6f6fd050b0b6513fec6390f88a40a00d68df54a2b60df612beb60ee42c834b47255770d95059e20d5ae545d3240ce60421b53a062fa3c988b0e40ba41fc67870825a6c202529ea448ae008a6c3d5646de5d8b66d4846b3d4eed42d2bf93d269"], 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) recvfrom(r1, &(0x7f0000000040)=""/55, 0x37, 0x40000000, &(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) [ 129.806292][ T5342] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 129.817845][ T5346] overlayfs: unrecognized mount option "wor" or missing value [ 129.826602][ T5342] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 129.836638][ T5342] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000080,,errors=continue [ 129.892415][ T5358] overlayfs: unrecognized mount option "wor" or missing value 12:38:41 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000aa80)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 12:38:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000180)=""/204, 0x8001}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r1, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0}) 12:38:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12010000000000401c1b341b40000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00220100000858"], &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9}}}, 0x0) socket(0x11, 0x800000003, 0x0) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x641) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) [ 130.076243][ T12] usb 5-1: new high-speed USB device number 13 using dummy_hcd 12:38:41 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:41 executing program 3: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000140)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) add_key$fscrypt_provisioning(&(0x7f00000001c0)='fscrypt-provisioning\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)={0x4, 0x0, "138a8ee4b161ed7faf90eb04ac71ec8c88360f1bee482203d47fcf1d107ab4570e6954a3767ac497180697698b8ff879b43d8ab27d207ac02905fa21a58dbc46"}, 0x48, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x40000, 0x0) fallocate(r4, 0x11, 0x0, 0x8) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x209088c, &(0x7f0000000180)='*(\'$%\x00') 12:38:41 executing program 2: io_setup(0x102, &(0x7f0000003840)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x1100080, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r1 = signalfd(r0, &(0x7f0000000100)={[0x9]}, 0x8) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x3, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x8001, &(0x7f0000000080)) [ 130.332308][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 130.382360][ T5034] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 130.452377][ T12] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 130.460492][ T12] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 130.473153][ T12] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.483354][ T12] usb 5-1: config 0 has no interface number 0 [ 130.489421][ T12] usb 5-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 130.502848][ T12] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 130.511874][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.520707][ T12] usb 5-1: config 0 descriptor?? 12:38:41 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x3, 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24044011) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x11, &(0x7f0000000200)=""/20, 0x14, 0x9ac42000}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x100000530) 12:38:41 executing program 3: r0 = dup(0xffffffffffffffff) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=""/4, &(0x7f0000000180)=0x4) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f8010020004000030000000000000080002916eb61f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000000040)="2e2020202020202020202010002ce970325132510000e97032510300000000002e2e20202020202020202010002ce970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020002ce970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x100}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51800}], 0x0, &(0x7f0000000300)={[], [{@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, '}/'}}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 12:38:41 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="00801000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 12:38:41 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) [ 130.607218][ T5400] SELinux: duplicate or incompatible mount options [ 130.742402][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.753303][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.764222][ T5034] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 130.773515][ T5034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.782044][ T5034] usb 6-1: config 0 descriptor?? [ 130.802424][ T12] usb 5-1: string descriptor 0 read error: -71 [ 130.808848][ T12] usb-storage 5-1:0.74: USB Mass Storage device detected [ 130.817635][ T12] usb-storage 5-1:0.74: Quirks match for vid 1908 pid 1315: 20000 [ 130.873239][ T12] usb 5-1: USB disconnect, device number 13 [ 131.522342][ T5034] usbhid 6-1:0.0: can't add hid device: -71 [ 131.528338][ T5034] usbhid: probe of 6-1:0.0 failed with error -71 [ 131.532309][ T5005] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.537222][ T5034] usb 6-1: USB disconnect, device number 14 [ 131.782314][ T5005] usb 5-1: Using ep0 maxpacket: 8 [ 131.902424][ T5005] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 131.910574][ T5005] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 131.922907][ T5005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.933196][ T5005] usb 5-1: config 0 has no interface number 0 [ 131.939274][ T5005] usb 5-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 131.952309][ T5005] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 131.961329][ T5005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.970040][ T5005] usb 5-1: config 0 descriptor?? 12:38:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x4aa, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bb7195080819151300000000000109029804010000000009044a000e3a8559015504", @ANYRESOCT=r1], 0x0) 12:38:43 executing program 3: vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e201f010000000000f0bc660000001e005e6500"/36], 0x24}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) 12:38:43 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8f}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x80000003, 0x800000000, 0x0, 0x3, 0xffffefff}, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) prctl$PR_SET_SECUREBITS(0x1c, 0xf) r1 = socket(0x15, 0x2, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8a040, 0x0) setreuid(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x67) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) [ 132.252439][ T5005] usb 5-1: string descriptor 0 read error: -71 [ 132.258892][ T5005] usb-storage 5-1:0.74: USB Mass Storage device detected [ 132.268083][ T5005] usb-storage 5-1:0.74: Quirks match for vid 1908 pid 1315: 20000 [ 132.282361][ T5034] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 132.303622][ T5005] usb 5-1: USB disconnect, device number 14 [ 132.642354][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.653432][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.662304][ T5005] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.664782][ T5034] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 132.680252][ T5034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.688934][ T5034] usb 6-1: config 0 descriptor?? [ 132.902311][ T5005] usb 5-1: Using ep0 maxpacket: 8 [ 133.022347][ T5005] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 133.030720][ T5005] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 133.043383][ T5005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.053792][ T5005] usb 5-1: config 0 has no interface number 0 12:38:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406e05fb0040000000020009022400010000000009040000fd03010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="40fb76"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x290400, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x211f, 0xff, 0xfffffffffffffffb}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 12:38:44 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, &(0x7f0000000200)="cc8c00000000000000005d760bb6f100ecad3d7deb6de2808f4989ffde8d2145f962c5d4b0c177022a639925502af92af1fe5f48cd25e8c521aedc1d6aa094059e44c75139bc0cf06990dbd2a6fc781714e08ae1e345e7c4dd7a361ec1e305f6ca907bfcb7276669a8", 0x69, 0x24000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="fd20000015", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="846e311400001a1400010000000000000000000a000000"], 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:38:44 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_ext={0x1c, 0x7, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x5, 0x6, 0xb, 0xffffffffffffffc0}, @generic={0xe2, 0x6, 0xc, 0x36ab, 0x54}, @call={0x85, 0x0, 0x0, 0x55}, @generic={0x2, 0x8, 0xc, 0x40, 0x7fff}, @ldst={0x0, 0x3, 0x0, 0x9, 0x0, 0x10, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x5a36a2d083e75563, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x8, 0x8}, 0x10, 0x2ceb5}, 0x78) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x8, 0x85}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x6, 0x84, 0x7c, 0x8, 0xdf6, 0x21, 0x1971, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x56, 0x13}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffff07}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x2, "c8cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200f2ff3a59b53d9ad767e71ca36ac1ba2b71b7419b7b017c030bb7ff74f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x405, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0xd9, 0xb6, 0xcb, 0x8, 0xb05, 0x1791, 0x2b56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f3, 0x1, 0x12, 0xe9, 0x0, 0x3, [{{0x9, 0x4, 0xd, 0x40, 0xe, 0x61, 0x6a, 0x3d, 0x7, [], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x1, 0x9, [@generic={0xaf, 0x21, "2cf6c89636d4be3fb850d214a04b7be1f1e162e9a78dd9cb2d2c529f0bccbdaaca11f7d613d61a676765cfb2ebcb2704e514bddd5c54120e184e53102a0f6aebc7aa936b5d94d45e1f3cc5f481fa159485cdd594fd8c57e4652cce2e878d76dd4b5ec3888292673fc7e45c404d8238264fc53a1dd3f003760fa7169d9f015871fce830659191fc5483d7427492834d96374c08018da63f90f9b0da0978a29049ff9df454e1cce13942e73ab918"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x2, 0x20, [@generic={0x8d, 0x9, "84725e07a4f6e0da2ce14e7957bccfab4849eb2ece95db9f061f1e4c439ae5075f432664aee634e8e72954da1201a9b2e493b041598aba5b283f59d0a34c11b258e2123973800a2e1f4a656bc2d22af2994e2851360f888d5cf38d163b9d3891864ab44903dc36bf3921fe4a7a922eb8fa9f511200e15ef5768b78f54fac32710ecd7b7b3942341388ee58"}, @generic={0x3c, 0x21, "793ec0804595f0e5eb4d133022f08935bdcd8851b939993f032e7c62f31458286d2905dad12de77226a2d58528ecebc2f6ebd98b790322ddfe10"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x54, 0x1f, 0x4}}, {{0x9, 0x5, 0xc, 0x14, 0x20, 0x38, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x80, 0x7f, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x6, 0x85, 0x8}}, {{0x9, 0x5, 0x7, 0x20, 0x400, 0x2, 0x40, 0x20}}, {{0x9, 0x5, 0xf, 0xc, 0x430, 0x7, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x92}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3f, 0x2, 0x1, [@generic={0x5e, 0x24, "03bbae06c69a5e2eca544f4c56de89e04e89a531e1c8fa444446fcdd9663db2dd8ed24960a12c9a1c098e3a32bcf9913d4077c85632f2aa9310bb7b683ab296175f979925bf0b12b59a3ea31b46d395204a66fd5897098334f107ddb"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x101}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x1, 0x1f, 0x80}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x8, 0x0, [@generic={0x17, 0xf, "677dcf1b4efc9062c0d2bf990e1d6d84e85b8ad53d"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xfd, 0x4, 0x60, [@generic={0x2d, 0xc, "bfeae652ee8749cff9a687913f9d810bc96500a0a009e6f3de72d25faa976efe3f1eb83dd912fef501ae14"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x80, 0x81, [@generic={0x73, 0x11, "23ac328348b2c16a8e49a7d61ddbd5b78b1797b68f45fd8ba31f2edba86156840aaee7324e963691d1994c3b8e606d6f72ada0f2299f6309943fbab5699468b8ba1b942948caca0c59b96f9eac28395de7f57ce7c9b368b5fe0c574c2af8936c57165b4f2810dd69ca6593e83e607537b2"}, @generic={0xba, 0xc, "0cefdf5138c65bc1ccba1cc6e5a680004c88e4ae361a9c06bd408bc87231bc0980495c4af79015cc41fb13b3a472941fc561c1c500725cd206ca175422ac5446393c8fc74e8fc935f4f6a79fc1089fef8565bf3bf565986ac28b4579b809d903fcb1e5f4a0341140c76d52e87a85aa3fbcd644bcf41d168a93b045e198a5272dd6c0c949084b1d2dc83e7b75b5813a2cf18959cde042e6386f02100d28004b0fbf2a70d061201bb469aefb91bd1eebb03a2940a54a22ee67"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x1f, 0x1, 0x5, 0x20, 0x3}, 0x14e, &(0x7f00000002c0)={0x5, 0xf, 0x14e, 0x3, [@generic={0xa1, 0x10, 0xa, "f4dd4b128d5e0b53fa33c3e4688b7c4a13f370a2abdb3c94cdad92db6d9da649b19817dd88ae4807ee0580c298d2db3633de480760b65833a8af86e600e062d188052cf8b22ad8e60fef44ebf790e05a329758f88ba3f7449009e9a01cc6239004d9923b7a9089ad5a6e1946e606117e5c7476ba10042f5145387ed5038305eeabe6d04ff5830ad499368d797bbe019580dddc1d51b62310c9b8adcc9b55"}, @generic={0x9d, 0x10, 0x4, "27a9aaefd91aa10a07131a2d03bf847be0b482c9f74eec0c4b3910a219f41bdfbde11fd5073f5f5f396da6870e8fb2209ac47fb62a75b90a76e9c8d9531d18479ff5b5df2e3a538ef10840d9ca9b09fe1f41964d23f87d11b8d47018b425045dba240660bb0c97036173788322499e307d392fa3941a697239647c628aa6347c7489cf5b0d004ae04a463cdb377be61cee02bd579ae87a53ed6f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4d, 0x7f, 0xfb, 0x1, 0xd0}]}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3436}}, {0xcc, &(0x7f0000000480)=ANY=[@ANYBLOB="cc03d2cb9b235a1c3b1151b836f36e98710a40467a7459010bff035431e42e1d8e48fffda933824eb1707b85d18fb85539f4eecb54a0556438723e68e4d7fefe000000000000000073bebe5de656ced67f895b23cd1edb6fc614763c50a027a6bf8f02943af1dd70083baa478b439e262ea971f945451d5fbfffe7795780563083b68e4cd536efa99b632e66dfb581bbe57d40b570141de594d6c1db274c6c0f6e0a4041354e6aa679d4edb708d11f131a48c4f4e342d2710535929f7871087c9258674cd869448900000000"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x444}}, {0xe2, &(0x7f0000000840)=@string={0xe2, 0x3, "788491e9b3a708344f091faacbbc056445f2b9043163f71f5063d49aba301afc53119fead638bfaad7fc7d192612a18554b4eeec8c7e0c6d40b27dde06aae42bbad39444f967bcda6f79d4dcc94ba66c0c2ce3e5134475cf26ad6fa33195012c0df2a9b40c8ebb2fd5e54cfe612fcb30695bdd4eafd252b9256ff5565b733175ff108ec6467ef193c2e0ec457abd4fd851a6d7f375a5548df2fa5236a7849bac534a5e02a729b608469d16643ef24ea9cc156ceec84f981a89835f94715d877613c7b6ea727292b11a722aef915dff715b952ef63dba9c16213b61b913967d9a"}}, {0xe6, &(0x7f0000000940)=@string={0xe6, 0x3, "5da349a6c17ebae8ec6e65dc3c833888503370e52d6a7949555df4714bf8abdad6d11c6999aef2afd526e81bd53eb6f0136314cc536a92234edf4e02766ff234d4f81188c29d38161dbac031cf8528b93146bff4b746c455014a1d6c71a2f0aae419f5e8939fed3f8253f73f74445c154e3f7b1d5650b3951b033a1abd6214184d2c4e267654ac4d8c3d378f63fb34e1daf81a06a459c68809fbd1d64ef957db5b7a325bcd41c0f17ecd4eb0106246fc3aed8a05cc2132bfee1751e450aa2b2459d4721c3afa4fdfdb06ea5dc4c6e3d436e1d532b4fa6c9e33e019fd6d6ad1273b8e01fe"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x459}}, {0x25, &(0x7f0000000740)=@string={0x25, 0x3, "41016e1ab9223f7a709dbc5130d866c2620878a29911d4e43f401c2508ebd5ea5fa5e9"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x81d}}]}) syz_usb_control_io(r2, &(0x7f0000001180)={0x2c, &(0x7f00000007c0)={0x1607b1acd9d30b88, 0x4, 0x32, {0x32, 0x0, "3aa1463d0537fb1f1a69d72d15db592ff3234bc7d53e3c18bf7a012d8f208451e0166c09c2af1959e2b0535fe2afa473"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "e53865c0c257ad6896f5d5b62c9eced0a1eb05d35c5f0299cb7bd15ef7041e838e843c001b6f9a7f492dd3c29477106d7cb1fb100fdc688990492e4dd16da084d01684bd7fd9298f5086c43b85d6e8c9bae4d9ac476ad6a9882244545baeb8145c04daa9ea7e655a237dc736bd709a29fa1f8cdd2be4e10714dc0779d2729066b6bb7eb25b9b6a634975dbbb1aa479f4b370f3b6ddd181a14ca4634d0f7b50c5f4d084b6bbbfbef30ac8166de64211de22d3b9f8098d144fed5c33e7e669d22e4e89ec4f9e97373a2a7d1711223290a1c13027faf6f88476f8718092ad14d9ee20a9260fabc7d69f7170872630de"}}, &(0x7f0000000bc0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x41, 0x8, 0x7f, 0x0, "ab2a4761", "a3de0a18"}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x0, 0x1, 0x1, 0x40, 0x6}}}, &(0x7f0000001680)={0x84, &(0x7f00000011c0)={0x40, 0xd, 0xcd, "4e33272d9628ba60cf560702b36079875d4912812346fbc229b5e56aefddb14e84c6ebcabecde9fc66a16aaaed3332b2548d3e0581a074e0e0db4f0b9ce8507074382bb822189678d83b5aad6aaa6d5b14453b64973c39986e3296751eac4f81b2b4a85b9fd0525c06aa4a4a68dacbc1f1b675a9d70fd75b7242923f1783fb5dcd09d7e593feacb22216bc1c4aa860028358edd178503897e8e8385dc1919f22b2854a2245184c7f3a7df0df45c98691eb287dc680f9deece124e3810fc044b9dca54a75aa8f9c67c19382f07c"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001300)={0x0, 0x8, 0x1}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001380)={0x20, 0x0, 0x8, {0x200, 0x1, [0xff0]}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000001400)={0x40, 0x9, 0x1}, &(0x7f0000001440)={0x40, 0xb, 0x2, "860f"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0xfe00}, &(0x7f00000014c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001540)={0x40, 0x19, 0x2, "b33b"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000015c0)={0x40, 0x1c, 0x1}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0x3f}}) 12:38:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12d400, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0x800}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x360, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x35}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_bond\x00', {0x4}, 0x1}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/4) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480100004d9a531cc220173cf1b06b1caa2240118908b4caadca15b8bb289d763b797479f36f80e51dc309e7b7bed7b3d596c122896a79b227cdf780822121eda8c6c5fb0e25", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x420}, 0x24000044) sendfile(r2, r3, 0x0, 0x8400fffffff8) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x3}, 0x7) 12:38:44 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(0x0, 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 133.059932][ T5005] usb 5-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 133.073004][ T5005] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 133.082012][ T5005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.090744][ T5005] usb 5-1: config 0 descriptor?? 12:38:44 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(0x0, 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) [ 133.129664][ T22] audit: type=1400 audit(1603024724.138:41): avc: denied { audit_read } for pid=5445 comm="syz-executor.1" capability=37 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 133.135005][ T5453] xt_bpf: check failed: parse error [ 133.173538][ T5034] usbhid 6-1:0.0: can't add hid device: -71 12:38:44 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x84420, &(0x7f00000001c0)=ANY=[@ANYBLOB="746573745f64756d64de798c2395cb2e7074696f6e2c00"]) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "f72af34408231e4cdec32b5bc72db42c"}, 0x11, 0x2) [ 133.179774][ T5034] usbhid: probe of 6-1:0.0 failed with error -71 [ 133.191991][ T5034] usb 6-1: USB disconnect, device number 15 [ 133.203937][ T5467] EXT4-fs (sda1): Unrecognized mount option "test_dumdy#.ption" or missing value [ 133.253307][ T5469] EXT4-fs (sda1): Unrecognized mount option "test_dumdy#.ption" or missing value [ 133.392328][ T5039] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.392347][ T5005] usb 5-1: string descriptor 0 read error: -71 [ 133.406355][ T5005] usb-storage 5-1:0.74: USB Mass Storage device detected [ 133.414126][ T5005] usb-storage 5-1:0.74: Quirks match for vid 1908 pid 1315: 20000 [ 133.473486][ T5005] usb 5-1: USB disconnect, device number 15 [ 133.552341][ T5034] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 133.642404][ T5039] usb 4-1: Using ep0 maxpacket: 8 12:38:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000300)='./bus/file0\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file1\x00', 0x8, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x400002, &(0x7f00000003c0)='./bus/file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x7, 0x1}, {0x4, 0x7fff}]}, 0x14, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./bus/file0\x00', &(0x7f00000001c0)='security.ima\x00', 0x0, 0x0, 0x0) 12:38:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12d400, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0x800}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x360, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x35}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_bond\x00', {0x4}, 0x1}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/4) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480100004d9a531cc220173cf1b06b1caa2240118908b4caadca15b8bb289d763b797479f36f80e51dc309e7b7bed7b3d596c122896a79b227cdf780822121eda8c6c5fb0e25", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x420}, 0x24000044) sendfile(r2, r3, 0x0, 0x8400fffffff8) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x3}, 0x7) 12:38:44 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(0x0, 0x84042, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0xffff) fcntl$addseals(r4, 0x409, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x6000c0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r2, r5, r6, r2, r0, r7, 0xffffffffffffffff], 0x7) fsetxattr$system_posix_acl(r4, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [{}]}, 0x2c, 0x0) dup3(r3, r4, 0x0) [ 133.832368][ T5034] usb 6-1: no configurations [ 133.836958][ T5034] usb 6-1: can't read configurations, error -22 [ 133.899945][ T5482] xt_bpf: check failed: parse error [ 133.903213][ T5483] overlayfs: missing 'lowerdir' [ 133.913152][ T5485] overlayfs: missing 'lowerdir' [ 133.924322][ T5039] usb 4-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=19.71 [ 133.933611][ T5039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.941630][ T5039] usb 4-1: Product: syz [ 133.945953][ T5039] usb 4-1: Manufacturer: syz [ 133.950548][ T5039] usb 4-1: SerialNumber: syz [ 133.956240][ T5039] usb 4-1: config 0 descriptor?? [ 134.002320][ T5034] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 134.282534][ T5034] usb 6-1: no configurations [ 134.287147][ T5034] usb 6-1: can't read configurations, error -22 [ 134.294213][ T5034] usb usb6-port1: attempt power cycle [ 135.002346][ T5034] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 135.142390][ T5034] usb 6-1: no configurations [ 135.146981][ T5034] usb 6-1: can't read configurations, error -22 [ 135.302333][ T5034] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 135.432377][ T5034] usb 6-1: no configurations [ 135.437154][ T5034] usb 6-1: can't read configurations, error -22 [ 135.444276][ T5034] usb usb6-port1: unable to enumerate USB device [ 135.922868][ T5452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.933158][ T5039] usb 4-1: Cannot set autoneg [ 135.937920][ T5039] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 135.947914][ T5039] usb 4-1: USB disconnect, device number 9 12:38:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600), 0x0) shutdown(r0, 0x0) 12:38:47 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 136.702361][ T5034] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.942314][ T5034] usb 4-1: Using ep0 maxpacket: 8 12:38:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x4, 0x244c01) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x224100, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffff8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) 12:38:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12d400, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x2, 0x800}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x360, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x35}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_bond\x00', {0x4}, 0x1}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/4) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480100004d9a531cc220173cf1b06b1caa2240118908b4caadca15b8bb289d763b797479f36f80e51dc309e7b7bed7b3d596c122896a79b227cdf780822121eda8c6c5fb0e25", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x420}, 0x24000044) sendfile(r2, r3, 0x0, 0x8400fffffff8) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x3}, 0x7) 12:38:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1a404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair(0x1, 0x3, 0x100, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0xa7) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 12:38:48 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12040, 0x40) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000001c0)={{r2}, 0x3, &(0x7f0000000180)=[0x95a, 0x33, 0x2], 0x80000001, 0x7, [0x4, 0x100, 0xd0, 0xfffffffffffffffd]}) r3 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "a124a5e35e56ee1a", "39e9d500b04cfb8bc2d76c76ed0c26a6d232091cd80dd9ab73a3b12e38192004", "0fae19b5", "387025aa5abe3e6d"}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) fchdir(r5) read$char_usb(r3, &(0x7f0000000480)=""/142, 0xfffffec4) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x1, @private=0xa010101, 0x4e20, 0x1, 'wlc\x00', 0x4f93e5e9180b2a29, 0x8001, 0xf}, 0x2c) tkill(r4, 0x28) 12:38:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x84054, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3ffffea, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1000206) 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) [ 137.232405][ T5034] usb 4-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=19.71 [ 137.241535][ T5034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.251007][ T5034] usb 4-1: Product: syz [ 137.268011][ T5034] usb 4-1: Manufacturer: syz 12:38:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10010020000002000000", 0x58}], 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x1) 12:38:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x400, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x5}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000f40)=""/160, 0xa0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000008c0)=""/181, 0xb5}, {&(0x7f00000003c0)=""/44, 0x2c}], 0x2}}], 0x6, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="6347479a03000000000000004d178968d0c45e808bff072fb60e54ad"]}, 0x1, 0x0, 0x0, 0x20cc55f1752b322c}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78601053f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) 12:38:48 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_es_find_extent_range_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18, 0x1, 0x0, {0x7}}, 0x18) write$cgroup_int(r4, &(0x7f0000000100)=0x7, 0xfffffffffffffe6c) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000180)={0x60, 0x0, 0x0, {{0x0, 0x5, 0x80, 0x4f4, 0x7, 0x8000, 0x5}}}, 0x60) 12:38:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x722, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x8}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000580)=""/246, 0xf6}, 0x10000}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x2, 0x7}, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x80) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100000000, 0x4}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x1c4) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7d) [ 137.279348][ T5514] xt_bpf: check failed: parse error [ 137.285016][ T5034] usb 4-1: SerialNumber: syz [ 137.309339][ T5034] usb 4-1: config 0 descriptor?? 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200fff) [ 137.352693][ T5034] usb 4-1: can't set config #0, error -71 [ 137.361950][ T5034] usb 4-1: USB disconnect, device number 10 12:38:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket(0x0, 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x20000000000000, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x76, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r0, &(0x7f0000000100)="ccf4a06c523ea4fb60edff95521ee6a76426f49ae69037cc67d408eec120de4abc10c6f87991a2049fd5f2a28a0055b9aee0082b25fdff3c41a85b79ceb131e1872e31fddc8f11f437ffe405453b0476344ce90b3d023afe1612356e79c63523eca2f24495e512997b079c9fb4300834b4511c75d292ac1d0bc826df170d879d9826e44ab34c9401a7657f09eb9de91943cf4a18173a701ba4a8483850c2968c6403e403ceabcd9d9f61cda0dd4b14c0254d98672891231cb95446cabc3630d606df3762637eaeb74af98b778b5105ff2d91a16441ef4ff4454c9e686de9aa47cf5a882c9655228a93ad48a51c7d30eef5ccc851fc859dbcd717b3c93240229bd0688fa6efff18b2965e1b6fe884380a4024aa3e1add79e6b15da38cc9852f419d41c2da9c43c6cd09e0c06e20a61c8bed896c83c14891158e9cd5ea321e4d518a7a7175c41e2d62a56f757301ddbcb91047e5e24d425724b242a5", 0x15b, 0x8080, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 12:38:48 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x12040, 0x40) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000001c0)={{r2}, 0x3, &(0x7f0000000180)=[0x95a, 0x33, 0x2], 0x80000001, 0x7, [0x4, 0x100, 0xd0, 0xfffffffffffffffd]}) r3 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "a124a5e35e56ee1a", "39e9d500b04cfb8bc2d76c76ed0c26a6d232091cd80dd9ab73a3b12e38192004", "0fae19b5", "387025aa5abe3e6d"}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) fchdir(r5) read$char_usb(r3, &(0x7f0000000480)=""/142, 0xfffffec4) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x1, @private=0xa010101, 0x4e20, 0x1, 'wlc\x00', 0x4f93e5e9180b2a29, 0x8001, 0xf}, 0x2c) tkill(r4, 0x28) 12:38:48 executing program 1: ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x0, 0x40}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004680)='/dev/rtc0\x00', 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r7, r7, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000046c0)=0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r10, r10, 0x0) fstat(r0, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000005f00)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="db2a33348a811b5a7b68f59b5973b8aff95b6eda0adb1d988ab4aa455f51343ab5622665e09d5141a29c7cb19462eeea3bcafd42b25aade2eb5208b41e1464d3ff024123a68fe419c4a6fbeeb1ba8d71784d9bf8e717cffbdbbb900911bd4d8c44d73dac162b4ed22868ed3df151e1c24e87dd7626c20ea14bcf5277d87750bb1556317cf74ba99e0bd74fc4e6413e3445b638126a261acd4b78b221c965ff23109b8557c983ed5432a06737bedaffa1859946912edf86314c19e81191e09a899463acbed8c5cddd55c57c9b9560303068", 0xd1}, {&(0x7f0000001280)="9db7215871fbe62df956d82ec5df2e226a886efc6ad710883bcf3e44154e03be707a7050d91106029597cfc779e59450659d4912db64024abf3d369fc9e13a587a8b8727f95df54119f27ca66615c204c323039625bf13f4459cd24d87e27810f3c98ea95ee396ed5a7b5b16ad6f6802764a202a388ea3b4d5a84218fb4ac9708664b1f27d1402cf7e682b309400b1e9626af191dde6fa8c61109284c93d8ad17506dd9ee24f2b2c3a18dc9ac197f56b005b4c88e5a3544a9898ca6363d7667a2aca67b797cfbfe844946cf4dee32ee39b9a0d6ad6d7f8c3d0", 0xd9}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000000)="91050ead690dd0d6900d697fda9a8789b17a5f567af195d41cd16c045438b3b001b2b2fcdb811d52f8d8c6475e3f1c43b6bc12f9ab043a41", 0x38}, {&(0x7f0000000080)="485dd7d704d22268b444", 0xa}, {&(0x7f0000002380)="42a7d65b09ca8e2e025098da16c12b36f461a82c42b05844276fa9d4a3c9c1fb459396b9c12457674ca51a64d7f225cca9107810ebc90f9d5d7d0be12e45559c31bac31bc8bb0030aa3485e259709fd29fb7b4562b8e3cfed8d2f8ec5a8e386313b56e457919cb29eeebb2bbcc577aa624a1b87d85b88dce765c461a98dbab550617854c9b081faea60040a43b9df62b2d83cb4cd040fcc188437c860046a49eb74577f902e6cedc6317490059097944d1f49ee07b1e949d7f07ec43e79512f45e379983727e2c8eaa288b5da817e455db11da75ecd083d89262cba5b88ae573564973224584ed4e25", 0xe9}], 0x7, &(0x7f0000003c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148, 0x14}, {&(0x7f0000003dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003e40)="773457921a435137613e9a0a3760400de8949a1838a9f1833329cff37e09eb6e421f0b5dd2554ba8f5e748ef63b17a25b19fa45040eecc3bc02a3c816a920f9f9fc9ccee9f49f882a5ff3d8e0c91e09edd998435f5929adc968067b08a1c91213bf74e1f493e992d5506c3eed71ee8a9f0319feb2d37ad11d7875105441c5e159164fa0904d6385376477eed66e5bfa431f26a4189dfc739296ab0910ae54d", 0x9f}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000003f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000003fc0)="6028eebdb73b39490cd59671c1e1e8e1e8d3f0a1bbe03ab05b60d0c8896b91825b60008f9b2ae151acb56aad9c77c41446de1ad05f916f69b4e6e918350673d3d14c8dfaec31e20b1f1e105469e85f1b844520d760206dc21dde42d7e862512676317e944931df3bfa191d53da9d3ef28004511ac648b08a614b5e8f510d2155846795eb3229bfaf39e5e770554e6c651f4cb0d1504411380ea07d", 0x9b}, {&(0x7f0000004080)="eb4a2e057c3c9caafd80cd653bb319ac57e52e838810c9399533f46286b79011a1d6d71510f00c46e66f8b299f37802a1d3dfd909eb8f863ce210aa0151949b7b9d94036b317e46b390464504ce57e104b8d6245dd6204f2e2bdc82991bde62ae10e870c409c6ac7e97726b028838556", 0x70}, {&(0x7f0000004100)="b4b2d8b7852a957f7181ae2ab407af3ec58ef15a19aed4919bc2abf9f161b4c624358846f8ddaf207ead611ed902d65859883bf3e3a438f646987dd756448369dd22ff1a5deb78a57f48b848f3ade52112bee4a8aa6e3f9fd7c0fc0531808ad041f396e0b64691ebc1640de4c318b2e17ab3499092dab6dc62e09a5637d93a6d5d3f82453300a1d6abafe523a073766bb10bae4ef0bc458fa1bbc11542d129e5383cdc7daa92911be59ee5a49de080b4220192fc377cb53f5235db023906891fc779c26b31", 0xc5}, {&(0x7f0000004200)="db6a8e03bbea47797ffa30c8980397eef8405f12", 0x14}], 0x4, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r1}}}], 0x20, 0x4004000}, {&(0x7f0000004380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004400)="37cd168f90897558e77e2a4f2d2c2b74b0ff4aa03ed324a172321bcb65582e1ad61b5946e3f24f9712212a796050c3c4fbba53712f6aa84feec8f1a4ac579bd93a54a7f84d3bf10a9a30d595b911b47ac5e25bca9f709f4a6796b3dcebd0d18ec1c208f346566e0085a8d85f90fb4a13db00fb8e9cc67b15a0c90bab86fa582cb4283f20bfe70018ce82bbf8bc8c886ccfbcb2d924d278a3236669485a64cd860e5ce58dab38387882e38f6085063cc7daadc2dd009de286e9238f8af0b4b3abeb2be0306bfc4bbfdc70210a9329", 0xce}, {&(0x7f0000004500)="dad011386cbc4bcffd178bbe930cdfeff5031638c44d5e8bd740d54e7d2398338a58223d929f03e1f7ea57fee266f0a46b834244b64a5e894ed42a400984f13206ef202fa5a2bf0fa1576b85e14410e0e903aef08bb8a2b1bdbf7d1142bb320cb8d9226f74af35c1f430b185a1ed2d8ce5317a2257", 0x75}, {&(0x7f0000004580)="17e1b7595e30525e64e92769cfea1cbea1e0145b48030f9373b7ec66611b993bc94a7a01205817879e712872f4b78dd9877f31b919363ef67f39f2d53543536ce44c7489a9fa72899fa0e49f07a0480c7b68dd0b7b7031173efb52b0e4ce7dd5a4f139894efaad3d54eed14e0f451d3c9b9571db384fcd59b4639f40e03738bec25dfce83037f8dfebccb7db1ae16e5f50e78dbc9fd89f3b312060b2f32dd18ea026fcc4fb", 0xa5}], 0x3, &(0x7f0000004700)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xee00}}}], 0x70, 0x20000080}, {&(0x7f0000004780)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000004980)=[{&(0x7f0000004800)="9f4542a76b56adefa0ff00a39dbef25d1ef417469b015544545f8e65937b9fae2cf97be4046ab3ed04d53d0e1b28aafda591ccffaf51c70706a23541befdf6cba30ad79b6a59fc84e644ad136536c96f68e60095947c797797ac8b227b6a611bdccc9b7bc699b63cf23ef7482ac24a2dd110859b3307b68d48a8532bf56e", 0x7e}, {&(0x7f0000004880)="aa4526eabf083c84488ec2232e9214a08f58e3a77edff2c85f4779f32c735f46a8295508256e9e63c8432629b86eaab200b2a7b28726736dfde203bfd4f833f9147e09855db4414116c0b4b9e7b20aff0a710c8e4a7f22927b7406c77cbcdaf9cea130fcd82db011482c5716d01bc0f1666b7928478406b53296aed68a88cd2f762ea268b772553f8182a96d6d58810874d76b985151c8c1f4fef1f5d0f0700b401a727c49a69fd071eb80398dd20c34c3906a5a52641958aaa34942a7111427e577686d9b96dbb59c29d73cd532b7bab1d0e1e9bfe5537e0f", 0xd9}], 0x2, &(0x7f00000049c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xee01}}}], 0x20, 0x8001}, {&(0x7f0000004a00)=@file={0x1}, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000004a80)="10bc46f7e6eb39dba8c63102e535c792d984af117b341ddc2ce5c99bd5b393366834724c00a8995758994f0d4d878f519ed332ca67d8d417ea58a2aa46d2440e96e4ec4164d204ac8a5148b3a107fc66ba656ba18aad69c05809141db32779f79366e52a4e", 0x65}, {&(0x7f0000004b00)="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", 0x1000}, {&(0x7f0000005b00)="35b81b0fd7116c981b7cb8d27d62bce8d48fd2cc55971bc255faf56f4e0d43a7f1942db2983ada074520b0df31ef1e3b42edc223d932b40d1ae00af3e7df835c6513e1d213b603a7e75fc0081f7981ce2a0905d90b4cc1d3e617a57c17868f9f20b93a5eb6925217a2509669c8bac9884f46c8c1e449b8ecc6acf5ab9cadb2df0a9d3881bbe9c7fc5aa99a3b2badd1402f93de5b0958", 0x96}, {&(0x7f0000005bc0)="548488b53c162cfc737463b5fac93b713cf1d42fca37d6c89562f09188eefd7071ebe87ac208168e323cc875a075fd36622c80b285ee563fd55eb7e38df035b7152ab60e5c", 0x45}, {&(0x7f0000005c40)="34bb90d4eed4ea3d90743ff2bb925045450fbb1ed58446cd06b414a071886bc7e9f1c1000bd45a64317182f2c4bf9555d2b0735de6f6fbca7b0bc310f0c92e67d2a9dba9fb390e64761fa1810294d756dabf2d0d5dfa071b8155d589c95f3f65da7f87b2df052a9bb875a6da7b9185c23d6f67e5918e", 0x76}, {&(0x7f0000005cc0)="47f1b62baa202f3afc8154223f499a2d31e0465f45a0aba89ed7b2489dac2eb03e6d50723e38208528c8b51cd7e83f03e3cb4c8bfc0ec4d6ef282300029744eeab63684214dc66e4a1956ec8bb39b3a87b00ad52a159e859f331b3b34fbe6794399bf2565211d7c402b55d95a189a415c928f2d561dffd216a40125471e293e9a1962f11cb2e22a23a7a20a830a4bdda39177b3489cc3ad0c63dd6a8a13d744bdf6af02153ebea856e7e3a1cbf5298efa2bfbd9c104e2218a986e1a2c08d36ae2991c3b462c2db949bab802491190092bb9c683f79107b4970fbd0480553dfd782afa99d9a1ffe90be20626158348f4018a194621d7cb6c57b", 0xf9}], 0x6, &(0x7f0000005ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r11}}}], 0x20, 0x8000}], 0x6, 0x40) writev(r0, &(0x7f00000000c0), 0x20000000000003fa) 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200fff) 12:38:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x1) sendfile(r4, r5, 0x0, 0x8400fffffff8) renameat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/250, 0xfa}], 0x1, 0x40, 0x0) r6 = socket$inet(0x2, 0x5, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x0, @local, 0x4e22, 0x4, 'lblcr\x00', 0x22, 0x6, 0x1}, 0x2c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r7, 0x0, 0x0) sendmmsg(r7, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000004c0)={0x0, 0x4, 0x1, [0x77, 0x0, 0xc3, 0x9, 0xa26], [0xcf4d, 0x2, 0x1, 0xca, 0x2a1, 0x2, 0x6, 0x48000000, 0x2, 0x8cc5, 0x1, 0x8, 0x1, 0x6, 0x100000001, 0x4, 0x1000, 0x5609, 0x9, 0x1, 0x8, 0x9, 0xffffffffffffffc0, 0x1, 0x8, 0x7ff, 0x100000001, 0x7fffffff, 0x9, 0xef86, 0x92, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1, 0x9, 0xbb, 0x80000000, 0xfffffffffffffdc6, 0xffffffffffffffff, 0x7fffffff, 0x0, 0xa3b, 0x8, 0x1ff, 0x6, 0x8, 0x8, 0x2, 0x3, 0xa6, 0xffffffff80000001, 0x9, 0x80, 0x4, 0x8, 0x9, 0x7, 0x7, 0x7, 0x6f4, 0x4, 0x5, 0x1f, 0x1ff, 0x101, 0x8, 0x924f, 0x8, 0x80, 0x1, 0x31cc, 0xac, 0xc7, 0xfffffffffffffffc, 0xfff, 0xfff, 0x7fff, 0x7, 0x10001, 0x1, 0x7fffffff, 0x8, 0x8, 0xff, 0x1, 0x8, 0x6, 0xad4, 0x7ff, 0x31, 0x54800, 0xffffffff, 0x7, 0x0, 0x20, 0x3, 0x0, 0x1010001, 0x44, 0x5, 0x9, 0x7, 0xb5c6, 0x0, 0xffff, 0x5, 0x0, 0xc48, 0x0, 0x10000, 0x9, 0x7, 0xc000000, 0x100000001, 0xb5cb, 0x7, 0x10001, 0xc4f]}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB="3a6d6178abdb45a914a8b439be4b80289817dce6ff53203a1a"]) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @dev}, &(0x7f0000000180)=0xc) 12:38:48 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200fff) 12:38:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendto$unix(r1, 0x0, 0x0, 0x4004050, 0x0, 0x0) 12:38:49 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x0) 12:38:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0xdc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x28, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8b0}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xffffffffffffffff, &(0x7f00000002c0), 0x3f, 0x0) fcntl$getflags(r5, 0x0) 12:38:49 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xc4000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x9, 0x2, 0x1}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x27}}}}, ["", ""]}, 0x28}}, 0x40000) r4 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x27, &(0x7f00000002c0)="508f64b55fb633798568a2090f4a5206d0a3f7") writev(r4, &(0x7f00000001c0), 0x0) 12:38:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r2, 0x10, 0x20, 0x7, 0x4e99e06a, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0xf9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r2, @ANYBLOB="00800007000000050000b9dceca009bdfe760000fd299014aaf5ffffff0028d4d6"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x6e, 0x8, 0x42, @remote, @private0, 0x7800, 0x40, 0x10001, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', r2, 0x10, 0x700, 0x40, 0x0, {{0x3b, 0x4, 0x1, 0x19, 0xec, 0x68, 0x0, 0x7f, 0x4, 0x0, @loopback, @local, {[@cipso={0x86, 0x47, 0x3, [{0x2, 0x2}, {0x7, 0x4, "191c"}, {0x7, 0xb, "c9d10890903a717bda"}, {0xb, 0x9, "5d3bb2c7d8cd14"}, {0x1, 0x5, "c9bf12"}, {0x7, 0xb, "fb05aabc74e5871922"}, {0x2, 0xf, "a397ddb20fd693bf8a67e458a4"}, {0x0, 0x8, "658770c58408"}]}, @generic={0x89, 0xb, "c1efaaf36c298422f3"}, @end, @timestamp_prespec={0x44, 0x54, 0xef, 0x3, 0xe, [{@local, 0x4}, {@multicast2, 0xcdbf}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0x1f}, {@local, 0x90}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@remote, 0x5}, {@empty, 0x80000000}, {@multicast2, 0x8}, {@loopback, 0xd4dd}]}, @ssrr={0x89, 0xf, 0xb4, [@rand_addr=0x64010101, @remote, @local]}, @ssrr={0x89, 0x1f, 0xd, [@multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @broadcast, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv4_deladdr={0x64, 0x15, 0x20, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x48, 0xc8, r2}, [@IFA_FLAGS={0x8}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES64, @ANYRESHEX=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00', r8}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x4b884cb4a339d178) 12:38:49 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x0) 12:38:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r1], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}], 0x1, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5000f4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000080)={0x38, 0x3, 0x0, [{0x4, 0x101, 0x3, 0x0, 0x0, 0x5, 0x73}, {0x71, 0x1, 0x2, 0x0, 0x3, 0xc3, 0x8}, {0x3, 0x4, 0xb6, 0x7, 0xdc, 0x6, 0x6}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) 12:38:49 executing program 2: unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x1a002) ioctl$PPPIOCDISCONN(r0, 0x4008744b) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x5000f4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000080)={{0x0, 0x3, 0x60af5f2c, 0x0, 0x3}, 0x9789, 0x1839, 0x4}) sendfile(r1, r2, 0x0, 0x8400fffffff8) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x3ff) 12:38:49 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x0) 12:38:49 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) dup3(r2, r1, 0x0) 12:38:49 executing program 0 (fault-call:11 fault-nth:0): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) [ 138.497603][ T5610] new mount options do not match the existing superblock, will be ignored [ 138.510677][ T5610] new mount options do not match the existing superblock, will be ignored 12:38:49 executing program 1: fchdir(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) [ 138.565468][ T5627] FAULT_INJECTION: forcing a failure. [ 138.565468][ T5627] name failslab, interval 1, probability 0, space 0, times 1 [ 138.581077][ T5626] serio: Serial port pts2 [ 138.595294][ T5627] CPU: 0 PID: 5627 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 138.605372][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:38:49 executing program 1: readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/204, 0xcc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1e7d, 0x31ce, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000240)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x80040, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3ded}}], [{@subj_role={'subj_role'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000001c0)='%&$\x00', &(0x7f0000000200)='./file0\x00', r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, {0x4, 0x0, 'v5'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 138.615495][ T5627] Call Trace: [ 138.618915][ T5627] dump_stack+0x1b0/0x21e [ 138.623247][ T5627] ? devkmsg_release+0x11c/0x11c [ 138.628361][ T5627] ? show_regs_print_info+0x12/0x12 [ 138.633561][ T5627] ? avc_denied+0x1c0/0x1c0 [ 138.638077][ T5627] should_fail+0x6fb/0x860 [ 138.642706][ T5627] ? setup_fault_attr+0x2b0/0x2b0 [ 138.647782][ T5627] ? avc_has_perm+0xbd/0x260 [ 138.652383][ T5627] ? avc_has_perm+0x15f/0x260 [ 138.657073][ T5627] ? alloc_pipe_info+0xa1/0x3a0 [ 138.661920][ T5627] should_failslab+0x5/0x20 [ 138.666415][ T5627] kmem_cache_alloc_trace+0x39/0x270 [ 138.672374][ T5627] alloc_pipe_info+0xa1/0x3a0 [ 138.677131][ T5627] splice_direct_to_actor+0x94e/0xb00 [ 138.682580][ T5627] ? avc_has_perm+0xbd/0x260 [ 138.687160][ T5627] ? match_file+0x120/0x120 [ 138.691657][ T5627] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 138.697025][ T5627] ? do_splice_direct+0x3d0/0x3d0 [ 138.702212][ T5627] ? pipe_to_sendpage+0x300/0x300 [ 138.707312][ T5627] ? security_file_permission+0x128/0x300 [ 138.713305][ T5627] do_splice_direct+0x279/0x3d0 [ 138.718241][ T5627] ? splice_direct_to_actor+0xb00/0xb00 [ 138.724161][ T5627] ? security_file_permission+0x128/0x300 [ 138.729952][ T5627] do_sendfile+0x89d/0x1110 [ 138.734474][ T5627] ? compat_writev+0x390/0x390 [ 138.739391][ T5627] ? security_file_permission+0x128/0x300 [ 138.745098][ T5627] ? vfs_write+0x427/0x4f0 [ 138.749504][ T5627] ? fput_many+0x42/0x1a0 [ 138.753952][ T5627] __x64_sys_sendfile64+0x1ae/0x220 [ 138.759294][ T5627] ? __ia32_sys_sendfile+0x240/0x240 [ 138.764708][ T5627] do_syscall_64+0xcb/0x150 [ 138.769333][ T5627] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 138.775209][ T5627] RIP: 0033:0x45de59 [ 138.779158][ T5627] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 138.799133][ T5627] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 138.808051][ T5627] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 138.816032][ T5627] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 138.824103][ T5627] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 138.832069][ T5627] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000000 [ 138.840517][ T5627] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0xdc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x28, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8b0}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xffffffffffffffff, &(0x7f00000002c0), 0x3f, 0x0) fcntl$getflags(r5, 0x0) 12:38:50 executing program 0 (fault-call:11 fault-nth:1): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:50 executing program 2: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') eventfd2(0x100, 0x80001) preadv(r0, &(0x7f0000000500), 0x37d, 0x7fffefff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r1, 0x2008002) ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x201002) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x11) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000140)=0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xe) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="db80833c007523589704bdbc3f000100765769005e0ed219e3f0e76c46c000020008000ab2d23814e97d1784c9566ed1b50443f1e57ced8e11acdab5dc1884a6d92c5add98a6503c841e4cdc8538c52b7156fbe0a74d732a4e68f04a1b3dec48f3e840ae858019e3a14acb621e899980005743ea14b1e3e40cad6bb802d5175240017feaba0d4c0c955df492806f2e8846434cb58c582957d31cfaa20bc550baab80b59f342088759e96e1a9861ab0073dbf8d816be95c5354924522808d22bf789dd9d101dea1401d70025213faded005912f8bf74dfaf7f64f415fd785fcfacfadc1ea0732e675855eee0a88650b0bd9678837cb9d0afaae4247b5531c81370ba07029c360f769f8914a2052606ab762841aa2a1527a143613103911fb60316774ab7711fc544ec266cf1f02e2a2", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) 12:38:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) dup3(r2, r1, 0x0) [ 139.012406][ T70] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.020247][ T5005] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 139.068658][ T5646] serio: Serial port pts2 [ 139.088851][ T5650] FAULT_INJECTION: forcing a failure. [ 139.088851][ T5650] name failslab, interval 1, probability 0, space 0, times 0 [ 139.102666][ T5650] CPU: 1 PID: 5650 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 139.112765][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.122995][ T5650] Call Trace: [ 139.126296][ T5650] dump_stack+0x1b0/0x21e [ 139.130794][ T5650] ? devkmsg_release+0x11c/0x11c [ 139.135781][ T5650] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 139.141190][ T5650] ? show_regs_print_info+0x12/0x12 [ 139.146551][ T5650] ? avc_denied+0x1c0/0x1c0 [ 139.151063][ T5650] should_fail+0x6fb/0x860 [ 139.155485][ T5650] ? setup_fault_attr+0x2b0/0x2b0 [ 139.160662][ T5650] ? setup_fault_attr+0x2b0/0x2b0 [ 139.165845][ T5650] ? avc_has_perm+0xbd/0x260 [ 139.170316][ T5645] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.170522][ T5650] ? avc_has_perm+0x15f/0x260 [ 139.170533][ T5650] ? kcalloc+0x32/0x60 [ 139.170542][ T5650] should_failslab+0x5/0x20 [ 139.170559][ T5650] __kmalloc+0x5f/0x2c0 [ 139.197203][ T5650] ? kmem_cache_alloc_trace+0xc3/0x270 [ 139.202663][ T5650] kcalloc+0x32/0x60 [ 139.206560][ T5650] alloc_pipe_info+0x1b9/0x3a0 [ 139.211324][ T5650] splice_direct_to_actor+0x94e/0xb00 [ 139.216790][ T5650] ? avc_has_perm+0xbd/0x260 [ 139.221527][ T5650] ? match_file+0x120/0x120 [ 139.226116][ T5650] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 139.231489][ T5650] ? do_splice_direct+0x3d0/0x3d0 [ 139.236678][ T5650] ? pipe_to_sendpage+0x300/0x300 [ 139.241718][ T5650] ? security_file_permission+0x128/0x300 [ 139.247435][ T5650] do_splice_direct+0x279/0x3d0 [ 139.252289][ T5650] ? splice_direct_to_actor+0xb00/0xb00 [ 139.257844][ T5650] ? security_file_permission+0x128/0x300 [ 139.263655][ T5650] do_sendfile+0x89d/0x1110 [ 139.268160][ T5650] ? compat_writev+0x390/0x390 [ 139.273011][ T5650] ? security_file_permission+0x128/0x300 [ 139.278826][ T5650] ? vfs_write+0x427/0x4f0 [ 139.283244][ T5650] ? fput_many+0x42/0x1a0 [ 139.287830][ T5650] __x64_sys_sendfile64+0x1ae/0x220 [ 139.293120][ T5650] ? __ia32_sys_sendfile+0x240/0x240 [ 139.298427][ T5650] do_syscall_64+0xcb/0x150 [ 139.302939][ T5650] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 139.308832][ T5650] RIP: 0033:0x45de59 12:38:50 executing program 0 (fault-call:11 fault-nth:2): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 139.312815][ T5650] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.332837][ T5650] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.337550][ T5645] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.341259][ T5650] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 139.341264][ T5650] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:38:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa9be}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000180}, 0x44000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82081082}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x4c}}, 0x4040000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fsync(r3) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fallocate(r3, 0x0, 0x0, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 139.341269][ T5650] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 139.341274][ T5650] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000001 [ 139.341279][ T5650] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 139.393223][ T5662] FAULT_INJECTION: forcing a failure. [ 139.393223][ T5662] name fail_page_alloc, interval 1, probability 0, space 0, times 1 12:38:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) dup3(r2, r1, 0x0) [ 139.411398][ T5662] CPU: 1 PID: 5662 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 139.421804][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.432188][ T5662] Call Trace: [ 139.435489][ T5662] dump_stack+0x1b0/0x21e [ 139.439830][ T5662] ? devkmsg_release+0x11c/0x11c [ 139.444777][ T5662] ? show_regs_print_info+0x12/0x12 [ 139.449986][ T5662] ? unwind_get_return_address_ptr+0x130/0x130 [ 139.456150][ T5662] should_fail+0x6fb/0x860 [ 139.460571][ T5662] ? setup_fault_attr+0x2b0/0x2b0 [ 139.465606][ T5662] __alloc_pages_nodemask+0x1ee/0x7c0 [ 139.471175][ T5662] ? xas_load+0x46f/0x4c0 [ 139.475515][ T5662] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 139.481068][ T5662] ? find_get_entry+0x5da/0x670 [ 139.485924][ T5662] ? xa_load+0x323/0x340 [ 139.490170][ T5662] __do_page_cache_readahead+0x244/0x510 [ 139.495807][ T5662] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 139.502464][ T5662] ? unwind_next_frame+0x1c07/0x22b0 [ 139.507757][ T5662] ? page_cache_sync_readahead+0xa3/0x3c0 [ 139.513486][ T5662] generic_file_read_iter+0x626/0x20a0 [ 139.519055][ T5662] ? find_get_pages_range_tag+0xae0/0xae0 [ 139.524998][ T5662] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 139.530560][ T5662] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 139.536634][ T5662] ? avc_denied+0x1c0/0x1c0 [ 139.541126][ T5662] generic_file_splice_read+0x491/0x780 [ 139.546680][ T5662] ? splice_shrink_spd+0xb0/0xb0 [ 139.552035][ T5662] ? security_file_permission+0x1e9/0x300 [ 139.557762][ T5662] ? splice_shrink_spd+0xb0/0xb0 [ 139.562709][ T5662] splice_direct_to_actor+0x3cf/0xb00 [ 139.568174][ T5662] ? do_splice_direct+0x3d0/0x3d0 [ 139.573203][ T5662] ? pipe_to_sendpage+0x300/0x300 [ 139.578322][ T5670] serio: Serial port pts2 [ 139.578451][ T5662] ? security_file_permission+0x128/0x300 [ 139.588644][ T5662] do_splice_direct+0x279/0x3d0 [ 139.593494][ T5662] ? splice_direct_to_actor+0xb00/0xb00 [ 139.599051][ T5662] ? security_file_permission+0x128/0x300 [ 139.604925][ T5662] do_sendfile+0x89d/0x1110 [ 139.609796][ T5662] ? compat_writev+0x390/0x390 [ 139.614559][ T5662] ? security_file_permission+0x128/0x300 [ 139.620262][ T5662] ? vfs_write+0x427/0x4f0 [ 139.624675][ T5662] ? fput_many+0x42/0x1a0 [ 139.629014][ T5662] __x64_sys_sendfile64+0x1ae/0x220 [ 139.634235][ T5662] ? __ia32_sys_sendfile+0x240/0x240 [ 139.639703][ T5662] do_syscall_64+0xcb/0x150 [ 139.644756][ T5662] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 139.650726][ T5662] RIP: 0033:0x45de59 [ 139.654678][ T5662] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 139.674650][ T5662] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.683502][ T5662] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 139.691624][ T5662] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 139.699670][ T5662] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 139.707906][ T5662] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000002 [ 139.716042][ T5662] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4e2672a971cdba71}, 0x1eb7a, 0x0, 0x400, 0x1, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/77, 0x4d) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r1, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r1, r1, &(0x7f0000000200), 0xa198) socket$inet(0x2, 0xa, 0x0) 12:38:50 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) dup3(r2, r1, 0x0) [ 139.792349][ T5005] usb 6-1: device descriptor read/64, error 18 [ 139.807930][ T5678] serio: Serial port pts2 [ 139.866070][ T5682] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 139.932999][ T70] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 139.954392][ T70] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.980925][ T70] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.991188][ T70] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.004973][ T70] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 140.014630][ T70] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.024640][ T70] usb 2-1: config 0 descriptor?? [ 140.060177][ T5686] overlayfs: './file0' not a directory [ 140.192321][ T5005] usb 6-1: device descriptor read/64, error 18 [ 140.462310][ T5005] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 140.504957][ T70] ryos 0003:1E7D:31CE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 140.704051][ T70] usb 2-1: USB disconnect, device number 4 [ 140.752350][ T5005] usb 6-1: device descriptor read/64, error 18 [ 141.162293][ T5005] usb 6-1: device descriptor read/64, error 18 [ 141.282359][ T5005] usb usb6-port1: attempt power cycle [ 141.482331][ T70] usb 2-1: new high-speed USB device number 5 using dummy_hcd 12:38:52 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) 12:38:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @remote}, {0x6}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 'bond0\x00'}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x8, 0xea75}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0x3, 0x8, 0x0, 0x11}) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, 0x0, 0x0, @u32=0x5}]}, 0x1c}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x1, 0xcf, 0x1, 0x3, 0x0, 0x80000001, 0x1a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x33269ca1, 0x1, @perf_config_ext={0x6, 0x7}, 0x20c0, 0xffffffffffffffff, 0xdfa, 0x5, 0x8, 0x7fff}, 0x0, 0xc, 0xffffffffffffffff, 0xa) 12:38:52 executing program 1: r0 = creat(&(0x7f0000000240)='./bus\x00', 0xa4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x1, 0xf27, 0x10, @empty, @local, 0x8, 0x10, 0x4, 0x8}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xfd14) ftruncate(r0, 0x8) lseek(r0, 0x7ffffd, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xfd14) write$P9_RREADLINK(r1, &(0x7f0000000300)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)="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", 0x1000, r0}, 0x68) fallocate(r0, 0x1, 0x1000, 0x28120001) 12:38:52 executing program 0 (fault-call:11 fault-nth:3): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:52 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @empty}, 0x1aa, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)='veth0_to_bridge\x00', 0x7, 0x7fffffff, 0x5}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x1, 0x810000, 0x7f, 0x8001, 0x81}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40003, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000068000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 12:38:52 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @main=@item_4={0x3, 0x0, 0x9, "dd2266d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "d2e0e9e7"}]}}, 0x0}, 0x0) [ 141.579937][ T5706] FAULT_INJECTION: forcing a failure. [ 141.579937][ T5706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.590403][ T5709] serio: Serial port pts2 [ 141.595068][ T5706] CPU: 0 PID: 5706 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 141.607595][ T5706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.617636][ T5706] Call Trace: [ 141.620914][ T5706] dump_stack+0x1b0/0x21e [ 141.625235][ T5706] ? devkmsg_release+0x11c/0x11c 12:38:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5d}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 141.630160][ T5706] ? show_regs_print_info+0x12/0x12 [ 141.635347][ T5706] ? kasan_alloc_pages+0x4a/0x60 [ 141.640278][ T5706] should_fail+0x6fb/0x860 [ 141.644686][ T5706] ? setup_fault_attr+0x2b0/0x2b0 [ 141.649699][ T5706] __alloc_pages_nodemask+0x1ee/0x7c0 [ 141.655058][ T5706] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 141.655070][ T5706] ? find_get_entry+0x5da/0x670 [ 141.655079][ T5706] ? xa_load+0x323/0x340 [ 141.655089][ T5706] __do_page_cache_readahead+0x244/0x510 [ 141.655101][ T5706] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 141.655117][ T5706] ? unwind_next_frame+0x1c07/0x22b0 [ 141.655126][ T5706] ? page_cache_sync_readahead+0xa3/0x3c0 [ 141.655136][ T5706] generic_file_read_iter+0x626/0x20a0 [ 141.655150][ T5706] ? find_get_pages_range_tag+0xae0/0xae0 [ 141.655160][ T5706] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 141.655169][ T5706] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 141.655177][ T5706] ? avc_denied+0x1c0/0x1c0 [ 141.655186][ T5706] generic_file_splice_read+0x491/0x780 12:38:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="c3ae801167092856dd2fa7f6921d27f3c0870b7db284cdda76e65b304a6045cdc0e8a770a2daf28e41306bd1657bc96df1dd44dca2d2b4469138802b7950c7252db54107c3f4b8c12cf0eab032565ea6413eac1a145aca694b692b9ce88249cc1e988909c6427c4a37bacad798f14531dd4856b9ad869a911fd61977c521ac0a0ef837e1eb2e68b5e82c5e0c50eb667dcfa7bec0abc655d5a82e23aee4e06f364e80e1edf0ad8effb533e3a3e17f5f24ae8385e27e73eeb1b0f9abc8c3a7160a", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffd8df25050000003800018008000600070000001400040000000000000000000000000000000001060005004e20000005000200ff0000000500020000000000080002000300000008000300030000000800020004000000", @ANYBLOB="4c14fe23acd769e5e4eb205ca1cd9edf98554fa2c9b988194dd4c0ab5c0550d8f8ea4e55c9c33f806bf8013e776c2eb15c3cc4535f6b1d20a43e67acc1ef04a1249885e003f745f79f1a8f448915053f7e964f46ae38f3357e9ad278d5e746e36c84bbe01cd12823a4dde68b8a7cc66682d271e6d75022ff0c9d5c9775e05336e5c3db98d59709c6fedcf788ffc9ca409f2b1550fc18c0044d1cd511373f959482ff5ac7f827d9989ed20a7b08efd3454326ab1288c49516a4f8253204e86a97bbdf25728b7a4d2d3025557bd12a6195613e32447ac4bbaa17e8397840a3a93a46f41e745c7fc53e3738b2d7", @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x800) keyctl$set_timeout(0xf, 0x0, 0xffffffffffffffe0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x30d5}, 0x0, 0x0, 0x0, 0x0, 0x1000000008, 0x0, 0xa}, 0x0, 0x400000000, 0xffffffffffffffff, 0x9) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000200)=@random="6f3060b21a107b401c36d24593621e69792865f9ccf04a872548", 0x1a, 0x2cc) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x10a) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 12:38:52 executing program 0 (fault-call:11 fault-nth:4): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 141.655196][ T5706] ? splice_shrink_spd+0xb0/0xb0 [ 141.655210][ T5706] ? security_file_permission+0x1e9/0x300 [ 141.655219][ T5706] ? splice_shrink_spd+0xb0/0xb0 [ 141.655226][ T5706] splice_direct_to_actor+0x3cf/0xb00 [ 141.655236][ T5706] ? do_splice_direct+0x3d0/0x3d0 [ 141.655242][ T5706] ? pipe_to_sendpage+0x300/0x300 [ 141.655252][ T5706] ? security_file_permission+0x128/0x300 [ 141.655259][ T5706] do_splice_direct+0x279/0x3d0 [ 141.655267][ T5706] ? splice_direct_to_actor+0xb00/0xb00 [ 141.655278][ T5706] ? security_file_permission+0x128/0x300 [ 141.655286][ T5706] do_sendfile+0x89d/0x1110 [ 141.655295][ T5706] ? compat_writev+0x390/0x390 [ 141.655304][ T5706] ? security_file_permission+0x128/0x300 [ 141.655313][ T5706] ? vfs_write+0x427/0x4f0 [ 141.655321][ T5706] ? fput_many+0x42/0x1a0 [ 141.655331][ T5706] __x64_sys_sendfile64+0x1ae/0x220 [ 141.655340][ T5706] ? __ia32_sys_sendfile+0x240/0x240 [ 141.655350][ T5706] do_syscall_64+0xcb/0x150 [ 141.655359][ T5706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 141.655366][ T5706] RIP: 0033:0x45de59 [ 141.655376][ T5706] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 141.655381][ T5706] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.655391][ T5706] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 141.655397][ T5706] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 141.655402][ T5706] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 141.655407][ T5706] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000003 [ 141.655412][ T5706] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 141.802661][ T5727] FAULT_INJECTION: forcing a failure. [ 141.802661][ T5727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.924097][ T5727] CPU: 1 PID: 5727 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 141.934173][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.944213][ T5727] Call Trace: [ 141.947526][ T5727] dump_stack+0x1b0/0x21e [ 141.951841][ T5727] ? devkmsg_release+0x11c/0x11c [ 141.956761][ T5727] ? show_regs_print_info+0x12/0x12 [ 141.961935][ T5727] ? kasan_alloc_pages+0x4a/0x60 [ 141.966861][ T5727] should_fail+0x6fb/0x860 [ 141.971255][ T5727] ? setup_fault_attr+0x2b0/0x2b0 [ 141.976260][ T5727] __alloc_pages_nodemask+0x1ee/0x7c0 [ 141.981611][ T5727] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 141.987134][ T5727] ? find_get_entry+0x5da/0x670 [ 141.991958][ T5727] ? xa_load+0x323/0x340 [ 141.996199][ T5727] __do_page_cache_readahead+0x244/0x510 [ 142.001893][ T5727] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 142.008282][ T5727] ? unwind_next_frame+0x1c07/0x22b0 [ 142.013541][ T5727] ? page_cache_sync_readahead+0xa3/0x3c0 [ 142.019251][ T5727] generic_file_read_iter+0x626/0x20a0 [ 142.024687][ T5727] ? find_get_pages_range_tag+0xae0/0xae0 [ 142.030380][ T5727] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 142.035727][ T5727] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.041769][ T5727] ? avc_denied+0x1c0/0x1c0 [ 142.046274][ T5727] generic_file_splice_read+0x491/0x780 [ 142.051810][ T5727] ? splice_shrink_spd+0xb0/0xb0 [ 142.056726][ T5727] ? security_file_permission+0x1e9/0x300 [ 142.062418][ T5727] ? splice_shrink_spd+0xb0/0xb0 [ 142.067329][ T5727] splice_direct_to_actor+0x3cf/0xb00 [ 142.072677][ T5727] ? do_splice_direct+0x3d0/0x3d0 [ 142.077684][ T5727] ? pipe_to_sendpage+0x300/0x300 [ 142.082685][ T5727] ? security_file_permission+0x128/0x300 [ 142.088375][ T5727] do_splice_direct+0x279/0x3d0 [ 142.093198][ T5727] ? splice_direct_to_actor+0xb00/0xb00 [ 142.098720][ T5727] ? security_file_permission+0x128/0x300 [ 142.104847][ T5727] do_sendfile+0x89d/0x1110 [ 142.109323][ T5727] ? compat_writev+0x390/0x390 [ 142.114060][ T5727] ? security_file_permission+0x128/0x300 [ 142.119757][ T5727] ? vfs_write+0x427/0x4f0 [ 142.124151][ T5727] ? fput_many+0x42/0x1a0 [ 142.128466][ T5727] __x64_sys_sendfile64+0x1ae/0x220 [ 142.133653][ T5727] ? __ia32_sys_sendfile+0x240/0x240 [ 142.138910][ T5727] do_syscall_64+0xcb/0x150 [ 142.143387][ T5727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.149251][ T5727] RIP: 0033:0x45de59 [ 142.153120][ T5727] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 142.172708][ T5727] RSP: 002b:00007f33856c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.181104][ T5727] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 142.189049][ T5727] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 142.196993][ T5727] RBP: 00007f33856c0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 142.204935][ T5727] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000004 [ 142.212895][ T5727] R13: 00007ffd1345421f R14: 00007f33856c19c0 R15: 000000000118bfd4 [ 142.226172][ T3536] usb 5-1: new high-speed USB device number 16 using dummy_hcd 12:38:53 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus/../file0\x00', 0x24540, 0x89) sendfile(r0, r1, 0x0, 0x8400fffffff8) r2 = fsmount(r0, 0x0, 0x38) times(&(0x7f00000000c0)) fcntl$setstatus(r0, 0x4, 0x6400) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x25, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 12:38:53 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) syz_usb_disconnect(r0) munlockall() 12:38:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) r1 = geteuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r6, r6, 0x0) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read'}}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', r3}}, {@fowner_eq={'fowner'}}, {@hash='hash'}, {@euid_gt={'euid>', r6}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@seclabel='seclabel'}]}}) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x6, 0x4) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) setresgid(r9, r7, r4) sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 12:38:53 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) 12:38:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba63b66788a341cda555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c5654c90057dc7ba04c9f1f65515b0e1a38d8665522be18bd10a48b043d2c42646d25dfd73d06d7535f7866970e9f03d124cecabeeb01faa50761cb052c41cfb94d0293bfae5ca5c9f07dc6751df1394e7576271d065a0e3ccae6603173a649c1cfd2114dc4b95fbbf0f8b6587d452d64e7cc957d7757800000000138d5521f9453559bea8a860e8efbc6f2b2a3e3173d5de1b5e64a6ec7ae0dab5d91cec3da386621441ecda46c4b8ac49a510ce03cf02a76d33ad825bc8f83ab9444238561ed8cc895683e4c415cc44b5de17fa7e8b75ead43180aa252184966826485abf7e9ab79af3d42c3d6934779902212895b429f89c3772d42c5b42a8f78ab5540b45d085b5710209b6d0ef27b9da898352a7f85b7025919c2b4856a2cd2f9c8bd6bcb7bce723caf21382e21c9aa62edb2acd2bf24b643970e081c7a341f455d2f22b03a7ec544def4784c969422fe3db2cd593074292e0bbc333be792d8396a4d6252b43f922b03ea7caff1d1702d258499541fc4fe605eff5fd2c2f4c6bd1babb828326050780a0a33d6eb5b90d6524cdd693b6ee6269bf98bbacc8262f44552dce6c7b3a01a561717c6d7f53e297f7d26d10657cc425690a083100f05c559ba52ef718d1adf74d6666e89011544fad29dd4fbac27be8b4042788c95def0be206000000ed03d6c82deca2a689755910a96bf42788fe712e5a54305ac7f23de60000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000200)) 12:38:53 executing program 0 (fault-call:11 fault-nth:5): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 142.425012][ T5749] FAULT_INJECTION: forcing a failure. [ 142.425012][ T5749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.441739][ T5753] serio: Serial port pts2 [ 142.446161][ T5749] CPU: 0 PID: 5749 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 142.456213][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.466245][ T5749] Call Trace: [ 142.469517][ T5749] dump_stack+0x1b0/0x21e [ 142.473821][ T5749] ? devkmsg_release+0x11c/0x11c [ 142.478735][ T5749] ? show_regs_print_info+0x12/0x12 [ 142.483920][ T5749] ? kasan_alloc_pages+0x4a/0x60 [ 142.489008][ T5749] should_fail+0x6fb/0x860 [ 142.493421][ T5749] ? setup_fault_attr+0x2b0/0x2b0 [ 142.498430][ T5749] __alloc_pages_nodemask+0x1ee/0x7c0 [ 142.503784][ T5749] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 142.509323][ T5749] ? find_get_entry+0x5da/0x670 [ 142.514152][ T5749] ? xa_load+0x323/0x340 [ 142.518371][ T5749] __do_page_cache_readahead+0x244/0x510 [ 142.523999][ T5749] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 142.530388][ T5749] ? unwind_next_frame+0x1c07/0x22b0 [ 142.535646][ T5749] ? page_cache_sync_readahead+0xa3/0x3c0 [ 142.541367][ T5749] generic_file_read_iter+0x626/0x20a0 [ 142.546821][ T5749] ? find_get_pages_range_tag+0xae0/0xae0 [ 142.552515][ T5749] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 142.557865][ T5749] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.563905][ T5749] ? avc_denied+0x1c0/0x1c0 [ 142.568395][ T5749] generic_file_splice_read+0x491/0x780 [ 142.573917][ T5749] ? splice_shrink_spd+0xb0/0xb0 [ 142.578848][ T5749] ? security_file_permission+0x1e9/0x300 [ 142.584543][ T5749] ? splice_shrink_spd+0xb0/0xb0 [ 142.589465][ T5749] splice_direct_to_actor+0x3cf/0xb00 [ 142.594813][ T5749] ? do_splice_direct+0x3d0/0x3d0 [ 142.599809][ T5749] ? pipe_to_sendpage+0x300/0x300 [ 142.604812][ T5749] ? security_file_permission+0x128/0x300 [ 142.610510][ T5749] do_splice_direct+0x279/0x3d0 [ 142.615335][ T5749] ? splice_direct_to_actor+0xb00/0xb00 [ 142.620860][ T5749] ? security_file_permission+0x128/0x300 [ 142.626552][ T5749] do_sendfile+0x89d/0x1110 [ 142.631047][ T5749] ? compat_writev+0x390/0x390 [ 142.635797][ T5749] ? security_file_permission+0x128/0x300 [ 142.641492][ T5749] ? vfs_write+0x427/0x4f0 [ 142.645885][ T5749] ? fput_many+0x42/0x1a0 [ 142.650191][ T5749] __x64_sys_sendfile64+0x1ae/0x220 [ 142.655369][ T5749] ? __ia32_sys_sendfile+0x240/0x240 [ 142.660633][ T5749] do_syscall_64+0xcb/0x150 [ 142.665111][ T5749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 142.670987][ T5749] RIP: 0033:0x45de59 [ 142.674861][ T5749] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 142.694438][ T5749] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.702825][ T5749] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 142.710843][ T5749] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:38:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="3d313f6939073dffd0bc4444eddd28c5e761650c1dad74588db14e3583b7322bc0159c018eee33012b17434d134f27ae434b76a503d4a98e5b5f0e7b39b4415251e87f7c8675e5c746788663178b0996df4fb969bc0fd12556fc344682680b21659b90d4bddde69b84c9caa7caa1cc9f6559c9d52cf0d6c3a7db8099dca68d64d17265fddf91332babcd1b0be8d3bf6df0e9c6ba05ec", 0x96, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @private}}}) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0x1000, 0xffffffffffffdfff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r0, r0], 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000142110ba673d465c56874798c0c485d66dc962060000000000000a000000"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0xe, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$notify(r3, 0x402, 0x25) 12:38:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000340)="1cd8ec1fe9f2891b96a10cb54e039b8c77b8284cba697b6a7bdc796fb3e7779600cdc479eb0f8030739143ebb89477f4d8b7793014e122c50af1b523f0c454e33c93dbed043d8363b39ed91b45ecba432efd2a608f42d06acd111a98dd7412c4cab912e8e517991da3fd06bca1f8c374e5a8797c9f9a0d67dc34b6c2bc2c0e92a235b9847870288a38d4bd8928d2fb55e4318d64b209547fec702aec9d569e2bf0728cb13f77b73110e309b1d63be1bef6df53fe4f70c2f545c7e79ca9980c778a2cf5d5444b", 0xc6}, {&(0x7f0000000440)="0334f5f467ff181297856379aa4433e8e4538aa95becbff84889576e2d31020980a5c4dcc122c8b45e39794c75d532abf9311f0ffe68c4ce3f79374a528c94619890480f15", 0x45}, {&(0x7f00000004c0)="81c3b78560c8829a653607f125352925689428b89038c53ac788008430466f6abd5d73726d18b69ed33fb968cf6878176e9be7a3937ff4a3b6c5ca89d6f16f2c76bb27a71e08454774a877bd8470987e3c63957689a324d6b67661b4999dca41bca95ddbb8f68f3796b01f064e1db10e6ffaaee6e4ec9ce8c2fe352955c773", 0x7f}], 0x3) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050701ffffff8927ffff00000020", @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f00000041c0), 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x4, 0x70bd2d, 0x25dfdc00, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48}}}]}, 0x24}}, 0x0) [ 142.718809][ T5749] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 142.726759][ T5749] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000005 [ 142.734709][ T5749] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 142.795214][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8468 sclass=netlink_route_socket pid=5759 comm=syz-executor.1 [ 142.798053][ T5763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=5763 comm=syz-executor.2 [ 142.821201][ T3536] usb 5-1: Using ep0 maxpacket: 16 [ 142.830859][ T5765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8468 sclass=netlink_route_socket pid=5765 comm=syz-executor.1 [ 142.831347][ T5767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=112 sclass=netlink_route_socket pid=5767 comm=syz-executor.2 [ 142.942359][ T3536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.953257][ T3536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.962991][ T3536] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.976131][ T3536] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.985170][ T3536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.994034][ T3536] usb 5-1: config 0 descriptor?? [ 143.042279][ T5005] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 143.212373][ T5005] usb 6-1: device descriptor read/8, error -61 [ 143.463200][ T3536] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 143.471073][ T3536] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 143.480434][ T3536] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 143.492669][ T5005] usb 6-1: device descriptor read/8, error -61 [ 143.498959][ T3536] microsoft 0003:045E:07DA.0002: no inputs found [ 143.506197][ T3536] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 143.670460][ T5034] usb 5-1: USB disconnect, device number 16 [ 143.772318][ T5005] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 143.942358][ T5005] usb 6-1: device descriptor read/8, error -61 [ 144.212320][ T5005] usb 6-1: device descriptor read/8, error -61 [ 144.332321][ T5005] usb usb6-port1: unable to enumerate USB device [ 144.442403][ T5034] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.682274][ T5034] usb 5-1: Using ep0 maxpacket: 16 [ 144.802340][ T5034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.813240][ T5034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.822973][ T5034] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.835940][ T5034] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.844979][ T5034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.853572][ T5034] usb 5-1: config 0 descriptor?? 12:38:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r4, r4, 0x0, 0x8400fffffff8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r6, r7/1000+10000}, {0x77359400}}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080005000900000008000300", @ANYRES32=r3, @ANYBLOB="14000400693a"], 0x38}}, 0x0) 12:38:55 executing program 0 (fault-call:11 fault-nth:6): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x1001) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0xfffffffc, 0x6}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x113) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:38:55 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0xe, 0x9c48, {0x52, 0x0, 0x4, {0x1f, 0x3}, {0x90}, @period={0x5a, 0x5, 0x3, 0x101, 0xfff7, {0x0, 0x4, 0x0, 0x3}, 0x5, &(0x7f0000000000)=[0x4893, 0x0, 0x8f, 0x8, 0xd36]}}, {0x56, 0x8, 0x59, {0xffff, 0x200}, {0xff3f, 0x2}, @cond=[{0x401, 0x1, 0x7, 0x9, 0x9d4, 0x2}, {0x6, 0x1b, 0x4, 0x8, 0x6, 0x9f7}]}}) 12:38:56 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040)="730304", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_newrule={0x7c, 0x20, 0x100, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x20, 0x8c, 0x7f, 0x0, 0x0, 0x5}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000000000000}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_DST={0x8, 0x1, @local}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x7c}}, 0x44001) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="00012dbd7000f1dbdf2501000000200001801400020069703665727370616e3000000000000008000100", @ANYRES32=r7, @ANYBLOB="980002800c00018008000100000000002400018008000100010000000800010003000000080001000300000008000100080000000c00018008000100030000004c0001800800010006000000080001000500000008000100080000000800010006000000080001000000000008000100020000000800010004000000080001000500000008000100030000000c0001800800010002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040081}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private2, r7}, 0x14) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) [ 145.000062][ T5788] FAULT_INJECTION: forcing a failure. [ 145.000062][ T5788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.001225][ T5792] serio: Serial port pts2 [ 145.015118][ T5788] CPU: 1 PID: 5788 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 145.027728][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.037772][ T5788] Call Trace: [ 145.041082][ T5788] dump_stack+0x1b0/0x21e [ 145.045385][ T5788] ? devkmsg_release+0x11c/0x11c [ 145.050292][ T5788] ? show_regs_print_info+0x12/0x12 [ 145.055460][ T5788] ? kasan_alloc_pages+0x4a/0x60 [ 145.060372][ T5788] should_fail+0x6fb/0x860 [ 145.065114][ T5788] ? setup_fault_attr+0x2b0/0x2b0 [ 145.070129][ T5788] __alloc_pages_nodemask+0x1ee/0x7c0 [ 145.072336][ T5034] usbhid 5-1:0.0: can't add hid device: -71 [ 145.075492][ T5788] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 145.075509][ T5788] ? find_get_entry+0x5da/0x670 [ 145.081472][ T5034] usbhid: probe of 5-1:0.0 failed with error -71 [ 145.086887][ T5788] ? xa_load+0x323/0x340 [ 145.086896][ T5788] __do_page_cache_readahead+0x244/0x510 [ 145.086907][ T5788] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 145.086916][ T5788] ? unwind_next_frame+0x1c07/0x22b0 [ 145.086923][ T5788] ? page_cache_sync_readahead+0xa3/0x3c0 [ 145.086930][ T5788] generic_file_read_iter+0x626/0x20a0 [ 145.086941][ T5788] ? find_get_pages_range_tag+0xae0/0xae0 [ 145.086949][ T5788] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 145.086957][ T5788] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.086964][ T5788] ? avc_denied+0x1c0/0x1c0 [ 145.086972][ T5788] generic_file_splice_read+0x491/0x780 [ 145.086983][ T5788] ? splice_shrink_spd+0xb0/0xb0 [ 145.086997][ T5788] ? security_file_permission+0x1e9/0x300 [ 145.122145][ T5034] usb 5-1: USB disconnect, device number 17 [ 145.125315][ T5788] ? splice_shrink_spd+0xb0/0xb0 [ 145.125324][ T5788] splice_direct_to_actor+0x3cf/0xb00 [ 145.125334][ T5788] ? do_splice_direct+0x3d0/0x3d0 [ 145.125340][ T5788] ? pipe_to_sendpage+0x300/0x300 [ 145.125357][ T5788] ? security_file_permission+0x128/0x300 [ 145.200248][ T5788] do_splice_direct+0x279/0x3d0 [ 145.205082][ T5788] ? splice_direct_to_actor+0xb00/0xb00 [ 145.210617][ T5788] ? security_file_permission+0x128/0x300 [ 145.216317][ T5788] do_sendfile+0x89d/0x1110 [ 145.220810][ T5788] ? compat_writev+0x390/0x390 [ 145.225559][ T5788] ? security_file_permission+0x128/0x300 [ 145.231264][ T5788] ? vfs_write+0x427/0x4f0 [ 145.235662][ T5788] ? fput_many+0x42/0x1a0 [ 145.239975][ T5788] __x64_sys_sendfile64+0x1ae/0x220 [ 145.245164][ T5788] ? __ia32_sys_sendfile+0x240/0x240 [ 145.250434][ T5788] do_syscall_64+0xcb/0x150 [ 145.254920][ T5788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.260793][ T5788] RIP: 0033:0x45de59 [ 145.264671][ T5788] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 145.284262][ T5788] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.292658][ T5788] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 12:38:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '&'}, {0x20, '$\\$('}, {0x20, '&'}], 0xa, "43b4b453bbe2039d2918e652bf6b36a9105b8eba14397b3a727bebda9d0279432c3bee293c"}, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) splice(r0, 0x0, r3, 0x0, 0x19404, 0x4) 12:38:56 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/233, 0xe9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x848c0, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x1) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x11736c, 0x4) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x2f, 0x0) [ 145.300615][ T5788] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 145.308571][ T5788] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 145.316527][ T5788] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000006 [ 145.324483][ T5788] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:56 executing program 2: ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="870000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xf3, &(0x7f00000003c0)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) splice(r0, &(0x7f0000000000)=0x7f, r2, &(0x7f00000000c0)=0x7, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000003000000d4410d014400680000202990780a01010164010102020000000001020368000be0289eb2d0d55a3d4d050cadad54aadd26d0126d36010edcd36414ae4f18bcbcc9c22b865100000000010dde5ccd31100311d461bbfa020788db0425c300020504d3f70112b6991d5950f41c7b7b9ffc28477ca006050a71125011f860edf8000d22e33ca2270f75759b664602087d20cffeffe2890f500a010100e0000001ac1414aa07231cffffffffffffffffe00000027f0000017f000001ffffffffffffffff7f0000014434af137f000001000000fb640101020000000664010100000000dce000000100001000ac14141f000000040000000038000000443c3b71e000000200000000e000000200008001ac1414130000000364010102000001ffffffffff0000004e0000000000000004ac1414bb000000090707f7640101010194040100000000"]}) 12:38:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={@mcast2, 0x39}) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1a008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x7, 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r4, &(0x7f00000003c0)="8a3444dd0681016da2cdc2f9675c09860334e7e7ce725551ea83c657c12f9da8011c9c1309cd3e1f22296bbab4b93c63f85cdff2bead452a6aebbffd25ba452a808ffeb3d5b6876666c111c6ada56f170a0988a3a7133d835e3650", 0x5b) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) 12:38:56 executing program 0 (fault-call:11 fault-nth:7): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 145.441124][ T5818] FAULT_INJECTION: forcing a failure. [ 145.441124][ T5818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.454844][ T5818] CPU: 1 PID: 5818 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 145.464896][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.474942][ T5818] Call Trace: [ 145.478206][ T5818] dump_stack+0x1b0/0x21e [ 145.482510][ T5818] ? devkmsg_release+0x11c/0x11c [ 145.487448][ T5818] ? show_regs_print_info+0x12/0x12 [ 145.492634][ T5818] ? kasan_alloc_pages+0x4a/0x60 [ 145.497538][ T5818] should_fail+0x6fb/0x860 [ 145.501928][ T5818] ? setup_fault_attr+0x2b0/0x2b0 [ 145.506931][ T5818] __alloc_pages_nodemask+0x1ee/0x7c0 [ 145.512282][ T5818] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 145.517799][ T5818] ? find_get_entry+0x5da/0x670 [ 145.522627][ T5818] ? xa_load+0x323/0x340 [ 145.526864][ T5818] __do_page_cache_readahead+0x244/0x510 [ 145.532486][ T5818] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 145.538882][ T5818] ? unwind_next_frame+0x1c07/0x22b0 [ 145.544144][ T5818] ? page_cache_sync_readahead+0xa3/0x3c0 [ 145.549945][ T5818] generic_file_read_iter+0x626/0x20a0 [ 145.555395][ T5818] ? find_get_pages_range_tag+0xae0/0xae0 [ 145.561102][ T5818] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 145.566458][ T5818] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.572502][ T5818] ? avc_denied+0x1c0/0x1c0 [ 145.576974][ T5818] generic_file_splice_read+0x491/0x780 [ 145.582488][ T5818] ? splice_shrink_spd+0xb0/0xb0 [ 145.587397][ T5818] ? security_file_permission+0x1e9/0x300 [ 145.593084][ T5818] ? splice_shrink_spd+0xb0/0xb0 [ 145.597988][ T5818] splice_direct_to_actor+0x3cf/0xb00 [ 145.603332][ T5818] ? do_splice_direct+0x3d0/0x3d0 [ 145.608322][ T5818] ? pipe_to_sendpage+0x300/0x300 [ 145.613315][ T5818] ? security_file_permission+0x128/0x300 [ 145.619002][ T5818] do_splice_direct+0x279/0x3d0 [ 145.623823][ T5818] ? splice_direct_to_actor+0xb00/0xb00 [ 145.629369][ T5818] ? security_file_permission+0x128/0x300 [ 145.635064][ T5818] do_sendfile+0x89d/0x1110 [ 145.639544][ T5818] ? compat_writev+0x390/0x390 [ 145.644277][ T5818] ? security_file_permission+0x128/0x300 [ 145.649968][ T5818] ? vfs_write+0x427/0x4f0 [ 145.654392][ T5818] ? fput_many+0x42/0x1a0 [ 145.658696][ T5818] __x64_sys_sendfile64+0x1ae/0x220 [ 145.663906][ T5818] ? __ia32_sys_sendfile+0x240/0x240 [ 145.669174][ T5818] do_syscall_64+0xcb/0x150 [ 145.673650][ T5818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 145.679513][ T5818] RIP: 0033:0x45de59 [ 145.683422][ T5818] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 145.702996][ T5818] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 145.711374][ T5818] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 145.719314][ T5818] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 145.727361][ T5818] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 12:38:56 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./bus/file0\x00', &(0x7f0000000340)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) linkat(r0, &(0x7f00000000c0)='\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x1000) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) open$dir(&(0x7f0000000200)='./file1\x00', 0x18280, 0x0) [ 145.735313][ T5818] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000007 [ 145.743252][ T5818] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 145.779012][ T5826] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 12:38:56 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010500)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x1400}, {&(0x7f0000010a00)="e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x200fe0}, {&(0x7f0000010c00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x2011e0}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000000000000100000000e7bc585400000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="0000000000000000000000000000000000000000000000000000000066187efb", 0x20, 0x205fe0}, {0x0, 0x0, 0x1000000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a6e7d8ccb249604382bfd7f6cbfaa113b6880d0"]) 12:38:56 executing program 0 (fault-call:11 fault-nth:8): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000140)={[{@abort='abort'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'abort'}}, {@context={'context', 0x3d, 'system_u'}}]}) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xdf000000, 0x0, 0x67, &(0x7f0000001280)) 12:38:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./bus/file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffff8) write$P9_RREADLINK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000200001701000500081950486ebf190329303c2e2f6275720000000000"], 0xe) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5000f4) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000040)=""/29) lsetxattr$security_ima(&(0x7f0000000380)='./bus/file0\x00', &(0x7f00000003c0)='security.ima\x00', 0x0, 0x0, 0x0) 12:38:56 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:38:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="000000000000000000c7440000", 0xd, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004", 0x1b, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x81400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040880}, 0xc000) [ 145.816901][ T5826] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.885658][ T5833] FAULT_INJECTION: forcing a failure. [ 145.885658][ T5833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.891759][ T5840] serio: Serial port pts2 [ 145.901830][ T5836] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.920366][ T5842] EXT4-fs warning (device loop4): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 145.921370][ T5833] CPU: 0 PID: 5833 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 145.940803][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.949119][ T5836] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.950845][ T5833] Call Trace: [ 145.950860][ T5833] dump_stack+0x1b0/0x21e [ 145.950876][ T5833] ? devkmsg_release+0x11c/0x11c [ 145.971984][ T5848] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.972406][ T5833] ? show_regs_print_info+0x12/0x12 [ 145.972415][ T5833] ? kasan_alloc_pages+0x4a/0x60 [ 145.972423][ T5833] should_fail+0x6fb/0x860 [ 145.972436][ T5833] ? setup_fault_attr+0x2b0/0x2b0 [ 145.978484][ T5848] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.991374][ T5833] __alloc_pages_nodemask+0x1ee/0x7c0 [ 145.991385][ T5833] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 145.991394][ T5833] ? find_get_entry+0x5da/0x670 [ 145.991402][ T5833] ? xa_load+0x323/0x340 [ 145.991416][ T5833] __do_page_cache_readahead+0x244/0x510 [ 145.999382][ T5848] overlayfs: maximum fs stacking depth exceeded [ 146.001500][ T5833] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 146.001508][ T5833] ? page_cache_sync_readahead+0xa3/0x3c0 [ 146.001522][ T5833] generic_file_read_iter+0x626/0x20a0 [ 146.007471][ T5848] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.010908][ T5833] ? find_get_pages_range_tag+0xae0/0xae0 [ 146.010918][ T5833] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 146.010933][ T5833] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.025863][ T5848] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.030215][ T5833] ? avc_denied+0x1c0/0x1c0 [ 146.030225][ T5833] generic_file_splice_read+0x491/0x780 [ 146.030239][ T5833] ? splice_shrink_spd+0xb0/0xb0 [ 146.038221][ T5848] overlayfs: maximum fs stacking depth exceeded [ 146.040608][ T5833] ? security_file_permission+0x1e9/0x300 [ 146.040618][ T5833] ? splice_shrink_spd+0xb0/0xb0 [ 146.040630][ T5833] splice_direct_to_actor+0x3cf/0xb00 [ 146.156263][ T5833] ? do_splice_direct+0x3d0/0x3d0 [ 146.161277][ T5833] ? pipe_to_sendpage+0x300/0x300 [ 146.166271][ T5833] ? security_file_permission+0x128/0x300 [ 146.171970][ T5833] do_splice_direct+0x279/0x3d0 [ 146.176793][ T5833] ? splice_direct_to_actor+0xb00/0xb00 [ 146.182307][ T5833] ? security_file_permission+0x128/0x300 [ 146.188006][ T5833] do_sendfile+0x89d/0x1110 [ 146.192493][ T5833] ? compat_writev+0x390/0x390 [ 146.197222][ T5833] ? security_file_permission+0x128/0x300 [ 146.202908][ T5833] ? vfs_write+0x427/0x4f0 [ 146.207289][ T5833] ? fput_many+0x42/0x1a0 [ 146.211604][ T5833] __x64_sys_sendfile64+0x1ae/0x220 [ 146.216786][ T5833] ? __ia32_sys_sendfile+0x240/0x240 [ 146.222093][ T5833] do_syscall_64+0xcb/0x150 [ 146.226579][ T5833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.232437][ T5833] RIP: 0033:0x45de59 [ 146.236299][ T5833] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 146.255869][ T5833] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 146.264246][ T5833] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 146.272230][ T5833] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:38:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x5, 0x6, 0x3, 0x5, 0x0, 0x0, 0x7ff, 0xc5, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x3f}, {{0x0, 0x0, &(0x7f00000019c0)}}, {{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/164, 0xa4}], 0x1, &(0x7f0000000800)=""/256, 0x100}, 0x10000}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x25) io_setup(0x1ff, &(0x7f00000004c0)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x28c002, 0x0) ioctl$CHAR_RAW_SECTGET(r4, 0x1267, &(0x7f00000000c0)) sendfile(r5, r7, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 12:38:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="666454ae4613cc7c31134d13980565f7c60f88e520cb56b73905f1c691391e5df38be8122ad9186185ebb3a825d0184b77fb55fd553897b48bcb02e4dc6a7cf23212f462452af4fd7e3ef4facb3efc91ef98f71634ac925fa5e64fe21ddbbb3da2cbd842897e43adc6ddc7b9813f6ae8", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x88, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18}, 0x7ffff000) dup3(r0, r1, 0x0) fsync(r3) 12:38:57 executing program 2: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469923d2e2f66696c65302c696e6465783d6f6ee9605e36b627b672e570abeaa811d6af16e09d3c0a5d3ebe91ecd68775585f65e786915a30c9925a9721dd2fd2209c8d44b13683a71a9899cbaefc"]) chdir(&(0x7f0000000140)='./file1\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000280)) chdir(&(0x7f0000000180)='./bus\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00') 12:38:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 146.280183][ T5833] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 146.288120][ T5833] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000008 [ 146.296065][ T5833] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 146.327484][ T5852] overlayfs: unrecognized mount option "workdi=./file0" or missing value [ 146.363343][ T5842] EXT4-fs warning (device loop4): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 146.371453][ T5857] fuse: Unknown parameter 'fdTF|1Me V9Ƒ9]*a볨%KwUU8j|2bE*~>>4_Oۻ' [ 146.379355][ T5859] serio: Serial port pts2 12:38:57 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x74f4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYRESHEX=r7, @ANYRESHEX, @ANYRES32=r8, @ANYRES64=r1, @ANYRESOCT], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 12:38:57 executing program 0 (fault-call:11 fault-nth:9): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 146.515416][ T5876] serio: Serial port pts2 [ 146.525971][ T5877] FAULT_INJECTION: forcing a failure. [ 146.525971][ T5877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.553163][ T5877] CPU: 1 PID: 5877 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 146.563225][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.573265][ T5877] Call Trace: [ 146.576612][ T5877] dump_stack+0x1b0/0x21e [ 146.580932][ T5877] ? devkmsg_release+0x11c/0x11c [ 146.585858][ T5877] ? show_regs_print_info+0x12/0x12 [ 146.591041][ T5877] ? kasan_alloc_pages+0x4a/0x60 [ 146.595965][ T5877] should_fail+0x6fb/0x860 [ 146.600374][ T5877] ? setup_fault_attr+0x2b0/0x2b0 [ 146.605391][ T5877] __alloc_pages_nodemask+0x1ee/0x7c0 12:38:57 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)=@tipc, 0x80, 0x0}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r4, 0x10, 0x20, 0x7, 0x4e99e06a, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0xf9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r4, @ANYBLOB="00800007000000050000b9dceca009bdfe760000fd299014aaf5ffffff0028d4d6"]}) r7 = dup(0xffffffffffffffff) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r8}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="00012dbd7000f1dbdf2501000000200001801400020069703665727370616e3000000000000008000100", @ANYRES32=r8, @ANYBLOB="980002800c00018008000100000000002400018008000100010000000800010003000000080001000300000008000100080000000c00018008000100030000004c0001800800010006000000080001000500000008000100080000000800010006000000080001000000000008000100020000000800010004000000080001000500000008000100030000000c0001800800010002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24040081}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002400)={&(0x7f00000022c0)={0x140, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1ff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x57}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004005}, 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000001080)={0x1070, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x93}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x7, 0xb9c6, 0x0, 0x2]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0xff4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x1e4, 0x2a, [@dsss={0x3, 0x1, 0x78}, @tim={0x5, 0xfb, {0x0, 0x67, 0xb6, "70574b21fc6f736290527bcb11c5c8e4ea01b866c4d27e448688adb77f93fd7ac34d2f463765c80b6e3a7b120f275f3e2d510515e1bac6257e3ece871cb9a1d8e21d66dd440be693d9a7f3313ce7ee253889c89a290252b04649703da42604ccbb7ddad9c87158f2ae5be65d9c7f6fdbf0cb1f0a4e315bcff282485387fb8b70bae03ec852ea447e666f38e6d97904fc58d15d7e1065af52fbea7e7b2468bb6f0039aefa6043d077838d3298f95ad822396121f4f4fe355460a05a6dce410d96865d376d992f12bd1a25701ed150143a488b7015a6d33e0e10d938787714bd6de48496c4c99a3a7718f018a12005055c08f205e9c041995c"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x38, 0x40}}, @tim={0x5, 0xb5, {0x6, 0xaf, 0x7, "999bdca376580fab9a68a74ea97f35aa0cff6a30624925f705467a08d419ef927e0b7a0213b5d1ba9926d2f257c3f78ccc6bdf147ddf29cb41e56b5858d9ff9e3d6b0572705a536f0dec7460736e4589f6ccb07e0412c7f077ee9faedb29c364e32fc762bfc155712fd8de52f3fc38c86f1635b3e25c22083bd43219d15bb09566ba0f14a3e53fab3083a7f118e8668f88b89c94527c9ee0d287cb5567c4f29641c4a615d76e8064158f6a2db7077d327475"}}, @mic={0x8c, 0x18, {0xbf, '?}F\tR/', @long="fe347ab3b38de895aa5311cebeba8d0f"}}, @chsw_timing={0x68, 0x4, {0x101, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xa5, 0x6}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x745, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x691, 0x91, "e0841f6c787c1907d5021c85b363a942272b72adf74412b9c2539fed35879b2dcc1321df95f521248ec8f685fe42a01dc06171316b60717aeb3380f6d0bc4179d617efe949f1352766a320c9890716b69958e37bd46d349b26af7586139434696d939b259acf9a80b4708262ee51877b370f522328bc8d1efd771d0c17fd1a69ee28fc7bb9a3879f74c6a09e152b40b8acd9d01cabc2e436aca4a1bfef076bf79da174a548025cf4aec29eec540f81d3f758e9be7e9ae22fa4b4c723473881b628b367d8c67262f674b24fedbb90b8a051b53c29dec834d8ed6a428a3649e7ca3cf92ed1497f82e5d9bd14895ffe52e3db8e023e20cfc61eefe093eaf5bc41ee7ffd53921381604a62de7a038279756372454fe0baf54a95fe7e3c6bc866dc735bd6c750afc0a702e90fc73ade39e233c817aa2c78e00e541762bd06d6c342271ab49a0ff4abf6225d4d0ba15dfa1720281fbc5c4096ec1b2c0470a803e696079055727dc60a2bf684e9ca250563de029e880a40e390472128645cf5f73441ec8f80d48e1762c1348da7006bdd75865420cc4f147936b830e877e576fd27034badba18e8d5399ab7879c18b94e17eb3ad699d9898317decc44050ccd835ca72ad890215f3cb7610be2d9fc1d3145e4e22b9594d8a8253a7d19c8b28e5a103e74213459b723722ea17f3df61bb01dac5610c4e5464fe05c1eb33e550dd5e0cb69b1cf6da04cbd175a81ee044847f9ea6612197c94bedae860d5d3a318dd852e68a7afc56c7e158496ef4c34b919cf9e51b7b69c4dcdabd8446d7d135c3ceb2800e4c41f7d2c47c3d86bf56b9c68d5c62511827c29058f08a446c36310974346f7a5478c34d85a9ec11e488a240cac29bd3302036ac1d8c3ed4924d6ffada191ab15c067a03505b4d6e91ee95a379852014e01b23fee88dcac670e9dd0271eee5c6b10b59906ae5e1ed309406f7e13dd9da49136ed560ad4c166fd222b4d838059cd71be74581e98933dc768fa1e0ad7de3a2ab3491bc9d55e83ffe5131a4caed20a27114d7c2fc4af44ba66c8b99ac9eb4ef150057907a9da4521fde6231c144af884692d48abd50be0522aa91d57b4c3c19a8deb3a2fecbc0e48124c81c9b0121a7af1420620d05d1225c05fa99626801ee3d9a435b2ed710132d66a030099db4ae587e5cc5091b2018207735b8fce038ee703404cf366b2b8ffe06159a9c34523641490ab66d96b82c0c6e68a0da6b93df428462a22f09d3f5bb4528ae8208594fa53b32b69daadfd105eb43990d559c2bfecdf804359cc38a625c01d79c06db6e910a6ebe5ab3af973affbcb3f3f177c286cf52ff2ca8a2244b24456141b6df3170efcf8810058aa3023288f2c851fe2d8b1a204a03fc0f79abd602f5ff7675f0eb8caabddfe6306836ac289a1a1cf9e593c8b843460ad26293064efbce676a667da263e14bf30775dda4cfd0e57ebe3d10ded4527781a11ec1fae05c4818c53e3fac9a29b3ace950a66449165abdba8ae529a67419eea25c5b31b6fe80b47b4789bfd1764546daff84d8787b056aa9f302bd6c6296e45f05790dd5327f87fd3fc8750fd644de7a1bd47275b4310d65e9ff8d26a93c6af3f25d9a46cb8754d690361a65caeb9dfe97314cd222939d83b3047205f03ad482b106d9ba06191b91ee23c1827441cc5c1a4438d95e49fd1ef33121635f489f2fd5d84473e1237e45e085c4550ceb4e8d3ac69bef17fd24e6ff681d0d4bc6f4a7c8130d0c920d79adf4978e7a8b97628dfe1f4f4f882614568114da75288896671a45492e177fe0cdf53f24339e25234b66799ae78cd5a8a07dc54303013d6252e998928cf7e67255ca246660bdebab5e179e73eb9dda3bbb6062c159378fabdce7b1e81914038b503b9fccfca2bf0e2a48b8d6cb538d45939057d1405c03f998facde70a39cfa4f2e095e74829b354e971a00ae3407eaba1a60e8c17fea205c30b309c9f10b552a5050e1fff33bf0d9d40085823b9239933143a897594a20ba11bfde18cebc0484bdc2161471f1b6aeca3383c92a6e651fa12122890c8ef6d4c5a2059c375829c23504c3bd7c0f600cb3c4440e55e5cc74d9874e8768406bf34388fef4a712046749c3a9ac39af696c5bdb366a619e7a9a5acb29f92b0285afcf05a1126eb9ef172f79b8398dfec283d9219f20d1208f7a344c492236046c747868acefc3933a4da116d94cb2316c805651c11855549d49fd0e454a064a9fb24f9fda179eb14402c96ed0d8f392dc0141393ea723320fd70f404480032ad9170cd4ef7d299caf7ac0132bbc29c4f1b6f769f8dc7ffb87de213cf6a39cfab5463bb6c90673b6933d9d142a8b5dbab9b66797f89b2e"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x101, 0xfffe, 0x3, 0xffc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8000, 0x66]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1070}, 0x1, 0x0, 0x0, 0x240008c0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0x6e, 0x8, 0x42, @remote, @private0, 0x7800, 0x40, 0x10001, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='ip_6ti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0010070000000040000000004b6500ec006800007f0490787f000001ac1414aa86470000000302020704191c070bc9d10890903a717bda0b095d3bb2c7d8cd140105c9bf12070bfb05aabc74e5871922020fa397ddb20fd693bf8a67e458a40008658770c58408890bc1efaaf36c298422f3004454efe3ac1414aa00000004e00000020000cdbf7f00000100000001640101010000001fac1414aa00000090ac1e010100008001ac1414bb000000050000000080000000e0000002000000087f0000010000d4dd890fb464010101ac1414bbac1414aa891f0de0000001ffffffff7f000001ac14142f00000000ffffffff0a010101000000"]}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000021c0)={'filter\x00', 0x0, 0x2, 0x0, [], 0x7, &(0x7f0000002100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000002180)}, &(0x7f0000002240)=0x78) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000002480)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fedbdf250f00000024000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030002000000440001801400020073697430000000040000000000000000080003000100000008000100d930", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f746f5f7465616d0000005c00018008000100", @ANYRES32=r6, @ANYBLOB="08000300060000000800030002000000080003000200000014000200736974300000000000000000000000000800030003000000080003000300000014000200767863616e31000000000000000000004c0001801400020076657468315f746f5f62726964676500080003000200000008000100", @ANYRES32=r9, @ANYBLOB="140002007663616e30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000"], 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x898, r2, 0xf, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_PEERS={0x81c, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "be20db2e492daf54665c1c7859ba21eab0e6f4b5d767906672d53149739075fc"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0x3f, 0x80000001, 0x5, 0x1ff}) 12:38:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="00100000f5faf00008001b"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x36}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getnexthop={0x18, 0x6a, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x842}, 0x0) [ 146.665004][ T5877] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.671062][ T5877] ? avc_denied+0x1c0/0x1c0 [ 146.675567][ T5877] generic_file_splice_read+0x491/0x780 [ 146.681106][ T5877] ? splice_shrink_spd+0xb0/0xb0 [ 146.686041][ T5877] ? security_file_permission+0x1e9/0x300 [ 146.692809][ T5877] ? splice_shrink_spd+0xb0/0xb0 [ 146.697734][ T5877] splice_direct_to_actor+0x3cf/0xb00 [ 146.703107][ T5877] ? do_splice_direct+0x3d0/0x3d0 [ 146.708124][ T5877] ? pipe_to_sendpage+0x300/0x300 [ 146.713167][ T5877] ? security_file_permission+0x128/0x300 [ 146.718879][ T5877] do_splice_direct+0x279/0x3d0 [ 146.723720][ T5877] ? splice_direct_to_actor+0xb00/0xb00 [ 146.729241][ T5877] ? security_file_permission+0x128/0x300 [ 146.734929][ T5877] do_sendfile+0x89d/0x1110 [ 146.739427][ T5877] ? compat_writev+0x390/0x390 [ 146.744191][ T5877] ? security_file_permission+0x128/0x300 [ 146.749987][ T5877] ? vfs_write+0x427/0x4f0 [ 146.754377][ T5877] ? fput_many+0x42/0x1a0 [ 146.758685][ T5877] __x64_sys_sendfile64+0x1ae/0x220 [ 146.763855][ T5877] ? __ia32_sys_sendfile+0x240/0x240 [ 146.769132][ T5877] do_syscall_64+0xcb/0x150 [ 146.773608][ T5877] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 146.779471][ T5877] RIP: 0033:0x45de59 [ 146.783424][ T5877] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 146.803000][ T5877] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 146.811389][ T5877] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 146.819332][ T5877] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 146.827274][ T5877] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 146.835221][ T5877] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000009 [ 146.843174][ T5877] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 146.855802][ T5861] overlayfs: unrecognized mount option "workdi=./file0" or missing value 12:38:57 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) dup3(r2, r1, 0x0) [ 146.875599][ T5869] fuse: Unknown parameter 'fdTF|1Me V9Ƒ9]*a볨%KwUU8j|2bE*~>>4_Oۻ' 12:38:57 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 146.925875][ T5897] serio: Serial port pts2 [ 146.984424][ T5902] serio: Serial port pts3 12:38:58 executing program 5: ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x80) ftruncate(r0, 0x100000000) 12:38:58 executing program 0 (fault-call:11 fault-nth:10): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000100001080000000000005c5400000000", @ANYRES32=0x0, @ANYBLOB="00100000f5faf00008001b"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x36}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getnexthop={0x18, 0x6a, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x842}, 0x0) 12:38:58 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) dup3(r2, r1, 0x0) 12:38:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611134000000000066000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 12:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:38:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000027000000000000ca9500000000000000a8966974a191de22cdfbee8306717777f9dc9ce7474cd9504531e6d508e4afd9ff0bd3962ae65d67c62f172dc7a4a06821fa2fbd699b82850e33af79b205a6bcd0debfdf51ba4d9e8362559f0689eaa57d6048942a5900000000000000000000000000000eeb0001fe56ac579a8e1b48e0cb6e8e2d574f35"], &(0x7f0000000040)='GPL\x00', 0x5, 0xcb, &(0x7f00000002c0)=""/203, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 12:38:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x6, 0x61, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x34) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}]}, 0x44}, 0x1, 0x0, 0x0, 0x40408c0}, 0x8000) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x5}, &(0x7f00000002c0)) [ 147.281888][ T5917] FAULT_INJECTION: forcing a failure. [ 147.281888][ T5917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.296046][ T5916] serio: Serial port pts2 [ 147.309060][ T5918] serio: Serial port pts3 [ 147.322931][ T5917] CPU: 0 PID: 5917 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 147.332996][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.343033][ T5917] Call Trace: [ 147.346301][ T5917] dump_stack+0x1b0/0x21e [ 147.350606][ T5917] ? devkmsg_release+0x11c/0x11c [ 147.355953][ T5917] ? show_regs_print_info+0x12/0x12 [ 147.361124][ T5917] ? kasan_alloc_pages+0x4a/0x60 [ 147.366035][ T5917] should_fail+0x6fb/0x860 [ 147.370443][ T5917] ? setup_fault_attr+0x2b0/0x2b0 [ 147.375447][ T5917] __alloc_pages_nodemask+0x1ee/0x7c0 [ 147.380794][ T5917] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 147.386314][ T5917] ? find_get_entry+0x5da/0x670 [ 147.391139][ T5917] ? xa_load+0x323/0x340 [ 147.395357][ T5917] __do_page_cache_readahead+0x244/0x510 [ 147.400969][ T5917] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 147.407360][ T5917] ? unwind_next_frame+0x1c07/0x22b0 [ 147.412619][ T5917] ? page_cache_sync_readahead+0xa3/0x3c0 [ 147.418316][ T5917] generic_file_read_iter+0x626/0x20a0 [ 147.423757][ T5917] ? find_get_pages_range_tag+0xae0/0xae0 [ 147.429450][ T5917] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 147.434795][ T5917] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 147.440834][ T5917] ? avc_denied+0x1c0/0x1c0 [ 147.445311][ T5917] generic_file_splice_read+0x491/0x780 [ 147.450841][ T5917] ? splice_shrink_spd+0xb0/0xb0 [ 147.455757][ T5917] ? security_file_permission+0x1e9/0x300 [ 147.461450][ T5917] ? splice_shrink_spd+0xb0/0xb0 [ 147.466360][ T5917] splice_direct_to_actor+0x3cf/0xb00 [ 147.471708][ T5917] ? do_splice_direct+0x3d0/0x3d0 [ 147.476704][ T5917] ? pipe_to_sendpage+0x300/0x300 [ 147.481715][ T5917] ? security_file_permission+0x128/0x300 [ 147.487413][ T5917] do_splice_direct+0x279/0x3d0 [ 147.492258][ T5917] ? splice_direct_to_actor+0xb00/0xb00 [ 147.497782][ T5917] ? security_file_permission+0x128/0x300 [ 147.503474][ T5917] do_sendfile+0x89d/0x1110 [ 147.507951][ T5917] ? compat_writev+0x390/0x390 [ 147.512689][ T5917] ? security_file_permission+0x128/0x300 [ 147.518395][ T5917] ? vfs_write+0x427/0x4f0 [ 147.522785][ T5917] ? fput_many+0x42/0x1a0 [ 147.527089][ T5917] __x64_sys_sendfile64+0x1ae/0x220 [ 147.532264][ T5917] ? __ia32_sys_sendfile+0x240/0x240 [ 147.537524][ T5917] do_syscall_64+0xcb/0x150 [ 147.542001][ T5917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 147.547869][ T5917] RIP: 0033:0x45de59 [ 147.551740][ T5917] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 147.571322][ T5917] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 12:38:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38333735393934343800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001bb3a207e2d04cff8ff0e42050b3d130010000000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000000640)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe7000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdcffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f0000000000000000000000006226f14345d36c07de2fede4b605f4a63e51e0eba185a5d7300c7fefc37ffa5e47a4f2b333481e", 0x2038, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="20000000482a2723482a272300000000dbf4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000dbf4655fdbf4655fdbf4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000dcf4655fdcf4655fdcf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000e6b4b61700000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2000000005600}, {&(0x7f0000012b00)="ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001000800000000000000010000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001df408b00000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3833373539393434382f66696c65302f66696c6530000000000000000000000000000000000000000000006f9eb2d200000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000dcf4655fdcf4655fdcf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000914f493900000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000dcf4655fdcf4655fdcf4655f00000000000002001800000000000000010000000d0000000e0000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de9dcec00000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000dcf4655fdcf4655fdcf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c68e4d45a00000000000000000000000000000000000000000000000020000000482a2723482a2723482a2723dcf4655f482a27230000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000013a00)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8001) 12:38:58 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:38:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000001c0)=@abs, 0x6e, 0x0}, 0x0) r1 = getegid() setfsgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 147.579706][ T5917] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 147.587650][ T5917] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 147.595596][ T5917] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 147.603547][ T5917] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000a [ 147.611495][ T5917] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:38:58 executing program 4: unshare(0x44000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) shutdown(r0, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x3c}}, 0x14) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 147.693868][ T5938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 147.706671][ T5942] serio: Serial port pts2 [ 147.713582][ T5946] serio: Serial port pts3 12:38:58 executing program 0 (fault-call:11 fault-nth:11): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:58 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000800)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001000130700000000003257e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff020000000000000000000000000001fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 12:38:58 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="de089bcb5b310e37e30b0c12cdbc2656", 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x2) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYRES64], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0xc, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x9, 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) fcntl$setpipe(r5, 0x407, 0x0) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f00000002c0)) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:38:58 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:38:58 executing program 4: unshare(0x600) syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5000f4) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0x6000, 0x5, 0x8, 0x0, 0x40, 0x7}) modify_ldt$read(0x0, &(0x7f0000000000)=""/26, 0x1a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000080)='N', 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x10012, r2, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x49) 12:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) [ 147.792175][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.819398][ T5962] serio: Serial port pts2 [ 147.826141][ T5970] FAULT_INJECTION: forcing a failure. [ 147.826141][ T5970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.835395][ T5975] serio: Serial port pts3 [ 147.844494][ T5970] CPU: 0 PID: 5970 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 147.854572][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.864610][ T5970] Call Trace: [ 147.867893][ T5970] dump_stack+0x1b0/0x21e [ 147.872216][ T5970] ? devkmsg_release+0x11c/0x11c [ 147.877141][ T5970] ? show_regs_print_info+0x12/0x12 [ 147.882331][ T5970] ? kasan_alloc_pages+0x4a/0x60 [ 147.887281][ T5970] should_fail+0x6fb/0x860 [ 147.891687][ T5970] ? setup_fault_attr+0x2b0/0x2b0 [ 147.896697][ T5970] __alloc_pages_nodemask+0x1ee/0x7c0 [ 147.902050][ T5970] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 147.907600][ T5970] ? find_get_entry+0x5da/0x670 [ 147.912429][ T5970] ? xa_load+0x323/0x340 [ 147.916662][ T5970] __do_page_cache_readahead+0x244/0x510 [ 147.922333][ T5970] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 147.928769][ T5970] ? unwind_next_frame+0x1c07/0x22b0 [ 147.934066][ T5970] ? page_cache_sync_readahead+0xa3/0x3c0 [ 147.939757][ T5970] generic_file_read_iter+0x626/0x20a0 [ 147.945212][ T5970] ? find_get_pages_range_tag+0xae0/0xae0 [ 147.950910][ T5970] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 147.956544][ T5970] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 147.962596][ T5970] ? avc_denied+0x1c0/0x1c0 [ 147.967089][ T5970] generic_file_splice_read+0x491/0x780 [ 147.972625][ T5970] ? splice_shrink_spd+0xb0/0xb0 [ 147.977546][ T5970] ? security_file_permission+0x1e9/0x300 [ 147.983236][ T5970] ? splice_shrink_spd+0xb0/0xb0 [ 147.988152][ T5970] splice_direct_to_actor+0x3cf/0xb00 [ 147.993514][ T5970] ? do_splice_direct+0x3d0/0x3d0 [ 147.998518][ T5970] ? pipe_to_sendpage+0x300/0x300 [ 148.003523][ T5970] ? security_file_permission+0x128/0x300 [ 148.009280][ T5970] do_splice_direct+0x279/0x3d0 [ 148.014122][ T5970] ? splice_direct_to_actor+0xb00/0xb00 [ 148.019662][ T5970] ? security_file_permission+0x128/0x300 [ 148.025396][ T5970] do_sendfile+0x89d/0x1110 [ 148.029931][ T5970] ? compat_writev+0x390/0x390 [ 148.034673][ T5970] ? security_file_permission+0x128/0x300 [ 148.040371][ T5970] ? vfs_write+0x427/0x4f0 [ 148.044764][ T5970] ? fput_many+0x42/0x1a0 [ 148.049075][ T5970] __x64_sys_sendfile64+0x1ae/0x220 [ 148.054259][ T5970] ? __ia32_sys_sendfile+0x240/0x240 [ 148.059540][ T5970] do_syscall_64+0xcb/0x150 [ 148.064031][ T5970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.069899][ T5970] RIP: 0033:0x45de59 [ 148.073801][ T5970] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:38:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) 12:38:59 executing program 4: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000040)='source', &(0x7f0000000080)='[\x13@&(\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffff8, 0x3}}, 0x28) 12:38:59 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x86, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc}, @mbim={0xc}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000300)={0xa}, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="050f3700050a10030000000000000014100400ba1e73d5e182160ae5595758b2f35c24d51b35f114224554ddf5fafe9307100200000000"]}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r0 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=',,\x00', 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\xf6^\x00', 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff8, r1, 0x1) [ 148.093396][ T5970] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 148.101788][ T5970] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 148.109769][ T5970] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 148.117714][ T5970] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 148.125673][ T5970] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000b [ 148.133617][ T5970] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x6}, 0x523}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x0, 0x49000000}, 0x40) [ 148.162993][ T22] audit: type=1400 audit(1603024739.178:42): avc: denied { create } for pid=5983 comm="syz-executor.4" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 148.167303][ T5989] serio: Serial port pts2 12:38:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) 12:38:59 executing program 0 (fault-call:11 fault-nth:12): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 148.266865][ T6002] serio: Serial port pts2 12:38:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup3(r1, r0, 0x0) [ 148.306869][ T6004] FAULT_INJECTION: forcing a failure. [ 148.306869][ T6004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.326127][ T6004] CPU: 0 PID: 6004 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 148.331681][ T6009] serio: Serial port pts2 [ 148.336183][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.336187][ T6004] Call Trace: [ 148.336204][ T6004] dump_stack+0x1b0/0x21e [ 148.336215][ T6004] ? devkmsg_release+0x11c/0x11c [ 148.336225][ T6004] ? show_regs_print_info+0x12/0x12 [ 148.336234][ T6004] ? kasan_alloc_pages+0x4a/0x60 [ 148.336249][ T6004] should_fail+0x6fb/0x860 [ 148.377758][ T6004] ? setup_fault_attr+0x2b0/0x2b0 [ 148.382762][ T6004] __alloc_pages_nodemask+0x1ee/0x7c0 [ 148.388109][ T6004] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 148.393653][ T6004] ? find_get_entry+0x5da/0x670 [ 148.398494][ T6004] ? xa_load+0x323/0x340 [ 148.402720][ T6004] __do_page_cache_readahead+0x244/0x510 [ 148.408340][ T6004] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 148.414730][ T6004] ? unwind_next_frame+0x1c07/0x22b0 [ 148.419987][ T6004] ? page_cache_sync_readahead+0xa3/0x3c0 [ 148.425684][ T6004] generic_file_read_iter+0x626/0x20a0 [ 148.431132][ T6004] ? find_get_pages_range_tag+0xae0/0xae0 [ 148.436911][ T6004] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 148.442257][ T6004] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.448306][ T6004] ? avc_denied+0x1c0/0x1c0 [ 148.452785][ T6004] generic_file_splice_read+0x491/0x780 [ 148.458308][ T6004] ? splice_shrink_spd+0xb0/0xb0 [ 148.463223][ T6004] ? security_file_permission+0x1e9/0x300 [ 148.468926][ T6004] ? splice_shrink_spd+0xb0/0xb0 [ 148.473845][ T6004] splice_direct_to_actor+0x3cf/0xb00 [ 148.479220][ T6004] ? do_splice_direct+0x3d0/0x3d0 [ 148.484222][ T6004] ? pipe_to_sendpage+0x300/0x300 [ 148.489246][ T6004] ? security_file_permission+0x128/0x300 [ 148.494956][ T6004] do_splice_direct+0x279/0x3d0 [ 148.499781][ T6004] ? splice_direct_to_actor+0xb00/0xb00 [ 148.505303][ T6004] ? security_file_permission+0x128/0x300 [ 148.510993][ T6004] do_sendfile+0x89d/0x1110 [ 148.515472][ T6004] ? compat_writev+0x390/0x390 [ 148.520208][ T6004] ? security_file_permission+0x128/0x300 [ 148.525901][ T6004] ? vfs_write+0x427/0x4f0 [ 148.530289][ T6004] ? fput_many+0x42/0x1a0 [ 148.534590][ T6004] __x64_sys_sendfile64+0x1ae/0x220 [ 148.539766][ T6004] ? __ia32_sys_sendfile+0x240/0x240 [ 148.545053][ T6004] do_syscall_64+0xcb/0x150 [ 148.549547][ T6004] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.555413][ T6004] RIP: 0033:0x45de59 [ 148.559283][ T6004] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 148.578869][ T6004] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 148.587257][ T6004] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 148.595205][ T6004] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:38:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005780)=""/143, 0x8f}, {&(0x7f0000005840)=""/85, 0x55}, {&(0x7f00000058c0)=""/197, 0xc5}, {&(0x7f00000059c0)=""/228, 0xe4}], 0x4, &(0x7f0000005b00)=""/4096, 0x1000}, 0xb2c}], 0x2, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3, 0x0, 0x1ff}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000025c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x38, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbfb, {0x14, 0x1, 0x3, 0x0, 0x8, 0x1, 0x6, 0x9, 0x0, 0x3}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x840) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x228, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1c24000}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@multicast2, 0x0, 0x4000, 0x4e24, 0x0, 0xa, 0x0, 0xa0, 0x3b}, {0x9}, {0xc88, 0x200000000, 0xffffffffffffffff, 0x3ff}, 0x1, 0x0, 0x80000000000001, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@local, 0x180000, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0xfffffffe, {0xa, 0x4e23, 0xc75, @mcast2, 0x80000001}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="47713136af4c0609fda6979c8ce656cdef31cfc073375989dd9c7028820adcecf0b74cd8d5851f835dc62233f77a5e2a301c9d62ac368308a16888e7b0f0f9ce4225986b7ad82601029a2a9324562e2b3880e53130badf2ae7938d374bad9e1aa1bad7834a8e0aa821ab30b2ad651488c3383f57344206deec09208208226add8ddd6a744ca66d029658cb64a257d4cb", 0x90}, {&(0x7f00000005c0)="4fa46343bfa6d9d6efa97d34cfe1774e2d451142da14fbea5d895a84692e90cbfb31c7aae86fe1dd53c68456b84c950ab51bd2f43dc6894b99729d4c49281bf2b610fadb649c8e5730feba39e0f98e7fec6d79498c1686ef9229", 0x5a}, {&(0x7f0000000640)="397ffe426d7278475462bbd7ef4082728817268626891c83efa6e462694c295f3dd5e7481abb547b39b4d2d3f77e7bc637b7dea923adea11110a077e8c35c54884ef7b14c3b9ce44e9c9c6221886536d7cf537977be12a0802d09b2123e0d9c34c9d71e33bf9cc5ff81b78f028a5d3ae05d1b9a6621e11f95532dcbfb2b8de99977e7460ba92426eed9821ec39c27b8ebc1378b0f856a99423f3a790ab98b9165f9be99330d77a44567ea89433e0de560302ede1703836faae717cb850121929bfcf5b718fea6b764b9e87095a3bb1c3b04e579f68c9a4b3ec3a530fe9c3937bbb3961a1dec78838", 0xe8}], 0x3, &(0x7f0000003d00)=ANY=[@ANYBLOB="101000000000000004010000020000001fddf5bf55757f8084147608716420df2ffbf19c6a42fcaa6bfc723519ec9fbb27d118a84dda6b85138960ce107aa4ef5d227a37821d19fc4a7f429c384f47deb61163bb3a753d9786c7a5929448fccd6f9eb7fd02275bcd91a977e6da295c5d5f4bd5aeb7f4b665198160012aac7d5b548b62421e22002adf7121347dd420304103ca068fb704d77f73c2e0d5912cdebca7ef95c55b5fca8ea5cf51e4574a08d915a0340fcc196697edabab5a7625e67c5f4afcabdb5780a466fc3bf707636c56d97cdf8012cdea610c17d7e9331e9b4f621e8e3ca9c865ee2dbae39753a6009a928c227c50356e6ec475fbefa68ce26ea891bc0cbd5c3254a1205825aead474bc91f90fe293591c9ef799a4ef7645ab6df84cf95441efdb554f5ed579faa32220a10ed87c7cc562ed42a0201141e67660f40f986a1a1efdcccd5f6d9c59676e49be804831c8fb74893a75e8fee5f41ba1aaef2126a74f8d166c1331180b57517fbb53dec9450cd7c7ae2f7e51c97ced6a79f38698ee3f7e88b097827b0d20677d77b0826808c4c533faef61cc6efdc84bd3c7fd962af825245aa7abe7eb5dac9cdb9fa9c44e89490d729beccf91b03b41eff6afb32e49fb9056aa1e3f1f1061084621b98cdfe385a67b29aaddb435d39b6d29757713a72be1011e8908f953dad49b8516afc5b814487c53958f70e3843088025436889f7eafd8189749f9fe28b03cb85e57c71639d68f5ec6b01bc41b9df85c190209e39925c15701ff27b882f689d90b08df64b4d943116de13c549c82e949d9856ae7590210808f285795aa07ce70b19fc7b4d958b658357870f577aa45dff1dcdad97be10b2e5da874f1e86617e1fb0d9046792eaf90c476e33983260e57109981f80e93fbcc9eeaffce384d8be9fee50ed12d514f780485a1af3cba02f28f20ffe25407cd6cb96dce64564a5a5ede87877f416fa354af7d73fc3bb4c247880cabb22f711793d07bd03e828567b4e89ccb65eb298fe211a06944d604c469272c6813e98f7dea97b9c306ecd0b856003bd624f5c49b9e681f1e77abc6d52e59dde7dacc9c7ea2613d8a991a2dde84ee33d90f15ccf21e596a9dbff99861b42d6ff7760bb1e0d5be8a6f8c3a525365f3e6fa1b0067dbe2187f6dbaea6cbb800af3eca9f14b3835ed1c2aa18efc9c9272abad3feaaff90cc7dee7520e683eb8f9dd60938a9c8e006a3b0acbe05c1ef271faeccd6cd50daa25e74d64782e0175ea47f6f48868fa04d0235c5d2426482f081f61fe64d406d90f4f1b01102eb3fcee0e7d68eb4c5f0c3563e33e08a4284cb10f6931ab5f7c56a73f46bd5a5a660bf9cdb8ae1690ecb9c0c2be9c0793064202dbdb75073c48df320fea3207ff62d22eec1364542a9808a2a932d452066c31d0d7bed02cae54b1e5772b9f75eaa90429d8396c5fede9cff91fcb0652f96361f9e977ac2955e57c250d1a4a3aca691064d4d38c2d6fc89264f378cccf1a0979fa4f198445ef378740e8253d406035fed31d6c713ea793ccf3370876a44e47901b800a9c6fb96f70a230b1ba226270cd1a74ffe3c88a2e98e4d066315bfc90fee5b223aa7a19fb44b0760f2669d8a838048bde75f33e2c0fa94d9fc06af2071c8ec9acbbdddb7a57e60c77e8e01d7011a462f6cb008554860166e4b518ee9f758cb5b346c191948474a6596ae84e841a199bd8e512b68dc9ff2c312f23624c61099a0421dcc621b120b3fc41b205fa16db84c3da08f2f8e7ca21ce228f93e961b72dbd40b593929c9e44586f8e5508eb52c0ca12d7ea0b1e11578acbf342994d6d0bf6bb2540fb7ea5aba72d30e9b5f8053bacdfa28f51bd303acea5bd41da42de385ec1837330966252f313c3d9df4113ff121df8b6362aa9425235ca45fbec01aeb43d896c916df35ad738ee6bc0ae3cd9cbe7f0e75ef0e37415a0baa8780372806fd9bda0ce5eed282f5c5aefb9cf200230e8bd3eac2efe96eeedcf10448f16f88a3d167202007b63ae070601576410bdf6e58cafe2bd41a2e16b09822c64e8b8e32d47a79952fd494de34f920ecf8f7239b6f7410614f65945ba1060a3a14c80a95d24e826b9008e9c8ac6caf1d48d1120680a24f2264d8338be1fdc0836d522ee413380d7602496a89d049fd80081825103a691b9eacc0265625440b24d566135dc4fdc3345345f6e1bb8ad035c0c090399b16743c74a1aa2d376102bb5e23743ac4274be3dd0949ee94dc5e48375a29a553db5441855427f916875bf566ca364fcc6fcd01e640592401f8a3f0ba70801ada0fb668ae5af742d1e5a80cdc887049641014c33c47fa175795d0d6b8c4f4f79d327ab0d78617e1e93e23091e46d4299beac01b98b6fc586719c138b978dacd874a69d820b07d3576686b39815cad0696649ca67bd256b6b89a2770cdb1a04efce369d4b7697b357de945284cea5dc126f3f4581f36c4c73e62009e1410ceb9b543166e065bc5c67f52eb10e5c76014de82bc9652d0883be02a5dd6f2b8a3bdce0b91d9d137b583a3189148e59ec6aaf87cb45c3b1152bf02e4fee7e8584a818a0e5dd49662c343d79ddb7584dcb0983d832c89b2423a5cc6dda4d8414b6d785a42bebfb214a228bea5438dbd530ef6e191814d2682a69ac86855331ee7d35264e888165eed18582a8d7ac07adb326fe9c6a0c268cdcb516d44286097556a71592ce7c6e93255eb7439fdba3db10c2ed13ce1d606b8531e873234490f68b4b5ff4d6bafbdd959fdc7d78152a4bcb3645061490ecd240b1b33734e061e1a2c140b53abdebc2d62603f1a5e99d3ae3b2908c958a73a5f41e3788537286f82e99510b5e3418d24a1b942abf20e9db4a021d5641d24403b362795c92c1bc435b8dedcad91b080e638d403f0ac6181eb783747a0c0ad6516ea7dc305893f093a361e512c1c87bc132c8391260a08de5a1af096b358c93df9c7f27d2b9803f59e65be5f0f30f3f4e5ac878b5c52e75fe804bc3d23371c494bf707255fa686d04507293be5ec263eae5bb3ce8d7711803e41737da7eba6ed3ebc477bacd116983bce0d3fa8a328604d3a51b37749e3263b416c95042d5329a24bd5d11991bc3d09f10fd7c7324abd7158e3e304e88312c136fe00ceda7a7c99fe7f5f3423830034ab09e1db51a0b791f2d3bf97c31bb90fa30610f6f0c34050d777677f3d29ce90f2d8d384f73116d2238dca4c6ea4b8a0debe1b497f0782a47dfd991dd4552c4d9a3ee68cbb7a7a646be96b3beb8aad84cea276b29f93cf4b89c9cbcb1c7b83296407379fd3fb73bd5d02cfe75ca01c582a299b93d3c3eb51749dcb60291261fd91deb8d5155968510995ab336faf71fcfa2b85df611b04d9ac0c9b69de0f7db2b88df81e4d94f23b049ac4f46a375fa27cbdaddefe7e6e244d215ec60a82c6dc7953c53ca9d0a4d5261491fc36df736dd230d1837f4003d5d116014bb4cd10b0ed84a7f1ca0bf701e397424973d37afdbb06b20085d88d4a2eabf1d9e57a055fe7b8a49a9643d0b0b7e653b2980b0b179298213905df1b780ccd062e8089bb7b7771d1616334eca0e72ce1d9d969119579252ebff9312fd110d49af91daa858fa796113ad0b23bcbb4e5b14e1c22c1dc0b7397e35392fccd09279cd08c4cd3bb52f3ad91e513e1d669a4f6e0d7702661e5926997f6ed5a0c900c3df9f025f8c392896a7f0c59fa13c1f6866071dff6a38ab6807217c14b77efbe36cc08d3cd963c3662ac742a48209ee2c47a468ca02e329fc6cc223e4054bdef12fb3b0bf80d0892a72aa10307ae2e87587ccfe8dde0cd10071e05e6c96bc7a43f2aff2c7ed92b314001777426b05c5c73543214b5156c2ba7de0e1456ee0909f6e9d044198226f7eb9f26c486e8fefd3969eb66b847d36460904183818c010000000000000025d141c562662c55c9bf444f12a7c5fde80c75ffb48cd73775b8467395167303a551ec600ab6a287b4f3d9837c306bbb8da765ecb44c4b3a4b1319d4d11d566ce5ed4fe9840b24eea1c8be60eb455b77c263e99d552563b84dd023340aa601193ab91661c9f6bf7d9a5b59ab9da9c6d781aed2ea868ffd78115a135ab69d2c90e170433bec9225b6605bf92157b6589c38b3e8013f4375d2e96aade1f5c9b50535693f99c896fb9e568cd76f9c58632236a3267bee8d547b4bf9e8818f30e56ebf85e51c776e38d30172d7afd971287804b010a21d7b4ed3bcf8c65163b0c66da2654af57301505a89cdfe61212fe6953bd3d5e91d94e8d30a5dc343ecb142329a99a00a60e659a8a1892fc9033c9e190af755c106663bfd6ccb0af91c2257b2818ffe400bac8ebbceb802ba4710132f09585172389701d133a6cdbffd818f53743242fc3084fd03209ec5b2e0dd35e805062654c89f8430bba7f73fe9a6c1d2e893c44cd241c64be52faafc9d1b3c7a3e68791093f9c7cf523554775522386d6e93e8a29dc15bb25ec2a9307d77793704795396cee9602fdefd2b866d2b72aa8fe544cd15211adf76df4a85511b2b9b979e011e8622a28cab9485c794951bf6aca12333d4e8a11572d2595a6086d36f253ff7fddec2e52891373fe082a70865ae665d85cc669bedb581730cde03def90d69326c33b4550d4a9cc93a6c193cee28e7fe77ec2543175b62d9932cc9910f42a1b7a6f12a51204ce1b32ff58115ca4b4af9cc362c16985adf1f3d0dd137c4de286e0c55629b97c4c5a2d2fe60933a26f4f77836bf8000cf6c10b925b6c862b7d5c38380b111f436b3c38ee327b75aba47cc89baf4f54eef00f709e7afa4a9de5e9379d9aa793c042ca24013111fe1cc2ac983c636807cc32bb9d1a7c1dec614d4809defe9fca6c678977b4dd3e35e255362d7a2f2d701f79d5d17ccc8a2340e78839af278da67b09a13542b52ff7f0000000000009f3de7054022705a6d9da47e8ca9c2d261b270862c0ff81f5ec7465f4b4168a484079435785a838d17b5e0687be490037945848b589797da43401896689dc942398457636268d6940913624d03fa022e52ac9a210b6592d03c73924f63ec0541a18e1044e469c41138509527be2e142afe539323908da11efa197b5cec17478400d391203182edd33fda29281de10da5bd2464c226c302e5f6d30efcde150d1f938b5d93b0fc6a67e863fc58df2469d95ab27e657cc6ca8241c1520f08d2eff6f26119fafa142b3e612539dd9f9f26676548f507e6ea502740283a1e9d021bc708b42391eab753371452f857d1b022eded1c458b2a785883bbe9654ba82b77262393a9efdc47be8d9a8bc8d2c456dcb8c4c0975a96b17067cd73cecfbe93c4dc15f1733c7c9645a8c7dc308c212a6b1e84bf7519b6aa8672c51b2e33ff49cdf0325742b012c6c20a85d2265d647dbee322af64a1e8b484012fa0b2646c8a1ca5bbfe4020e99ffbadc6e815b58237d5a65713606a9e4520cab2ef97815d908d259cf1f9538f8bd3041234a984a880d9e1b97de272b655042d0f86cccc4d435b94509562b307c12dfc93dd3fd41eba0d74cb3a5036eeee3726dcc6fc772b05b3fed14ebbf9a69331957248df4c8d0c4bdb3eff058e4c41393807e66302404ea7e9f401c1fe2a0d97d9e54ae461661d3297d3c19cc8d720334a0f6d1c9acc27bbda516233e123d0081a0d9f0fdd763032d563206c741394a1f8c3f6623779e95c4c9d0155f4c8ec3a9aaac38f499a9e080000004559d91d2c0e2457236fdcb0b12a111367c44b380d95047d6ad0ea6f910ba13ca5f22af4a0c7de8e653f934baaf857f6994bd24978f614"], 0x1010}}, {{&(0x7f0000000780)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="62c60b72b5a06a3fd71be46a9bed78e99c3fe976abfcb667c919b76c04a38fe02f9a4655967fe80f4d29cc938e6319b3666d1dfa790cdbdf4632d2a0eaeefe4c0c53c4e112fb4c0f8dca23be36", 0x4d}, {&(0x7f0000001940)="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", 0xc00}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x3f, @remote, 0x1, 0x1}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002b80)="1c24fec37ed9f7f8bbcb6c86649c13cc81673fd270e89b8fd45a1a0656847a7caa96bf30ae7c1af73824383d8e49a23ac059974b267347a16331337816e1eedbcbc8b90e5a74fe41959f7ca6b91a00d00b1f4c7923e53363bc591f8e04861d4b6847fa4d867745b36d9dea8cb327d8e75001447f6bacc4b56d7f95597d5a742a2f9e5f85d15ad3b972e0a6c41daea9b0e41a26aa4e01312a7eedb8e1a846701847568278736b95dcc4b96272fff9b62c54c3b3e75a506bf5203129dd91e8eb7158cc610ff3c0a378b20c185edb9d8639c71e88bab230f397c77189bfa2298d59db23f353ea3411e90a0610d7fed9cda18e4a4d0b1bb759b1226c33ee7603acff26a9d8bf0f09502c0abc8656af0577115e0551ab19813e31e395ed0d496a9636c1dff5d0b0f3a10e947bbc7570f3a8ee43237bb9afd26dbfecc4ec11c901776a03bf1be7f89a90af9fc3ec687d7ca5172d24590cc7b90fe71b7213400303c2405f524352445df222b4b5295d600a723ed0e95c0c99bf2045f4c04571fe576cec8ec2517278c0ad224b37bda920b1da3569cc7d1448b4b0dca14260feb2319d140a42b621f9704602502a02ca804984ad53fa292e89e5326489b87000568b65fa04fc62e83e30dbb1e4a7255d9351c69218b3f6be8a0c2df2897b0c2ea7277dad203acf314883d5636de57139d8d09a4f31ad89750962bd21e120250da9e5459e09296bca27631071a9a2792f7b5f36b70ed3e419444ddd03b7fbd00bfae71fc6b2b290ffae8e93ec9c4bd8b883cf53de51adc5594a50d192680d1d9b23c0e80ede37e025f482a98a96e51ba0c084b3436f80009484c8d6df9c389f0c95a15ac23b2be8d7e5beb1cbb287f978dc17d043a79e24b43adfedc67ccfbc7fe1db861cd48f1a0b89b4b7586a2dfed3baa1922c45250e77e5bf6211537eb0d38b0e8da5fe22dad78847f6467b1ee91a18b302a93356bbd9072dd4025b70b907519e95ecf54e47b0a5cf999f02744523272f73b5fb487bcd9402e648307a00a3b8087bf5317838c8195dc69fd230402adc50d762c746e41d3379ad535026c6198048e9e2a6b326fde09e3f82da4393250760129a61bc10c61a925831a3d3800b1866d18f8370e2d7d9e8c59010d05aaba88121e7e43b6c422fa2255b5d260a7be110292e014401af8d5b39db9878e41c75f16177592b42fbdd4e33ccf6c9d391a36d83d9ed47400f9dd5f5e09c228e4f110db3b9c88cd7025823f09560a09542e2734d91229c6fd5a7dbee814239442d738acac9405048caddf773a31d573ec7d4310c95ec600d0711766f01d440e72e4f3125baca572ea290982e11b88e5eed1ddaf361fb77a9ff37fa4f88b885cd1a11c3dc66d6515ae06fc6148d5f47e5447b941b01784dbbf38e42253280ed232055923ee5c2ae8c817cca3967e2332ef25c7a65e2a47d68de8e797bfe7e53f0476304f63ddccfe2b0e21202c93b4b44e9b06d5a1796c3a54ef7f6443dd8c931135cdef9e9427a2e6de306db4f0b1cfe01d2262e4121b36db5c504059341ce5fe24c7c605adc8bba0a124b7d1afbbe868e01ba8f6ba0c4f6695eedc0dd6f70f94ef1da2492add161855d7bd9addc6c2e893631d3656c598b8590ec0f8de03959181235519f3ee8f5b925796e568f60d568ed5b99a90021763d4c8781098839f7ff4b87757b16ecf591d0e7550c3a744c7cd0aaf361e6b32f13614163e199b1063b04ee1e9a00202be3df24c1cc577404aff698e0b1f5f05ce494261f7fba5e1aa0e50dc0602786c4a1b3f15478b130c1ae2fe2383c079d8514c87210b485cb4d46a65e23993960566f0b627cd76e375b42e6f9f1eb8b237f887f7bb2053d806e6c182323566011913a51dd3f75b7d86dea1cd8d42a617b4347caa9a6ad7f4b47db52aa88f58706d1a02e735856b908e8df2b365e060d03899ba851cd585e8ee48dee1454f128b18a11fcb71f63b1ef7b11b5c269a80290a93a6d220be97d3617d60a5818b8a0d99cba27b5486db4ebb53a293b6453e4409783155e5407cf747c4a594fd2f2d5431c538b805378d25bca9a6ccf6163c356fc9267c5c8f22fc8c35e8a8363bcedbdb5883752d7c4812ef4e9ae517f41376ff5d3bfcea603069ca17839c06221023eba3adb07ca3cd6f925efd2f2a2acc1348dd61722f329b8985f11df559c0394363f16acf684c843e4b96b2199bf1f10e2608d695aeb345c3c516d06c25fc73de604ef4e9408124c23c5e90134259ba31b05207d7610bf63dbf9c27c5abd96d8edfcbf11041188e0ad3ea355b88d2d72efe45f1aaa71d6a9aa4f4ce422733ad6efb36badab1a09a3a37894fb492bebb4cd00810841f5f72de203d8f0aeacac2331fd8c41487116067b38eafc39993a6c0d8e62bf2d48893c14ce01b78a9641df9e4aaacf937950c556037d05e9ba73b7ccad7b414c5ec2e8cbaabb7491610f3424db590d4072a45e5d51fa905ee8d0167843457547dfb8fdda47061e00f1be292c291b4d2d243663db048fd4d26a6242787b07c15d115275cdf87177476db999b6c65dbe6d2e2d9e05152fbbd3b683b6c349a05810d71d794a1fbd594034c03f3cc63fb22b2743a961ec4705e77454b79aca98166d13c37067c3abf7c1944c2168bdb811d1efc1f0248a29a5b597c4335e02c43222b997542ef4e4027951c68ec95fefc19782e00d04ec3545d50efe5e567833e760b0588a121091b81ea08cfd4607525f47b6add09acc1fb0c4d90e276679c836e7f6f1624d578a95852e20403daebdd51783019125f3f9381590a3446839f2fb9debd8dfa9e4f2925adae22542ddaa3260af0fb163dc5f7ede3a649fdd5f497b192aefda75335c52a91689a9b2336afabdb494a3b31571428353d5ffc1b03e79a234f4abdf255edfa7c53fa65fcb078814d5e3ae40686540d9aa310f95492d23865f5ef662649fb21f90a4406b4c81f22fd4584c6e33cd0fd9826b2f3510850e592e2ddf4bd925086708769372d4a6a0e0a9eabc9656959d9a6e5681af3ed5db05fba85a4f366a7f42b82bfa7374afbbb7eafc7b0d99167dc19862a8ee57c94aadcbde1c5f71f2f8a49c4be46245c6c7f072fc7b4ffc11c5deb943a8026684c96f061a88ca5d497a6d5bb1fc24268bcc486fd79ea0f1ac4322b3a110259dc86847ed2cabe171d71cab506793f8d4e79d16a68e7b583edf3bbe458eb026c3e6eb2758ddf2b53ccc0e2b8a5d969c6aa192ed30306b12603096ece382973714f3974346f1a872b4ccfbd8c43374496b80d1f3f2fa4aae5d2a479a1a7c0b53da0d53e6d6beaf59fcddf6a2e8df56ebee576e952bbdbb485df5fd9befa61c83b1c1c8d2e7d133937552cd0098ac9858505db3328f9208e4dbadf872ca4bee0e7a9504b2331fb7b407cedd0b53070d470cfd430a3299ae6f7ff13d35c56eef4413cdbf92d464479acbf357b182d79f6f2e0af471f0754008a777d96df954e6affb5b33dab3e3633ffaf3d25a2adaac65ba7856b831f63e12f302fe11328f10fee958ad85dfc3059384f32594e8416b6f145e5fea27fb319817b6ac2aaaaebd0b2bbc484e6f30a08beaf7fddc4a42d5b778232da2d42877bfd4ec91e739b2c41064a18888df927ec29df5b6c50c24c045f4ea0b1b45d8169c6cece28c7c099cae3c671dbdcbd2a42ea0f084227c40bee9fd0d6e03f688228cb87abb310787bdb5346a7098850633efa4af9e1424995850eeab7f7d668b844804b7d521d6976d4997caffe7273a722e43ba54bdb270abba1602aada95e25f201a48a7883c639c56753083a26828fb130f3211cdd905da3bc606fc93eb20d27b68daccd91db10daff43c63239ecfc0192eafdee2e38cc6ba569c3cddc47079bad4988d41b1ac8aea3a967d51608b46757c7244b73c2d0285aea40f98825bd19fa902b5bdf6912fc3385e0c2bc9435ba38a0f5b49758e1102d2f2acba4aea7f9c9db0d5b61ff2443b3c419333bc5df3d5084e5aec9935d7ea9b30eaf85f7e32706fe01769661c495d0e5c31f948f0b98773889832f310027196d97ec44b472be30ddcafcab12c6682cfe935c7e0e93d5e58c6a5468f9e242856c658a0c9f01894203a9b8296bbd06d4486efc66e0efd391500909a554be0d9c969bef2e271e8d0598b546f3abdc485c869e98198453b5bfd10ea9067924e8bade4c5ae60237058080dcd0173f6898bfd8ed8e3651fb447cd36db6485b50a5d0da76ff3b6a7b49bc72722a92ed29b41505b4e70fc7c258089b2a3e049bef397e77da0b0eb0ffbc666baa80a262c7216526e37e4fcc9f69c9200b4379596005ecd2dcffca0094c021b647d559d5c3e0d5e05cd609dae2a7a8f700b0091cc58ffb492fac52afb70e6d707608d7ba934c04349b6c9bc6511b764947500aad28c5ebc6e4758f47988d03e20b242e1b11b2e2dde27edf4ecd315da0bb8fa0c86e4dfa5fd8b0aef58a8124beaaddff953ae89c9df4f373247b3b689d6ffa8a65701c5574fa1349e85aa6926f78c0ca3f2f91c41e62689c587a089c1ddadd1b0f8a7c293366de009bbd1f4d6b941f218254883f51e7c4bb594131508a621f29acb4778377c0c3f6fea67b9ffa358b2fcf3fea2280d8f962d28d5f7561ce5d419d98db243fa35e4535b9c3fc8303ae043e51569c76b2008d8e7220af8778782100067381c4e022305ce445e775fdad1e9a245f59a30506ecc60227bb2f94760e2641695a99be292d01669fe131cb1bcac1bb6929631e45b507170ed591cbe9dba7e2fe26553e138258d05bbba19526c91da95c5bcc899109c4f1d13e09a6a28d1f2b4ee20da9972d8748970c5b0c1d8ec51c1202139314867e32db061a5d74614d03e4abab3d7afb565b82297a13f66c5f0b40f228848e925580d1ef1bf2a801da5638ff6bfaa72d0f06aae6570a85efe167a76acc8fd4dc947192aba7cffd1903d4d9f4a4dbe453bcd283350a428b8ae6a398bff27427a4e6c247dba8f3dadfddcccc70be6ff720816f92e82ab8b1f92de5f551b2d7bce298eb79a50b3c1a2739171c24d8d1a812c493f2a18c579fb79998c64c7f5326742ba15129453c35f87f300539d0923061580fce9a2d5a276337ea567f0f70cdf0ef697f2b1b7fdfa7aa0b39e1036e1cf6a4c37d7a70127e4c92d9481519d38dd011b2a97bc6f51e702923862f28cc43a19e85238785def07840f0012f3ee3a372102ef19e0d0b053a4455175b31bfe5b43d7c905b8c13253f049918294707d9314c61d1cb70ca1ea39524e707e69e03c63ae294b3fa4010b3138d3916e1ead9f5fa30545b91d6ab4e4e3f6207437d2eda671596414685bf8243fc6177e9984f18def84b209504dcf0faf3090dba05be000f8d64b75469ce1a0f7f90eae3270c5f9a8a0bb0c2f7c3c1839a1f28c880d8589fa828d5392a5d9c7bc1566e0cad8cf16405f48d139b813c7c012c4e1d334a152aa7315b6ed06c053869528602da0512feb77520688a9bc50c130e96226dc5f3aab355f23eb9840e08f0a7a0a313fbab68c57304f2f8437e53165b0d053c03dac4679a1f696413a8a4788d39342fb909b3c640532c0bed16b9ba5a9aed6800b4e8a010236918c5d6f5bd8e7a797764fcdb4c52322765eedd11f2bf7d575a8a3201982d835097833c5cf170a38187a7c8c81c109e5a9cdd2fee526f46b07908514e813caf57bf55706a604175aa5803ad0d421bb0aebaf6fc9638981ca56483a5745111c5449b713bfc3bf5218238a80380d17c70a9fc7b9860386f0cd59a541b56357052bb48e7b5293", 0x1000}], 0x1, &(0x7f0000006b80)=ANY=[@ANYBLOB="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"], 0x1490}}, {{&(0x7f0000005080)=@in6={0xa, 0x4e20, 0x9773, @private1={0xfc, 0x1, [], 0x1}, 0x8}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1233bc3af40968d0e801d95b724303a7c86c329b4be79c19ad34b8bdf40aaeee9a8f872e77d4b17d15351dcab18a2aba4f550ccb68700e5acef48eb47cfaf19841253d08eaffeb", 0x47}, {&(0x7f0000005180)="efe1e1b266d75b910bc333c117d603b71b81eea9fcdf5a5f56c3948bfe166521e1be683cba5f5d8eb8ce2b514b06836db672cfdf007503a2d5aa4a7db3cabd32355083d186dc4ec83f90ae26961416948960123aea24ad6f073455184f900ede541d", 0x62}, {&(0x7f0000005240)="60065e8cbb71267ed7fb6ca095740de9d61af79d5613afc1ffe1fe92a2b29529fcf635a60d1ce64a5044fe1a40696324e5337fa80196c263ae1343a696", 0x3d}], 0x3, &(0x7f0000003bc0)=ANY=[@ANYRES64], 0x110}}, {{&(0x7f0000005400)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x40, "457ddbec9a8d45980335126b97e9179eec63ad716192566949434b8718520f6e4c9cbe118c80bd4f242eb2b6b5d2734b63ba1e23303b24409ab52444fd9946", 0x3f}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005480)="7a6a217e944702b11e7b6fab22ec71182cfad0480ffd3bc2584ee102026d999701c363f59c71414a36a781b0e24e244617095a0bf21632270ca4419f17a830d6a77042aa49b1d2499086792bf38b87e59b5c22af51743a4dc65286f24877a117c50a1b9d13d11cb7d3fc4c676d19c55c620f005a07cc2ef21fcf1ee8a3f81e850e070b4274e66f281ed56e600c72b924a3a72320ae406e6b53fc5b0aff72be1e6585cfed618030d9e171ce7fe178ae494c65d0ba519db3e21111658a2dd602776e061e8e58d81f8d81c48a3ccda9432f51e2395b9c07a316d4857889e9f145e1497b0123b1f333582462647e095dac96fc81", 0xf2}], 0x1}}], 0x5, 0x2000ff01) socket$inet6(0xa, 0x4, 0x2) 12:38:59 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) [ 148.603153][ T6004] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 148.611102][ T6004] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000c [ 148.619048][ T6004] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:38:59 executing program 0 (fault-call:11 fault-nth:13): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:38:59 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 148.692328][ T5005] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.715902][ T6017] serio: Serial port pts2 [ 148.736683][ T6028] FAULT_INJECTION: forcing a failure. [ 148.736683][ T6028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.750059][ T6028] CPU: 1 PID: 6028 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 148.760153][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.770177][ T6028] Call Trace: [ 148.773447][ T6028] dump_stack+0x1b0/0x21e [ 148.777749][ T6028] ? devkmsg_release+0x11c/0x11c [ 148.782653][ T6028] ? show_regs_print_info+0x12/0x12 [ 148.787827][ T6028] ? kasan_alloc_pages+0x4a/0x60 [ 148.792739][ T6028] should_fail+0x6fb/0x860 [ 148.797125][ T6028] ? setup_fault_attr+0x2b0/0x2b0 [ 148.802121][ T6028] __alloc_pages_nodemask+0x1ee/0x7c0 [ 148.807468][ T6028] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 148.813002][ T6028] ? find_get_entry+0x5da/0x670 [ 148.817844][ T6028] ? xa_load+0x323/0x340 [ 148.822083][ T6028] __do_page_cache_readahead+0x244/0x510 [ 148.827707][ T6028] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 148.834147][ T6028] ? unwind_next_frame+0x1c07/0x22b0 [ 148.839403][ T6028] ? page_cache_sync_readahead+0xa3/0x3c0 [ 148.845099][ T6028] generic_file_read_iter+0x626/0x20a0 [ 148.850528][ T6028] ? find_get_pages_range_tag+0xae0/0xae0 [ 148.856249][ T6028] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 148.861598][ T6028] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.867645][ T6028] ? avc_denied+0x1c0/0x1c0 [ 148.872120][ T6028] generic_file_splice_read+0x491/0x780 [ 148.877635][ T6028] ? splice_shrink_spd+0xb0/0xb0 [ 148.882545][ T6028] ? security_file_permission+0x1e9/0x300 [ 148.888248][ T6028] ? splice_shrink_spd+0xb0/0xb0 [ 148.893158][ T6028] splice_direct_to_actor+0x3cf/0xb00 [ 148.898501][ T6028] ? do_splice_direct+0x3d0/0x3d0 [ 148.903505][ T6028] ? pipe_to_sendpage+0x300/0x300 [ 148.908513][ T6028] ? security_file_permission+0x128/0x300 [ 148.914205][ T6028] do_splice_direct+0x279/0x3d0 [ 148.919038][ T6028] ? splice_direct_to_actor+0xb00/0xb00 [ 148.924567][ T6028] ? security_file_permission+0x128/0x300 [ 148.930271][ T6028] do_sendfile+0x89d/0x1110 [ 148.934843][ T6028] ? compat_writev+0x390/0x390 [ 148.939584][ T6028] ? security_file_permission+0x128/0x300 [ 148.945271][ T6028] ? vfs_write+0x427/0x4f0 [ 148.949655][ T6028] ? fput_many+0x42/0x1a0 [ 148.953954][ T6028] __x64_sys_sendfile64+0x1ae/0x220 [ 148.959125][ T6028] ? __ia32_sys_sendfile+0x240/0x240 [ 148.964389][ T6028] do_syscall_64+0xcb/0x150 [ 148.968873][ T6028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 148.974738][ T6028] RIP: 0033:0x45de59 [ 148.978600][ T6028] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 148.998879][ T6028] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.007261][ T6028] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 149.015216][ T6028] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 149.023158][ T6028] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 149.031118][ T6028] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000d 12:39:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x2200c014) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000200)={0x0, 0xfff, {0x52, 0x8005, 0x5, {0x0, 0xa503}, {0x0, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x0, 0x0, {0x0, 0x7}, {0x7, 0x5}, @cond=[{0x3, 0xfe41, 0x0, 0xfffe, 0x7, 0x5}, {0x6, 0x0, 0x9, 0x81, 0x0, 0x6}]}}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64000100"/13]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0xc0000006}) 12:39:00 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 149.039072][ T6028] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x6}, 0x523}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x0, 0x49000000}, 0x40) [ 149.172312][ T5005] usb 2-1: Using ep0 maxpacket: 16 [ 149.372341][ T5005] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.383248][ T5005] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.393803][ T5005] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.404109][ T5005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.413977][ T5005] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 149.423797][ T5005] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 149.592367][ T5005] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.601397][ T5005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.609405][ T5005] usb 2-1: Product: syz [ 149.613623][ T5005] usb 2-1: Manufacturer: syz [ 149.618221][ T5005] usb 2-1: SerialNumber: syz [ 149.892396][ T5005] cdc_ncm 2-1:1.0: bind() failure [ 149.898174][ T5005] cdc_ncm 2-1:1.1: bind() failure [ 149.906398][ T5005] usb 2-1: USB disconnect, device number 6 [ 150.632280][ T5039] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.872277][ T5039] usb 2-1: Using ep0 maxpacket: 16 [ 151.072330][ T5039] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.083380][ T5039] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.093150][ T5039] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.102892][ T5039] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.112655][ T5039] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 12:39:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x2200c014) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000200)={0x0, 0xfff, {0x52, 0x8005, 0x5, {0x0, 0xa503}, {0x0, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x0, 0x0, {0x0, 0x7}, {0x7, 0x5}, @cond=[{0x3, 0xfe41, 0x0, 0xfffe, 0x7, 0x5}, {0x6, 0x0, 0x9, 0x81, 0x0, 0x6}]}}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64000100"/13]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0xc0000006}) 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:02 executing program 0 (fault-call:11 fault-nth:14): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x6}, 0x523}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x0, 0x49000000}, 0x40) 12:39:02 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffff8) 12:39:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x2200c014) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000200)={0x0, 0xfff, {0x52, 0x8005, 0x5, {0x0, 0xa503}, {0x0, 0x9}, @ramp={0xae7, 0x1, {0x6, 0x20, 0x7, 0xd28e}}}, {0x56, 0x0, 0x0, {0x0, 0x7}, {0x7, 0x5}, @cond=[{0x3, 0xfe41, 0x0, 0xfffe, 0x7, 0x5}, {0x6, 0x0, 0x9, 0x81, 0x0, 0x6}]}}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x3a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8001}, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x5a014, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3d90", 0x3}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="64000100"/13]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0xc0000006}) [ 151.122329][ T5039] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 151.186287][ T6073] serio: Serial port pts2 [ 151.192868][ T6069] FAULT_INJECTION: forcing a failure. [ 151.192868][ T6069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.206450][ T6069] CPU: 1 PID: 6069 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 151.216519][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.226630][ T6069] Call Trace: [ 151.229930][ T6069] dump_stack+0x1b0/0x21e [ 151.234275][ T6069] ? devkmsg_release+0x11c/0x11c [ 151.239187][ T6069] ? show_regs_print_info+0x12/0x12 [ 151.244357][ T6069] ? kasan_alloc_pages+0x4a/0x60 [ 151.249265][ T6069] should_fail+0x6fb/0x860 [ 151.253687][ T6069] ? setup_fault_attr+0x2b0/0x2b0 [ 151.258688][ T6069] __alloc_pages_nodemask+0x1ee/0x7c0 [ 151.264055][ T6069] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 151.269620][ T6069] ? find_get_entry+0x5da/0x670 [ 151.274461][ T6069] ? xa_load+0x323/0x340 [ 151.278686][ T6069] __do_page_cache_readahead+0x244/0x510 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) [ 151.282326][ T5039] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.284312][ T6069] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 151.284329][ T6069] ? unwind_next_frame+0x1c07/0x22b0 [ 151.299357][ T5039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.299740][ T6069] ? page_cache_sync_readahead+0xa3/0x3c0 [ 151.318642][ T6069] generic_file_read_iter+0x626/0x20a0 [ 151.324110][ T6069] ? find_get_pages_range_tag+0xae0/0xae0 [ 151.329818][ T6069] ? avc_has_perm_noaudit+0x2fc/0x3f0 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 151.335176][ T6069] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.341228][ T6069] ? avc_denied+0x1c0/0x1c0 [ 151.345721][ T6069] generic_file_splice_read+0x491/0x780 [ 151.351254][ T6069] ? splice_shrink_spd+0xb0/0xb0 [ 151.356186][ T6069] ? security_file_permission+0x1e9/0x300 [ 151.361894][ T6069] ? splice_shrink_spd+0xb0/0xb0 [ 151.366833][ T6069] splice_direct_to_actor+0x3cf/0xb00 [ 151.372175][ T6069] ? do_splice_direct+0x3d0/0x3d0 [ 151.372382][ T5039] usb 2-1: can't set config #1, error -71 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 151.377196][ T6069] ? pipe_to_sendpage+0x300/0x300 [ 151.377207][ T6069] ? security_file_permission+0x128/0x300 [ 151.377219][ T6069] do_splice_direct+0x279/0x3d0 [ 151.387107][ T5039] usb 2-1: USB disconnect, device number 7 [ 151.387931][ T6069] ? splice_direct_to_actor+0xb00/0xb00 [ 151.387948][ T6069] ? security_file_permission+0x128/0x300 [ 151.415450][ T6069] do_sendfile+0x89d/0x1110 [ 151.419942][ T6069] ? compat_writev+0x390/0x390 [ 151.424696][ T6069] ? security_file_permission+0x128/0x300 [ 151.430398][ T6069] ? vfs_write+0x427/0x4f0 [ 151.434792][ T6069] ? fput_many+0x42/0x1a0 [ 151.439112][ T6069] __x64_sys_sendfile64+0x1ae/0x220 [ 151.444295][ T6069] ? __ia32_sys_sendfile+0x240/0x240 [ 151.449565][ T6069] do_syscall_64+0xcb/0x150 [ 151.454038][ T6069] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.459916][ T6069] RIP: 0033:0x45de59 [ 151.463780][ T6069] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 151.483367][ T6069] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 151.491782][ T6069] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 151.499734][ T6069] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 151.507678][ T6069] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 151.515627][ T6069] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000e [ 151.523572][ T6069] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:02 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(r0, r1) dup3(r1, 0xffffffffffffffff, 0x0) 12:39:02 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:02 executing program 0 (fault-call:11 fault-nth:15): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x6}, 0x523}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x0, 0x49000000}, 0x40) [ 151.764178][ T6115] FAULT_INJECTION: forcing a failure. [ 151.764178][ T6115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.777665][ T6115] CPU: 1 PID: 6115 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 151.787710][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.797760][ T6115] Call Trace: [ 151.801048][ T6115] dump_stack+0x1b0/0x21e [ 151.805353][ T6115] ? devkmsg_release+0x11c/0x11c [ 151.810261][ T6115] ? show_regs_print_info+0x12/0x12 [ 151.815526][ T6115] ? kasan_alloc_pages+0x4a/0x60 [ 151.820437][ T6115] should_fail+0x6fb/0x860 [ 151.824835][ T6115] ? setup_fault_attr+0x2b0/0x2b0 [ 151.829835][ T6115] __alloc_pages_nodemask+0x1ee/0x7c0 [ 151.835218][ T6115] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 151.840743][ T6115] ? find_get_entry+0x5da/0x670 [ 151.845614][ T6115] ? xa_load+0x323/0x340 [ 151.849867][ T6115] __do_page_cache_readahead+0x244/0x510 [ 151.855471][ T6115] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 151.861853][ T6115] ? unwind_next_frame+0x1c07/0x22b0 [ 151.867110][ T6115] ? page_cache_sync_readahead+0xa3/0x3c0 [ 151.872800][ T6115] generic_file_read_iter+0x626/0x20a0 [ 151.878263][ T6115] ? find_get_pages_range_tag+0xae0/0xae0 [ 151.883951][ T6115] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 151.889291][ T6115] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 151.895333][ T6115] ? avc_denied+0x1c0/0x1c0 [ 151.899818][ T6115] generic_file_splice_read+0x491/0x780 [ 151.905336][ T6115] ? splice_shrink_spd+0xb0/0xb0 [ 151.910245][ T6115] ? security_file_permission+0x1e9/0x300 [ 151.915944][ T6115] ? splice_shrink_spd+0xb0/0xb0 [ 151.920848][ T6115] splice_direct_to_actor+0x3cf/0xb00 [ 151.926187][ T6115] ? do_splice_direct+0x3d0/0x3d0 [ 151.931177][ T6115] ? pipe_to_sendpage+0x300/0x300 [ 151.936258][ T6115] ? security_file_permission+0x128/0x300 [ 151.941959][ T6115] do_splice_direct+0x279/0x3d0 [ 151.946815][ T6115] ? splice_direct_to_actor+0xb00/0xb00 [ 151.952367][ T6115] ? security_file_permission+0x128/0x300 [ 151.958053][ T6115] do_sendfile+0x89d/0x1110 [ 151.962527][ T6115] ? compat_writev+0x390/0x390 [ 151.967260][ T6115] ? security_file_permission+0x128/0x300 [ 151.972947][ T6115] ? vfs_write+0x427/0x4f0 [ 151.977343][ T6115] ? fput_many+0x42/0x1a0 [ 151.981639][ T6115] __x64_sys_sendfile64+0x1ae/0x220 [ 151.986820][ T6115] ? __ia32_sys_sendfile+0x240/0x240 [ 151.992072][ T6115] do_syscall_64+0xcb/0x150 [ 151.996550][ T6115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 152.002425][ T6115] RIP: 0033:0x45de59 [ 152.006290][ T6115] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.025875][ T6115] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.034274][ T6115] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 152.042219][ T6115] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 152.050183][ T6115] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 152.058124][ T6115] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000000f [ 152.066063][ T6115] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:03 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) dup3(r2, r1, 0x0) 12:39:03 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(r0, r1) dup3(r1, 0xffffffffffffffff, 0x0) 12:39:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7ff, 0xc5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x3f}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f00000019c0)=""/4096, 0x1054}, {&(0x7f0000000680)=""/169, 0xa9}, {0x0}, {&(0x7f0000000380)=""/70, 0x4b}], 0x6}}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, &(0x7f0000000580)=""/256, 0x100}, 0x10002}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r6, &(0x7f0000002a40)="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", 0xff}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x88002, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 12:39:03 executing program 0 (fault-call:11 fault-nth:16): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:03 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(r0, r1) dup3(r1, 0xffffffffffffffff, 0x0) 12:39:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) [ 152.138278][ T6125] serio: Serial port pts3 [ 152.146965][ T6127] FAULT_INJECTION: forcing a failure. [ 152.146965][ T6127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.161617][ T6127] CPU: 0 PID: 6127 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 152.171685][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.181716][ T6127] Call Trace: [ 152.184986][ T6127] dump_stack+0x1b0/0x21e [ 152.189293][ T6127] ? devkmsg_release+0x11c/0x11c [ 152.194205][ T6127] ? show_regs_print_info+0x12/0x12 [ 152.199379][ T6127] ? kasan_alloc_pages+0x4a/0x60 [ 152.204310][ T6127] should_fail+0x6fb/0x860 [ 152.208701][ T6127] ? setup_fault_attr+0x2b0/0x2b0 [ 152.213704][ T6127] __alloc_pages_nodemask+0x1ee/0x7c0 [ 152.219059][ T6127] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 152.224579][ T6127] ? find_get_entry+0x5da/0x670 [ 152.229406][ T6127] ? xa_load+0x323/0x340 [ 152.235622][ T6127] __do_page_cache_readahead+0x244/0x510 [ 152.241229][ T6127] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 152.247630][ T6127] ? unwind_next_frame+0x1c07/0x22b0 [ 152.252890][ T6127] ? page_cache_sync_readahead+0xa3/0x3c0 [ 152.258601][ T6127] generic_file_read_iter+0x626/0x20a0 [ 152.264055][ T6127] ? find_get_pages_range_tag+0xae0/0xae0 [ 152.269750][ T6127] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 152.275096][ T6127] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 152.281135][ T6127] ? avc_denied+0x1c0/0x1c0 [ 152.285613][ T6127] generic_file_splice_read+0x491/0x780 [ 152.291134][ T6127] ? splice_shrink_spd+0xb0/0xb0 [ 152.296062][ T6127] ? security_file_permission+0x1e9/0x300 [ 152.301769][ T6127] ? splice_shrink_spd+0xb0/0xb0 [ 152.306682][ T6127] splice_direct_to_actor+0x3cf/0xb00 [ 152.312028][ T6127] ? do_splice_direct+0x3d0/0x3d0 [ 152.317025][ T6127] ? pipe_to_sendpage+0x300/0x300 [ 152.322024][ T6127] ? security_file_permission+0x128/0x300 [ 152.327714][ T6127] do_splice_direct+0x279/0x3d0 [ 152.332540][ T6127] ? splice_direct_to_actor+0xb00/0xb00 [ 152.338062][ T6127] ? security_file_permission+0x128/0x300 [ 152.343752][ T6127] do_sendfile+0x89d/0x1110 [ 152.348231][ T6127] ? compat_writev+0x390/0x390 [ 152.352971][ T6127] ? security_file_permission+0x128/0x300 [ 152.358681][ T6127] ? vfs_write+0x427/0x4f0 [ 152.363071][ T6127] ? fput_many+0x42/0x1a0 [ 152.367387][ T6127] __x64_sys_sendfile64+0x1ae/0x220 [ 152.372561][ T6127] ? __ia32_sys_sendfile+0x240/0x240 [ 152.377822][ T6127] do_syscall_64+0xcb/0x150 [ 152.382300][ T6127] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 152.388176][ T6127] RIP: 0033:0x45de59 [ 152.392049][ T6127] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.411627][ T6127] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.420012][ T6127] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 152.427958][ T6127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:39:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x7f) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000170001010000000000000000040000005eccf1f44b81e3ffa85235a596046df48e972181646f993a61b0302da75f134ecd549c2e50f8bff8a4abb5e0cfbc6e1d885db7f4b89348805891cd5556db2f870d9dc692450443d293f95ef1351b64f530b82d80896edc2ba137ddfbce94565f1d33bf52711a343c7fb9d96a21e777aa61ba583cedd8cd2f36c38d48"], 0x14}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000200)={{0x1, 0x0, @descriptor="5831915903385ca8"}}) [ 152.435913][ T6127] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 152.443861][ T6127] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000010 [ 152.451807][ T6127] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:03 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) dup3(r2, r1, 0x0) [ 152.482158][ T6135] serio: Serial port pts2 12:39:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) 12:39:03 executing program 0 (fault-call:11 fault-nth:17): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 152.814821][ T6150] serio: Serial port pts2 [ 152.821651][ T6151] serio: Serial port pts3 12:39:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) 12:39:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000380)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xfff000) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = open(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000002480)={{r5}, r6, 0xe, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x8, 0x0, {0x0, 0x6, 0xcd66}, [0x0, 0x7fffffff, 0x0, 0x6a7f, 0x1]}}, @subvolid=0xc3b3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x8, 0x3ff, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000007c0)={{r0}, r6, 0xa, @unused=[0x2, 0x4, 0x7fff, 0xffffffffffffff81], @devid=r7}) [ 152.885542][ T6159] FAULT_INJECTION: forcing a failure. [ 152.885542][ T6159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.905014][ T6159] CPU: 1 PID: 6159 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 152.915080][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.925126][ T6159] Call Trace: [ 152.928405][ T6159] dump_stack+0x1b0/0x21e [ 152.932724][ T6159] ? devkmsg_release+0x11c/0x11c [ 152.937651][ T6159] ? show_regs_print_info+0x12/0x12 [ 152.940218][ T6161] serio: Serial port pts2 [ 152.942835][ T6159] ? kasan_alloc_pages+0x4a/0x60 [ 152.942846][ T6159] should_fail+0x6fb/0x860 [ 152.942855][ T6159] ? setup_fault_attr+0x2b0/0x2b0 [ 152.942875][ T6159] __alloc_pages_nodemask+0x1ee/0x7c0 [ 152.966810][ T6159] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 152.972343][ T6159] ? find_get_entry+0x5da/0x670 [ 152.977198][ T6159] ? xa_load+0x323/0x340 [ 152.981411][ T6159] __do_page_cache_readahead+0x244/0x510 [ 152.987024][ T6159] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 152.993423][ T6159] ? unwind_next_frame+0x1c07/0x22b0 [ 152.998687][ T6159] ? page_cache_sync_readahead+0xa3/0x3c0 [ 153.004378][ T6159] generic_file_read_iter+0x626/0x20a0 [ 153.009809][ T6159] ? find_get_pages_range_tag+0xae0/0xae0 [ 153.015497][ T6159] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 153.020889][ T6159] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 153.026924][ T6159] ? avc_denied+0x1c0/0x1c0 [ 153.031405][ T6159] generic_file_splice_read+0x491/0x780 [ 153.036920][ T6159] ? splice_shrink_spd+0xb0/0xb0 [ 153.041844][ T6159] ? security_file_permission+0x1e9/0x300 [ 153.047623][ T6159] ? splice_shrink_spd+0xb0/0xb0 [ 153.052553][ T6159] splice_direct_to_actor+0x3cf/0xb00 [ 153.057905][ T6159] ? do_splice_direct+0x3d0/0x3d0 [ 153.062918][ T6159] ? pipe_to_sendpage+0x300/0x300 [ 153.067923][ T6159] ? security_file_permission+0x128/0x300 [ 153.073609][ T6159] do_splice_direct+0x279/0x3d0 [ 153.078442][ T6159] ? splice_direct_to_actor+0xb00/0xb00 [ 153.083971][ T6159] ? security_file_permission+0x128/0x300 [ 153.089672][ T6159] do_sendfile+0x89d/0x1110 [ 153.094145][ T6159] ? compat_writev+0x390/0x390 [ 153.098879][ T6159] ? security_file_permission+0x128/0x300 [ 153.104567][ T6159] ? vfs_write+0x427/0x4f0 [ 153.108954][ T6159] ? fput_many+0x42/0x1a0 [ 153.113252][ T6159] __x64_sys_sendfile64+0x1ae/0x220 [ 153.118430][ T6159] ? __ia32_sys_sendfile+0x240/0x240 [ 153.123681][ T6159] do_syscall_64+0xcb/0x150 [ 153.128155][ T6159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 153.134014][ T6159] RIP: 0033:0x45de59 [ 153.137879][ T6159] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.157454][ T6159] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 153.165835][ T6159] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 153.173774][ T6159] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:39:04 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) dup3(r2, r1, 0x0) 12:39:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 153.181714][ T6159] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 153.189654][ T6159] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000011 [ 153.197605][ T6159] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 153.267607][ T6173] serio: Serial port pts2 [ 153.294190][ T6176] serio: Serial port pts3 12:39:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7ff, 0xc5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x3f}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f00000019c0)=""/4096, 0x1054}, {&(0x7f0000000680)=""/169, 0xa9}, {0x0}, {&(0x7f0000000380)=""/70, 0x4b}], 0x6}}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, &(0x7f0000000580)=""/256, 0x100}, 0x10002}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r6, &(0x7f0000002a40)="8d25d1798695fbc64822fbc26ecc28d22f7d9f4af437e7853fd3fa59f5124cf62e3e0d8628d04bc0e556a42d972d7331fbc91be740f602c3f5c669aab4def11c1eacf551638a8eff4c132f9b036d4330785747217f57b1f8dcc7ea1c607d2148c6874c3ea9748563b1a30a65c11f52c8cc0e23b9c1a89a2391c78ace08480b475a3d63545285a3d67aa0a18280282198e406a3dd91219757b7a7ac82435be622a6a779510e5b687991459e1511c919457688d7cdf69b3d9344dfeb5e7cfe0819b6ba31d71c9d6a03bf01da37d346e91d2cea361468ee58bf526ccae4c05ea9fdaa426bb0533bbe7bb98496ff4042a941e9291da836eb7f4fc1890f0baa48b2", 0xff}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x88002, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 12:39:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) 12:39:04 executing program 0 (fault-call:11 fault-nth:18): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x7f) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000170001010000000000000000040000005eccf1f44b81e3ffa85235a596046df48e972181646f993a61b0302da75f134ecd549c2e50f8bff8a4abb5e0cfbc6e1d885db7f4b89348805891cd5556db2f870d9dc692450443d293f95ef1351b64f530b82d80896edc2ba137ddfbce94565f1d33bf52711a343c7fb9d96a21e777aa61ba583cedd8cd2f36c38d48"], 0x14}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000200)={{0x1, 0x0, @descriptor="5831915903385ca8"}}) 12:39:04 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 153.404145][ T6193] serio: Serial port pts3 [ 153.407742][ T6190] serio: Serial port pts2 [ 153.415314][ T6195] FAULT_INJECTION: forcing a failure. [ 153.415314][ T6195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 153.416993][ T6191] serio: Serial port pts4 [ 153.430433][ T6195] CPU: 1 PID: 6195 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 153.442886][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:39:04 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 153.453059][ T6195] Call Trace: [ 153.456342][ T6195] dump_stack+0x1b0/0x21e [ 153.460655][ T6195] ? devkmsg_release+0x11c/0x11c [ 153.465579][ T6195] ? show_regs_print_info+0x12/0x12 [ 153.470769][ T6195] ? kasan_alloc_pages+0x4a/0x60 [ 153.475695][ T6195] should_fail+0x6fb/0x860 [ 153.479973][ T6205] serio: Serial port pts3 [ 153.480125][ T6195] ? setup_fault_attr+0x2b0/0x2b0 [ 153.489446][ T6195] __alloc_pages_nodemask+0x1ee/0x7c0 [ 153.494834][ T6195] ? gfp_pfmemalloc_allowed+0x130/0x130 12:39:04 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 153.500362][ T6195] ? find_get_entry+0x5da/0x670 [ 153.505182][ T6195] ? xa_load+0x323/0x340 [ 153.509393][ T6195] __do_page_cache_readahead+0x244/0x510 [ 153.515009][ T6195] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 153.521391][ T6195] ? unwind_next_frame+0x1c07/0x22b0 [ 153.526652][ T6195] ? page_cache_sync_readahead+0xa3/0x3c0 [ 153.532359][ T6195] generic_file_read_iter+0x626/0x20a0 [ 153.537814][ T6195] ? find_get_pages_range_tag+0xae0/0xae0 [ 153.543520][ T6195] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 153.548877][ T6195] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 153.554928][ T6195] ? avc_denied+0x1c0/0x1c0 [ 153.559412][ T6195] generic_file_splice_read+0x491/0x780 [ 153.564942][ T6195] ? splice_shrink_spd+0xb0/0xb0 [ 153.569867][ T6195] ? security_file_permission+0x1e9/0x300 [ 153.575570][ T6195] ? splice_shrink_spd+0xb0/0xb0 [ 153.580497][ T6195] splice_direct_to_actor+0x3cf/0xb00 [ 153.585852][ T6195] ? do_splice_direct+0x3d0/0x3d0 [ 153.590859][ T6195] ? pipe_to_sendpage+0x300/0x300 [ 153.595872][ T6195] ? security_file_permission+0x128/0x300 [ 153.601572][ T6195] do_splice_direct+0x279/0x3d0 [ 153.606408][ T6195] ? splice_direct_to_actor+0xb00/0xb00 [ 153.611937][ T6195] ? security_file_permission+0x128/0x300 [ 153.617638][ T6195] do_sendfile+0x89d/0x1110 [ 153.622137][ T6195] ? compat_writev+0x390/0x390 [ 153.626884][ T6195] ? security_file_permission+0x128/0x300 [ 153.632598][ T6195] ? vfs_write+0x427/0x4f0 [ 153.637728][ T6195] ? fput_many+0x42/0x1a0 [ 153.642045][ T6195] __x64_sys_sendfile64+0x1ae/0x220 [ 153.642181][ T6211] serio: Serial port pts3 12:39:04 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 153.647255][ T6195] ? __ia32_sys_sendfile+0x240/0x240 [ 153.647264][ T6195] do_syscall_64+0xcb/0x150 [ 153.647274][ T6195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 153.647281][ T6195] RIP: 0033:0x45de59 [ 153.647290][ T6195] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.647294][ T6195] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 12:39:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7ff, 0xc5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x3f}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f00000019c0)=""/4096, 0x1054}, {&(0x7f0000000680)=""/169, 0xa9}, {0x0}, {&(0x7f0000000380)=""/70, 0x4b}], 0x6}}, {{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, &(0x7f0000000580)=""/256, 0x100}, 0x10002}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r6, &(0x7f0000002a40)="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", 0xff}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x88002, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 12:39:04 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:04 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 153.700107][ T6195] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 153.705024][ T6219] serio: Serial port pts3 [ 153.708076][ T6195] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 153.708082][ T6195] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 153.708093][ T6195] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000012 [ 153.708105][ T6195] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 153.807445][ T6229] serio: Serial port pts2 [ 153.869194][ T6233] serio: Serial port pts3 12:39:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:39:05 executing program 0 (fault-call:11 fault-nth:19): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:05 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:39:05 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 154.397558][ T6251] serio: Serial port pts4 [ 154.398835][ T6246] serio: Serial port pts2 [ 154.407597][ T6249] serio: Serial port pts3 [ 154.407696][ T6250] serio: Serial port pts5 [ 154.417347][ T6248] FAULT_INJECTION: forcing a failure. [ 154.417347][ T6248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.432486][ T6248] CPU: 1 PID: 6248 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 154.442544][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.452667][ T6248] Call Trace: [ 154.455947][ T6248] dump_stack+0x1b0/0x21e [ 154.460268][ T6248] ? devkmsg_release+0x11c/0x11c [ 154.465236][ T6248] ? show_regs_print_info+0x12/0x12 [ 154.470411][ T6248] ? kasan_alloc_pages+0x4a/0x60 [ 154.475338][ T6248] should_fail+0x6fb/0x860 [ 154.479743][ T6248] ? setup_fault_attr+0x2b0/0x2b0 [ 154.484786][ T6248] __alloc_pages_nodemask+0x1ee/0x7c0 [ 154.490151][ T6248] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 154.495688][ T6248] ? find_get_entry+0x5da/0x670 [ 154.496246][ T6260] serio: Serial port pts3 [ 154.500522][ T6248] ? xa_load+0x323/0x340 [ 154.500535][ T6248] __do_page_cache_readahead+0x244/0x510 [ 154.500554][ T6248] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 154.521093][ T6248] ? unwind_next_frame+0x1c07/0x22b0 [ 154.526347][ T6248] ? page_cache_sync_readahead+0xa3/0x3c0 [ 154.532072][ T6248] generic_file_read_iter+0x626/0x20a0 [ 154.537499][ T6248] ? find_get_pages_range_tag+0xae0/0xae0 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 154.543197][ T6248] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 154.548556][ T6248] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 154.554612][ T6248] ? avc_denied+0x1c0/0x1c0 [ 154.559101][ T6248] generic_file_splice_read+0x491/0x780 [ 154.564637][ T6248] ? splice_shrink_spd+0xb0/0xb0 [ 154.567083][ T6265] serio: Serial port pts3 [ 154.569565][ T6248] ? security_file_permission+0x1e9/0x300 [ 154.569573][ T6248] ? splice_shrink_spd+0xb0/0xb0 [ 154.569588][ T6248] splice_direct_to_actor+0x3cf/0xb00 [ 154.589852][ T6248] ? do_splice_direct+0x3d0/0x3d0 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) [ 154.594859][ T6248] ? pipe_to_sendpage+0x300/0x300 [ 154.599876][ T6248] ? security_file_permission+0x128/0x300 [ 154.605579][ T6248] do_splice_direct+0x279/0x3d0 [ 154.610431][ T6248] ? splice_direct_to_actor+0xb00/0xb00 [ 154.615964][ T6248] ? security_file_permission+0x128/0x300 [ 154.621688][ T6248] do_sendfile+0x89d/0x1110 [ 154.626180][ T6248] ? compat_writev+0x390/0x390 [ 154.630931][ T6248] ? security_file_permission+0x128/0x300 [ 154.636203][ T6270] serio: Serial port pts3 [ 154.636663][ T6248] ? vfs_write+0x427/0x4f0 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 154.645387][ T6248] ? fput_many+0x42/0x1a0 [ 154.649704][ T6248] __x64_sys_sendfile64+0x1ae/0x220 [ 154.654873][ T6248] ? __ia32_sys_sendfile+0x240/0x240 [ 154.660134][ T6248] do_syscall_64+0xcb/0x150 [ 154.664625][ T6248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 154.670485][ T6248] RIP: 0033:0x45de59 [ 154.674359][ T6248] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 154.693952][ T6248] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 154.699562][ T6275] serio: Serial port pts3 [ 154.702372][ T6248] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 154.702377][ T6248] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 154.702382][ T6248] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 154.702387][ T6248] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000013 [ 154.702391][ T6248] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:05 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:05 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:39:05 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:05 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:05 executing program 0 (fault-call:11 fault-nth:20): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 154.921559][ T6287] serio: Serial port pts2 [ 154.924962][ T6290] serio: Serial port pts3 [ 154.930093][ T6288] serio: Serial port pts5 [ 154.931993][ T6293] serio: Serial port pts4 [ 154.940792][ T6291] FAULT_INJECTION: forcing a failure. [ 154.940792][ T6291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.941999][ T6296] serio: Serial port pts6 [ 154.964932][ T6291] CPU: 0 PID: 6291 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 154.974990][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.985028][ T6291] Call Trace: [ 154.988308][ T6291] dump_stack+0x1b0/0x21e [ 154.992648][ T6291] ? devkmsg_release+0x11c/0x11c [ 154.997567][ T6291] ? show_regs_print_info+0x12/0x12 [ 155.002754][ T6291] ? kasan_alloc_pages+0x4a/0x60 [ 155.007218][ T6304] serio: Serial port pts3 [ 155.007682][ T6291] should_fail+0x6fb/0x860 12:39:06 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:06 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:39:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) [ 155.017508][ T6291] ? setup_fault_attr+0x2b0/0x2b0 [ 155.022524][ T6291] __alloc_pages_nodemask+0x1ee/0x7c0 [ 155.027886][ T6291] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 155.033455][ T6291] ? find_get_entry+0x5da/0x670 [ 155.038301][ T6291] ? xa_load+0x323/0x340 [ 155.042522][ T6291] __do_page_cache_readahead+0x244/0x510 [ 155.048124][ T6291] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 155.054514][ T6291] ? unwind_next_frame+0x1c07/0x22b0 [ 155.059776][ T6291] ? page_cache_sync_readahead+0xa3/0x3c0 [ 155.065474][ T6291] generic_file_read_iter+0x626/0x20a0 [ 155.069052][ T6311] serio: Serial port pts3 [ 155.070922][ T6291] ? find_get_pages_range_tag+0xae0/0xae0 [ 155.070931][ T6291] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 155.070939][ T6291] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 155.070947][ T6291] ? avc_denied+0x1c0/0x1c0 [ 155.070955][ T6291] generic_file_splice_read+0x491/0x780 [ 155.070966][ T6291] ? splice_shrink_spd+0xb0/0xb0 [ 155.070978][ T6291] ? security_file_permission+0x1e9/0x300 [ 155.070985][ T6291] ? splice_shrink_spd+0xb0/0xb0 12:39:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) [ 155.070993][ T6291] splice_direct_to_actor+0x3cf/0xb00 [ 155.071002][ T6291] ? do_splice_direct+0x3d0/0x3d0 [ 155.071009][ T6291] ? pipe_to_sendpage+0x300/0x300 [ 155.071018][ T6291] ? security_file_permission+0x128/0x300 [ 155.071026][ T6291] do_splice_direct+0x279/0x3d0 [ 155.071034][ T6291] ? splice_direct_to_actor+0xb00/0xb00 [ 155.071044][ T6291] ? security_file_permission+0x128/0x300 [ 155.071052][ T6291] do_sendfile+0x89d/0x1110 [ 155.071062][ T6291] ? compat_writev+0x390/0x390 [ 155.071070][ T6291] ? security_file_permission+0x128/0x300 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 155.071079][ T6291] ? vfs_write+0x427/0x4f0 [ 155.071086][ T6291] ? fput_many+0x42/0x1a0 [ 155.071095][ T6291] __x64_sys_sendfile64+0x1ae/0x220 [ 155.071104][ T6291] ? __ia32_sys_sendfile+0x240/0x240 [ 155.071113][ T6291] do_syscall_64+0xcb/0x150 [ 155.071127][ T6291] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 155.078481][ T6312] serio: Serial port pts4 [ 155.081122][ T6291] RIP: 0033:0x45de59 [ 155.081132][ T6291] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 155.081136][ T6291] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.137772][ T6318] serio: Serial port pts3 [ 155.139079][ T6291] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 155.139084][ T6291] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 155.139089][ T6291] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 155.139094][ T6291] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000014 12:39:06 executing program 1: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x5000f4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) clone(0x60000400, 0x0, 0x0, 0x0, 0x0) 12:39:06 executing program 0 (fault-call:11 fault-nth:21): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 155.139099][ T6291] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 155.219092][ T6325] serio: Serial port pts2 [ 155.279993][ T6330] FAULT_INJECTION: forcing a failure. [ 155.279993][ T6330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.298251][ T6330] CPU: 1 PID: 6330 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 155.308305][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.318339][ T6330] Call Trace: [ 155.321599][ T6330] dump_stack+0x1b0/0x21e [ 155.325900][ T6330] ? devkmsg_release+0x11c/0x11c [ 155.330806][ T6330] ? show_regs_print_info+0x12/0x12 [ 155.335991][ T6330] ? kasan_alloc_pages+0x4a/0x60 [ 155.340902][ T6330] should_fail+0x6fb/0x860 [ 155.345288][ T6330] ? setup_fault_attr+0x2b0/0x2b0 [ 155.350282][ T6330] __alloc_pages_nodemask+0x1ee/0x7c0 [ 155.355624][ T6330] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 155.361138][ T6330] ? find_get_entry+0x5da/0x670 [ 155.365956][ T6330] ? xa_load+0x323/0x340 [ 155.370167][ T6330] __do_page_cache_readahead+0x244/0x510 [ 155.375767][ T6330] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 155.382148][ T6330] ? unwind_next_frame+0x1c07/0x22b0 [ 155.387401][ T6330] ? page_cache_sync_readahead+0xa3/0x3c0 [ 155.393115][ T6330] generic_file_read_iter+0x626/0x20a0 [ 155.398545][ T6330] ? find_get_pages_range_tag+0xae0/0xae0 [ 155.404231][ T6330] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 155.409574][ T6330] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 155.415606][ T6330] ? avc_denied+0x1c0/0x1c0 [ 155.420087][ T6330] generic_file_splice_read+0x491/0x780 [ 155.425614][ T6330] ? splice_shrink_spd+0xb0/0xb0 [ 155.430525][ T6330] ? security_file_permission+0x1e9/0x300 [ 155.436225][ T6330] ? splice_shrink_spd+0xb0/0xb0 [ 155.441142][ T6330] splice_direct_to_actor+0x3cf/0xb00 [ 155.446484][ T6330] ? do_splice_direct+0x3d0/0x3d0 [ 155.451473][ T6330] ? pipe_to_sendpage+0x300/0x300 [ 155.456467][ T6330] ? security_file_permission+0x128/0x300 [ 155.462152][ T6330] do_splice_direct+0x279/0x3d0 [ 155.466971][ T6330] ? splice_direct_to_actor+0xb00/0xb00 [ 155.472501][ T6330] ? security_file_permission+0x128/0x300 [ 155.478194][ T6330] do_sendfile+0x89d/0x1110 [ 155.482675][ T6330] ? compat_writev+0x390/0x390 [ 155.487417][ T6330] ? security_file_permission+0x128/0x300 [ 155.493106][ T6330] ? vfs_write+0x427/0x4f0 [ 155.497491][ T6330] ? fput_many+0x42/0x1a0 [ 155.501788][ T6330] __x64_sys_sendfile64+0x1ae/0x220 [ 155.506972][ T6330] ? __ia32_sys_sendfile+0x240/0x240 [ 155.512252][ T6330] do_syscall_64+0xcb/0x150 [ 155.516724][ T6330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 155.522597][ T6330] RIP: 0033:0x45de59 [ 155.526460][ T6330] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 155.546036][ T6330] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.554416][ T6330] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 155.562361][ T6330] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:39:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffde4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) splice(r5, &(0x7f0000000140)=0xde, 0xffffffffffffffff, &(0x7f0000000180), 0x7, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) 12:39:06 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r2, r1, 0x0) 12:39:06 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726ffe75705f693d00", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, 0x0, r3) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xffffffffffffff00, 0x800) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000440)=""/4096) sendmmsg(r4, &(0x7f0000008600)=[{{0x0, 0x7f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/../file0/file0\x00'}, 0x32, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 155.570304][ T6330] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 155.578243][ T6330] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000015 [ 155.586190][ T6330] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:06 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 155.622389][ T6342] fuse: Unknown parameter 'group_i' [ 155.629749][ T6344] fuse: Unknown parameter 'group_i' [ 155.636737][ T6340] serio: Serial port pts2 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:06 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 155.666532][ T6348] serio: Serial port pts3 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:06 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, r5, 0xa85ec0f565c12c5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x33}}}}, ["", "", "", ""]}, 0x20}}, 0x6d1edd488ddc8cfc) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:39:06 executing program 0 (fault-call:11 fault-nth:22): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 155.733328][ T6357] serio: Serial port pts2 12:39:06 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 155.761667][ T6366] FAULT_INJECTION: forcing a failure. [ 155.761667][ T6366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.780790][ T6366] CPU: 1 PID: 6366 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 155.780919][ T6365] input: syz0 as /devices/virtual/input/input9 [ 155.790846][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.790850][ T6366] Call Trace: [ 155.790868][ T6366] dump_stack+0x1b0/0x21e [ 155.790879][ T6366] ? devkmsg_release+0x11c/0x11c [ 155.790887][ T6366] ? show_regs_print_info+0x12/0x12 [ 155.790897][ T6366] ? kasan_alloc_pages+0x4a/0x60 [ 155.790906][ T6366] should_fail+0x6fb/0x860 [ 155.790915][ T6366] ? setup_fault_attr+0x2b0/0x2b0 [ 155.790929][ T6366] __alloc_pages_nodemask+0x1ee/0x7c0 [ 155.790942][ T6366] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 155.790952][ T6366] ? find_get_entry+0x5da/0x670 [ 155.790960][ T6366] ? xa_load+0x323/0x340 [ 155.790971][ T6366] __do_page_cache_readahead+0x244/0x510 [ 155.790983][ T6366] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 155.790993][ T6366] ? unwind_next_frame+0x1c07/0x22b0 [ 155.791004][ T6366] ? page_cache_sync_readahead+0xa3/0x3c0 [ 155.791014][ T6366] generic_file_read_iter+0x626/0x20a0 [ 155.791027][ T6366] ? find_get_pages_range_tag+0xae0/0xae0 [ 155.791036][ T6366] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 155.791045][ T6366] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 155.791054][ T6366] ? avc_denied+0x1c0/0x1c0 [ 155.791064][ T6366] generic_file_splice_read+0x491/0x780 [ 155.791074][ T6366] ? splice_shrink_spd+0xb0/0xb0 [ 155.791097][ T6366] ? security_file_permission+0x1e9/0x300 [ 155.791106][ T6366] ? splice_shrink_spd+0xb0/0xb0 [ 155.791113][ T6366] splice_direct_to_actor+0x3cf/0xb00 [ 155.791130][ T6366] ? do_splice_direct+0x3d0/0x3d0 [ 155.940868][ T6366] ? pipe_to_sendpage+0x300/0x300 [ 155.945865][ T6366] ? security_file_permission+0x128/0x300 [ 155.951579][ T6366] do_splice_direct+0x279/0x3d0 [ 155.956401][ T6366] ? splice_direct_to_actor+0xb00/0xb00 [ 155.961913][ T6366] ? security_file_permission+0x128/0x300 [ 155.967599][ T6366] do_sendfile+0x89d/0x1110 [ 155.972070][ T6366] ? compat_writev+0x390/0x390 [ 155.976823][ T6366] ? security_file_permission+0x128/0x300 [ 155.982510][ T6366] ? vfs_write+0x427/0x4f0 [ 155.986906][ T6366] ? fput_many+0x42/0x1a0 [ 155.991211][ T6366] __x64_sys_sendfile64+0x1ae/0x220 [ 155.996386][ T6366] ? __ia32_sys_sendfile+0x240/0x240 [ 156.001650][ T6366] do_syscall_64+0xcb/0x150 [ 156.006137][ T6366] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.011994][ T6366] RIP: 0033:0x45de59 [ 156.015856][ T6366] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 156.035426][ T6366] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.043816][ T6366] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 156.051766][ T6366] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 156.059705][ T6366] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 156.067644][ T6366] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000016 [ 156.075595][ T6366] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 156.105551][ T6373] input: syz0 as /devices/virtual/input/input10 12:39:07 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x101100, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="fbfc0000", @ANYRES16=r1, @ANYBLOB="040026bd7000fddbdf250000000008000900000000000c0003000300000000000000080008000300000008000500e00000010800080000000000060006000000000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080004000a010100"], 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfffffffd, 0x71, 0x10, 0x8f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000180)="b07280a54ed614394dc689c09afac0b86b211a87580de3a08c0b43c1145282d41d3db856c4729735c83d015b09eee670d58f2e40d632c0d01da5e02df8bcba4df3e36ca72395fb36046bbe0f73466a909cc7b13a59", &(0x7f0000000300)=@buf="52130015ddf43da5c109242518f8fc81c9d8e8a92a111d515f32d2e46cbd689fb220dacfdafd6706265514f10e9cafcf36e0e023f63bb32aa396acae07fa072cb7b807c59ca08d4cf93aa000174fa4f56ccc20aa75511b7773572c32787701e0f8ff7c16a35b5663e0e3c6027b59cbf2e8edc47b0bcf1e7414fd2cbf8049e8d10e08afb573177d6e9e5aeff65dc0aa30ad11cb1d6b46bac595a02ea0d0f3fd57b94e173f27f23eae853975cf7434ea47f5fabc0e0bb4a91363edb0c97702bfaf07c53180a7087a5c19020fbd", 0x1}, 0x20) 12:39:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4e2672a971cdba71}, 0x1eb7a, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x20) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20000000) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) tkill(r1, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x7, 0x0, 0x10000, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x1cc, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdd9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0xe271}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x153}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5a}, {0x6, 0x16, 0xd83c}, {0x5, 0x12, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48c2}, 0x48094) write$nbd(r2, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r2, r2, &(0x7f0000000200), 0xa198) 12:39:07 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:07 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:07 executing program 0 (fault-call:11 fault-nth:23): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000600)=""/136, 0x88}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/199, 0xc7}, 0x2}], 0x3, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000440)=""/162}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740e", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 156.432460][ T6383] FAULT_INJECTION: forcing a failure. [ 156.432460][ T6383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.449575][ T6383] CPU: 1 PID: 6383 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 156.459631][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.469670][ T6383] Call Trace: [ 156.473096][ T6383] dump_stack+0x1b0/0x21e [ 156.477414][ T6383] ? devkmsg_release+0x11c/0x11c [ 156.482336][ T6383] ? show_regs_print_info+0x12/0x12 [ 156.487519][ T6383] ? kasan_alloc_pages+0x4a/0x60 [ 156.492441][ T6383] should_fail+0x6fb/0x860 [ 156.496842][ T6383] ? setup_fault_attr+0x2b0/0x2b0 [ 156.501894][ T6383] __alloc_pages_nodemask+0x1ee/0x7c0 [ 156.507263][ T6383] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 156.512797][ T6383] ? find_get_entry+0x5da/0x670 [ 156.517633][ T6383] ? xa_load+0x323/0x340 [ 156.521861][ T6383] __do_page_cache_readahead+0x244/0x510 12:39:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) r3 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc) [ 156.527479][ T6383] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 156.533882][ T6383] ? unwind_next_frame+0x1c07/0x22b0 [ 156.539155][ T6383] ? page_cache_sync_readahead+0xa3/0x3c0 [ 156.544865][ T6383] generic_file_read_iter+0x626/0x20a0 [ 156.550314][ T6383] ? find_get_pages_range_tag+0xae0/0xae0 [ 156.556021][ T6383] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 156.561402][ T6383] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.567456][ T6383] ? avc_denied+0x1c0/0x1c0 [ 156.571954][ T6383] generic_file_splice_read+0x491/0x780 [ 156.577515][ T6383] ? splice_shrink_spd+0xb0/0xb0 [ 156.582445][ T6383] ? security_file_permission+0x1e9/0x300 [ 156.588156][ T6383] ? splice_shrink_spd+0xb0/0xb0 [ 156.593078][ T6383] splice_direct_to_actor+0x3cf/0xb00 [ 156.598440][ T6383] ? do_splice_direct+0x3d0/0x3d0 [ 156.603450][ T6383] ? pipe_to_sendpage+0x300/0x300 [ 156.608461][ T6383] ? security_file_permission+0x128/0x300 [ 156.614163][ T6383] do_splice_direct+0x279/0x3d0 [ 156.619004][ T6383] ? splice_direct_to_actor+0xb00/0xb00 [ 156.624549][ T6383] ? security_file_permission+0x128/0x300 [ 156.630260][ T6383] do_sendfile+0x89d/0x1110 [ 156.634782][ T6383] ? compat_writev+0x390/0x390 [ 156.639532][ T6383] ? security_file_permission+0x128/0x300 [ 156.645238][ T6383] ? vfs_write+0x427/0x4f0 [ 156.649636][ T6383] ? fput_many+0x42/0x1a0 [ 156.653957][ T6383] __x64_sys_sendfile64+0x1ae/0x220 [ 156.659144][ T6383] ? __ia32_sys_sendfile+0x240/0x240 [ 156.664416][ T6383] do_syscall_64+0xcb/0x150 [ 156.668906][ T6383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 156.674783][ T6383] RIP: 0033:0x45de59 [ 156.678667][ T6383] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 156.698281][ T6383] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.706677][ T6383] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 156.714664][ T6383] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 156.722640][ T6383] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 12:39:07 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 156.730596][ T6383] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000017 [ 156.738551][ T6383] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:07 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:07 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:08 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:08 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000600)=""/136, 0x88}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/199, 0xc7}, 0x2}], 0x3, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000440)=""/162}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740e", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) 12:39:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000600)=""/136, 0x88}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/199, 0xc7}, 0x2}], 0x3, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r2, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, &(0x7f0000000440)=""/162}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740e", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) 12:39:08 executing program 0 (fault-call:11 fault-nth:24): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:08 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 157.232583][ T6388] overlayfs: './file0' not a directory [ 157.256032][ T6431] FAULT_INJECTION: forcing a failure. [ 157.256032][ T6431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.269290][ T6431] CPU: 1 PID: 6431 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 157.279336][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.289399][ T6431] Call Trace: [ 157.292673][ T6431] dump_stack+0x1b0/0x21e [ 157.296980][ T6431] ? devkmsg_release+0x11c/0x11c [ 157.301918][ T6431] ? show_regs_print_info+0x12/0x12 [ 157.307088][ T6431] ? kasan_alloc_pages+0x4a/0x60 [ 157.311994][ T6431] should_fail+0x6fb/0x860 [ 157.316399][ T6431] ? setup_fault_attr+0x2b0/0x2b0 [ 157.321397][ T6431] __alloc_pages_nodemask+0x1ee/0x7c0 [ 157.326756][ T6431] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 157.332274][ T6431] ? find_get_entry+0x5da/0x670 [ 157.337107][ T6431] ? xa_load+0x323/0x340 [ 157.341334][ T6431] __do_page_cache_readahead+0x244/0x510 [ 157.346937][ T6431] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 157.353328][ T6431] ? unwind_next_frame+0x1c07/0x22b0 [ 157.358579][ T6431] ? page_cache_sync_readahead+0xa3/0x3c0 [ 157.364269][ T6431] generic_file_read_iter+0x626/0x20a0 [ 157.369982][ T6431] ? find_get_pages_range_tag+0xae0/0xae0 [ 157.375673][ T6431] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 157.381047][ T6431] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 157.387082][ T6431] ? avc_denied+0x1c0/0x1c0 [ 157.391563][ T6431] generic_file_splice_read+0x491/0x780 [ 157.397102][ T6431] ? splice_shrink_spd+0xb0/0xb0 [ 157.402012][ T6431] ? security_file_permission+0x1e9/0x300 [ 157.407709][ T6431] ? splice_shrink_spd+0xb0/0xb0 [ 157.412631][ T6431] splice_direct_to_actor+0x3cf/0xb00 [ 157.417990][ T6431] ? do_splice_direct+0x3d0/0x3d0 [ 157.423008][ T6431] ? pipe_to_sendpage+0x300/0x300 [ 157.428023][ T6431] ? security_file_permission+0x128/0x300 [ 157.433718][ T6431] do_splice_direct+0x279/0x3d0 [ 157.438537][ T6431] ? splice_direct_to_actor+0xb00/0xb00 [ 157.444052][ T6431] ? security_file_permission+0x128/0x300 [ 157.449755][ T6431] do_sendfile+0x89d/0x1110 [ 157.454235][ T6431] ? compat_writev+0x390/0x390 [ 157.458967][ T6431] ? security_file_permission+0x128/0x300 [ 157.464669][ T6431] ? vfs_write+0x427/0x4f0 [ 157.469054][ T6431] ? fput_many+0x42/0x1a0 [ 157.473367][ T6431] __x64_sys_sendfile64+0x1ae/0x220 [ 157.478533][ T6431] ? __ia32_sys_sendfile+0x240/0x240 [ 157.483786][ T6431] do_syscall_64+0xcb/0x150 [ 157.488276][ T6431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 157.494135][ T6431] RIP: 0033:0x45de59 [ 157.497997][ T6431] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.517567][ T6431] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.525957][ T6431] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 12:39:08 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(0xffffffffffffffff, r0, 0x0) [ 157.533907][ T6431] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 157.541848][ T6431] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 157.549789][ T6431] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000018 [ 157.557733][ T6431] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:08 executing program 0 (fault-call:11 fault-nth:25): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:08 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) r3 = socket$inet6(0xa, 0x3, 0xac) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfc) 12:39:08 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 157.688865][ T6448] FAULT_INJECTION: forcing a failure. [ 157.688865][ T6448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.710088][ T6448] CPU: 0 PID: 6448 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 157.720161][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.730195][ T6448] Call Trace: [ 157.733470][ T6448] dump_stack+0x1b0/0x21e [ 157.737789][ T6448] ? devkmsg_release+0x11c/0x11c [ 157.742812][ T6448] ? show_regs_print_info+0x12/0x12 [ 157.747981][ T6448] ? kasan_alloc_pages+0x4a/0x60 [ 157.752900][ T6448] should_fail+0x6fb/0x860 [ 157.757304][ T6448] ? setup_fault_attr+0x2b0/0x2b0 [ 157.762307][ T6448] __alloc_pages_nodemask+0x1ee/0x7c0 [ 157.767653][ T6448] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 157.773170][ T6448] ? xa_load+0x323/0x340 [ 157.777417][ T6448] __do_page_cache_readahead+0x244/0x510 [ 157.783061][ T6448] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 157.789454][ T6448] ? page_cache_sync_readahead+0xa3/0x3c0 [ 157.795178][ T6448] generic_file_read_iter+0x626/0x20a0 [ 157.800621][ T6448] ? find_get_pages_range_tag+0xae0/0xae0 [ 157.806323][ T6448] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 157.811702][ T6448] ? _raw_spin_unlock_irq+0x5/0x20 [ 157.816812][ T6448] ? avc_denied+0x1c0/0x1c0 [ 157.821302][ T6448] generic_file_splice_read+0x491/0x780 [ 157.826837][ T6448] ? splice_shrink_spd+0xb0/0xb0 [ 157.831765][ T6448] ? security_file_permission+0x1e9/0x300 [ 157.837473][ T6448] ? splice_shrink_spd+0xb0/0xb0 [ 157.842419][ T6448] splice_direct_to_actor+0x3cf/0xb00 [ 157.847779][ T6448] ? do_splice_direct+0x3d0/0x3d0 [ 157.852788][ T6448] ? pipe_to_sendpage+0x300/0x300 [ 157.857799][ T6448] ? security_file_permission+0x128/0x300 [ 157.863504][ T6448] do_splice_direct+0x279/0x3d0 [ 157.868345][ T6448] ? splice_direct_to_actor+0xb00/0xb00 [ 157.873882][ T6448] ? security_file_permission+0x128/0x300 [ 157.879589][ T6448] do_sendfile+0x89d/0x1110 [ 157.884080][ T6448] ? compat_writev+0x390/0x390 [ 157.888827][ T6448] ? security_file_permission+0x128/0x300 [ 157.894533][ T6448] ? vfs_write+0x427/0x4f0 [ 157.898932][ T6448] ? fput_many+0x42/0x1a0 [ 157.903244][ T6448] __x64_sys_sendfile64+0x1ae/0x220 [ 157.908429][ T6448] ? __ia32_sys_sendfile+0x240/0x240 [ 157.913699][ T6448] do_syscall_64+0xcb/0x150 [ 157.918213][ T6448] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 157.924072][ T6448] RIP: 0033:0x45de59 [ 157.927948][ T6448] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 157.947552][ T6448] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.955935][ T6448] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 157.963885][ T6448] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 157.971832][ T6448] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 157.979819][ T6448] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000019 [ 157.987759][ T6448] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x400, 0x70bd2b, 0x25dfdbfe, {0xa}, [@NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY={0xc, 0xd, 0x1000}]}]}, 0x24}}, 0x0) 12:39:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(0xffffffffffffffff, r0, 0x0) 12:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:09 executing program 4: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902660003010000000904000000010100000a2401000000270302090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000724010000000009058209000000000507250100000000"], 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000}) 12:39:09 executing program 0 (fault-call:11 fault-nth:26): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 158.192823][ T6473] FAULT_INJECTION: forcing a failure. [ 158.192823][ T6473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.206209][ T6473] CPU: 1 PID: 6473 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 158.216258][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.227252][ T6473] Call Trace: [ 158.230532][ T6473] dump_stack+0x1b0/0x21e [ 158.234852][ T6473] ? devkmsg_release+0x11c/0x11c [ 158.239797][ T6473] ? show_regs_print_info+0x12/0x12 [ 158.244988][ T6473] ? kasan_alloc_pages+0x4a/0x60 [ 158.249912][ T6473] should_fail+0x6fb/0x860 [ 158.254317][ T6473] ? setup_fault_attr+0x2b0/0x2b0 [ 158.259334][ T6473] __alloc_pages_nodemask+0x1ee/0x7c0 [ 158.264699][ T6473] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 158.270233][ T6473] ? find_get_entry+0x5da/0x670 [ 158.275073][ T6473] ? xa_load+0x323/0x340 [ 158.279302][ T6473] __do_page_cache_readahead+0x244/0x510 [ 158.284930][ T6473] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 158.291350][ T6473] ? unwind_next_frame+0x1c07/0x22b0 [ 158.296618][ T6473] ? page_cache_sync_readahead+0xa3/0x3c0 [ 158.302325][ T6473] generic_file_read_iter+0x626/0x20a0 [ 158.307780][ T6473] ? find_get_pages_range_tag+0xae0/0xae0 [ 158.313486][ T6473] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 158.318847][ T6473] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 158.324903][ T6473] ? avc_denied+0x1c0/0x1c0 [ 158.329397][ T6473] generic_file_splice_read+0x491/0x780 [ 158.334951][ T6473] ? splice_shrink_spd+0xb0/0xb0 [ 158.339880][ T6473] ? security_file_permission+0x1e9/0x300 [ 158.345589][ T6473] ? splice_shrink_spd+0xb0/0xb0 [ 158.350510][ T6473] splice_direct_to_actor+0x3cf/0xb00 [ 158.355870][ T6473] ? do_splice_direct+0x3d0/0x3d0 [ 158.360879][ T6473] ? pipe_to_sendpage+0x300/0x300 [ 158.365892][ T6473] ? security_file_permission+0x128/0x300 [ 158.371601][ T6473] do_splice_direct+0x279/0x3d0 [ 158.376439][ T6473] ? splice_direct_to_actor+0xb00/0xb00 [ 158.381976][ T6473] ? security_file_permission+0x128/0x300 [ 158.387679][ T6473] do_sendfile+0x89d/0x1110 [ 158.392169][ T6473] ? compat_writev+0x390/0x390 [ 158.396918][ T6473] ? security_file_permission+0x128/0x300 [ 158.402621][ T6473] ? vfs_write+0x427/0x4f0 [ 158.407021][ T6473] ? fput_many+0x42/0x1a0 [ 158.411341][ T6473] __x64_sys_sendfile64+0x1ae/0x220 [ 158.416532][ T6473] ? __ia32_sys_sendfile+0x240/0x240 [ 158.421821][ T6473] do_syscall_64+0xcb/0x150 [ 158.426310][ T6473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 158.432206][ T6473] RIP: 0033:0x45de59 [ 158.436088][ T6473] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 158.442252][ T5039] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 158.455694][ T6473] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.455706][ T6473] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 158.455711][ T6473] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 158.455717][ T6473] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 158.455721][ T6473] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001a [ 158.455727][ T6473] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:09 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0xdd) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f00000000c0)) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{}]}) 12:39:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(0xffffffffffffffff, r0, 0x0) 12:39:09 executing program 0 (fault-call:11 fault-nth:27): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:09 executing program 5: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1100}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fcntl$addseals(r0, 0x409, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd28, 0x25dfdbff, {0x7, r2}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x40880) 12:39:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 158.610340][ T6485] FAULT_INJECTION: forcing a failure. [ 158.610340][ T6485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.643875][ T6485] CPU: 0 PID: 6485 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 158.653952][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 158.663990][ T6485] Call Trace: [ 158.667269][ T6485] dump_stack+0x1b0/0x21e [ 158.671588][ T6485] ? devkmsg_release+0x11c/0x11c [ 158.676515][ T6485] ? show_regs_print_info+0x12/0x12 [ 158.681697][ T6485] ? kasan_alloc_pages+0x4a/0x60 [ 158.686619][ T6485] should_fail+0x6fb/0x860 [ 158.691119][ T6485] ? setup_fault_attr+0x2b0/0x2b0 [ 158.696134][ T6485] __alloc_pages_nodemask+0x1ee/0x7c0 [ 158.701499][ T6485] ? gfp_pfmemalloc_allowed+0x130/0x130 12:39:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r1, 0x4200, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250200000008000500ac14142a14000300fe8000000000000000000000000000bb1400020000000000000000000000000000000101000000000000000014000200ff010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r5, 0x2008002) sendfile(r0, r5, 0x0, 0x200fff) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xa72d) r7 = socket$inet6(0xa, 0x3, 0x4) close(r7) r8 = open(&(0x7f0000002000)='./bus\x00', 0x84042, 0x0) sendfile(r7, r8, 0x0, 0x200fff) [ 158.707032][ T6485] ? find_get_entry+0x5da/0x670 [ 158.711871][ T6485] ? xa_load+0x323/0x340 [ 158.716105][ T6485] __do_page_cache_readahead+0x244/0x510 [ 158.721723][ T6485] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 158.728125][ T6485] ? unwind_next_frame+0x1c07/0x22b0 [ 158.733396][ T6485] ? page_cache_sync_readahead+0xa3/0x3c0 [ 158.739105][ T6485] generic_file_read_iter+0x626/0x20a0 [ 158.744554][ T6485] ? find_get_pages_range_tag+0xae0/0xae0 [ 158.750259][ T6485] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 158.755615][ T6485] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 158.761670][ T6485] ? avc_denied+0x1c0/0x1c0 [ 158.766161][ T6485] generic_file_splice_read+0x491/0x780 [ 158.771700][ T6485] ? splice_shrink_spd+0xb0/0xb0 [ 158.776626][ T6485] ? security_file_permission+0x1e9/0x300 [ 158.782328][ T6485] ? splice_shrink_spd+0xb0/0xb0 [ 158.787246][ T6485] splice_direct_to_actor+0x3cf/0xb00 [ 158.792602][ T6485] ? do_splice_direct+0x3d0/0x3d0 [ 158.797608][ T6485] ? pipe_to_sendpage+0x300/0x300 [ 158.802618][ T6485] ? security_file_permission+0x128/0x300 [ 158.808343][ T6485] do_splice_direct+0x279/0x3d0 [ 158.813189][ T6485] ? splice_direct_to_actor+0xb00/0xb00 [ 158.818728][ T6485] ? security_file_permission+0x128/0x300 [ 158.824432][ T6485] do_sendfile+0x89d/0x1110 [ 158.828922][ T6485] ? compat_writev+0x390/0x390 [ 158.833673][ T6485] ? security_file_permission+0x128/0x300 [ 158.839403][ T6485] ? vfs_write+0x427/0x4f0 [ 158.843802][ T6485] ? fput_many+0x42/0x1a0 [ 158.848123][ T6485] __x64_sys_sendfile64+0x1ae/0x220 [ 158.853311][ T6485] ? __ia32_sys_sendfile+0x240/0x240 [ 158.858612][ T6485] do_syscall_64+0xcb/0x150 [ 158.863114][ T6485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 158.869018][ T6485] RIP: 0033:0x45de59 [ 158.872899][ T6485] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 158.892494][ T6485] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 158.900893][ T6485] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 12:39:09 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 158.908851][ T6485] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 158.916811][ T6485] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 158.924768][ T6485] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001b [ 158.932744][ T6485] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 159.112310][ T5039] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 159.129782][ T5039] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 159.153335][ T5039] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.352329][ T5039] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.361370][ T5039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.369417][ T5039] usb 5-1: Product: syz [ 159.373735][ T5039] usb 5-1: Manufacturer: syz [ 159.378324][ T5039] usb 5-1: SerialNumber: syz [ 159.692323][ T5039] usb 5-1: invalid UAC_HEADER (v1) [ 159.697606][ T5039] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 159.706467][ T5039] usb 5-1: USB disconnect, device number 18 [ 160.392253][ T5039] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.752305][ T5039] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 160.760987][ T5039] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 160.771746][ T5039] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.932308][ T5039] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.941381][ T5039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.949894][ T5039] usb 5-1: Product: syz [ 160.954358][ T5039] usb 5-1: Manufacturer: syz [ 160.958926][ T5039] usb 5-1: SerialNumber: syz 12:39:12 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r0, 0xffffffffffffffff, 0x0) 12:39:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x1, 0x300) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1c542) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), 0x14) write$input_event(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x201202, 0x0) chdir(0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r4, &(0x7f0000001440), 0xfffffc41) getsockname(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000140)=0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r4, 0x2e, 0xe7000000, 0x4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffff8) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000340)=0x5) 12:39:12 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x4080f35d3f480b15, 0x1d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x2f042, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x1417c2, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000001c0)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="c3", 0xfffffdef}], 0x1, 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffffffffffffc, 0x0) fallocate(r0, 0x11, 0x0, 0x4f010000) open(0x0, 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7ff) creat(&(0x7f0000000100)='./bus\x00', 0xf5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file2\x00', r3}, 0x10) io_setup(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="e722007f1f4c1f952354cf0ceb2b8a1960771628ed2732568be9c4e5eb7c8d32340a506f62750ea7069aea4b93b097936504345870d8a241ee4873f80a2ec84ea90fa2d14fa065e7d8eebd464776b2a4db382bb21900c90a1b649e75ac3a0baef24f4a4201d1627e3efe36241a30d8254c2badea73a4df86a0a1e547611e24cbfae0e1c913433350e72d4c23a8ede2a9488b8c49ebae29bf231d813697d8650dd55c9e15040e455af9a11d5d74da7e5367afb507f9f6540febd2e2c77465a2cadb7423d7588a678ef82722", 0xcb}], 0x2, 0x37e06dc5, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 12:39:12 executing program 0 (fault-call:11 fault-nth:28): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:12 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900, 0x8, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7047, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fchdir(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x2200, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc0248d0}, 0x4054) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0xdd) timerfd_settime(r1, 0x1, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, &(0x7f0000000300)) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x2, 0x2, 0xffff, 0x3e7, 0x7, 0x7e2b}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000000101080000000000130000070000000c001080482503a20001000008001540fffffffe080007400000001f0c001080080001400000000408000840ffffffff54000f8008000140008e9d2cc46d9aa16e575d3b0000050800014000000006080026b5d8ae12852e034020000000f5ff014000000b7d08000340000000020800014000008000080003400000000100000000000000010800034000000c3a087fc2c7455d6bb8bfc0f937969c366d4499fab23c62c121213e1fd5cbab96f9ce792be08b7b31dc18f42a15d1dd8fdf0d8c4d9a44234be2e7b8e84000"/239], 0xa0}}, 0x4081) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x13}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x26) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="94000e3d35fc1f6069b8789800001000ed9900"/30, @ANYRES32=0x0, @ANYBLOB="7ba2833c000000001800128008000100760100000c00e08008000500ac14140d0a000200000000000000000024002400177fd9ef8feb05e181f0467a0d9b171b0c82dc0a801da4d7b39cf531c5264add1000128008000100687372000400028008002c000180000014001400766c616e3000000000000000000000002349951d0348a0a5118f2d545575a4f682c90a3c1dddaab5609248080ef72df87209911190833d9fc1dd3bd1cf90658eb8031febf07c92b131d873c3f8483f5246a515407ebfe2b26b802a3ac5435ced64fb2271751b722d0d31aa86f547da1e9a2b927435a4713dbdc9f75d820c908f4949682ebf10c6356897800801316f71d6251806313497b2435298d6fa3aa1"], 0x94}}, 0x48000) [ 161.199895][ T6527] FAULT_INJECTION: forcing a failure. [ 161.199895][ T6527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.229482][ T6527] CPU: 0 PID: 6527 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 161.239537][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.249593][ T6527] Call Trace: [ 161.252875][ T6527] dump_stack+0x1b0/0x21e [ 161.257204][ T6527] ? devkmsg_release+0x11c/0x11c [ 161.262129][ T6527] ? show_regs_print_info+0x12/0x12 [ 161.267316][ T6527] ? kasan_alloc_pages+0x4a/0x60 [ 161.272269][ T6527] should_fail+0x6fb/0x860 [ 161.276677][ T6527] ? setup_fault_attr+0x2b0/0x2b0 [ 161.281696][ T6527] __alloc_pages_nodemask+0x1ee/0x7c0 [ 161.287063][ T6527] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 161.292630][ T6527] ? find_get_entry+0x5da/0x670 [ 161.297558][ T6527] ? xa_load+0x323/0x340 [ 161.301799][ T6527] __do_page_cache_readahead+0x244/0x510 [ 161.307425][ T6527] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 161.313833][ T6527] ? unwind_next_frame+0x1c07/0x22b0 [ 161.319106][ T6527] ? page_cache_sync_readahead+0xa3/0x3c0 [ 161.324816][ T6527] generic_file_read_iter+0x626/0x20a0 [ 161.330273][ T6527] ? find_get_pages_range_tag+0xae0/0xae0 [ 161.336013][ T6527] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 161.341553][ T6527] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 161.347616][ T6527] ? avc_denied+0x1c0/0x1c0 [ 161.352109][ T6527] generic_file_splice_read+0x491/0x780 [ 161.357650][ T6527] ? splice_shrink_spd+0xb0/0xb0 [ 161.362592][ T6527] ? security_file_permission+0x1e9/0x300 [ 161.368300][ T6527] ? splice_shrink_spd+0xb0/0xb0 [ 161.373230][ T6527] splice_direct_to_actor+0x3cf/0xb00 [ 161.378604][ T6527] ? do_splice_direct+0x3d0/0x3d0 [ 161.383617][ T6527] ? pipe_to_sendpage+0x300/0x300 [ 161.388637][ T6527] ? security_file_permission+0x128/0x300 [ 161.394348][ T6527] do_splice_direct+0x279/0x3d0 [ 161.399189][ T6527] ? splice_direct_to_actor+0xb00/0xb00 [ 161.404728][ T6527] ? security_file_permission+0x128/0x300 [ 161.410443][ T6527] do_sendfile+0x89d/0x1110 [ 161.414942][ T6527] ? compat_writev+0x390/0x390 [ 161.419732][ T6527] ? security_file_permission+0x128/0x300 [ 161.425441][ T6527] ? vfs_write+0x427/0x4f0 [ 161.429849][ T6527] ? fput_many+0x42/0x1a0 [ 161.434167][ T6527] __x64_sys_sendfile64+0x1ae/0x220 [ 161.439362][ T6527] ? __ia32_sys_sendfile+0x240/0x240 [ 161.444639][ T6527] do_syscall_64+0xcb/0x150 [ 161.449135][ T6527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 161.455015][ T6527] RIP: 0033:0x45de59 [ 161.458900][ T6527] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.478499][ T6527] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 161.486925][ T6527] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 12:39:12 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x4080f35d3f480b15, 0x1d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x2f042, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x1417c2, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000001c0)) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="c3", 0xfffffdef}], 0x1, 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffffffffffffc, 0x0) fallocate(r0, 0x11, 0x0, 0x4f010000) open(0x0, 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x7ff) creat(&(0x7f0000000100)='./bus\x00', 0xf5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file2\x00', r3}, 0x10) io_setup(0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="e722007f1f4c1f952354cf0ceb2b8a1960771628ed2732568be9c4e5eb7c8d32340a506f62750ea7069aea4b93b097936504345870d8a241ee4873f80a2ec84ea90fa2d14fa065e7d8eebd464776b2a4db382bb21900c90a1b649e75ac3a0baef24f4a4201d1627e3efe36241a30d8254c2badea73a4df86a0a1e547611e24cbfae0e1c913433350e72d4c23a8ede2a9488b8c49ebae29bf231d813697d8650dd55c9e15040e455af9a11d5d74da7e5367afb507f9f6540febd2e2c77465a2cadb7423d7588a678ef82722", 0xcb}], 0x2, 0x37e06dc5, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 12:39:12 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r0, 0xffffffffffffffff, 0x0) [ 161.494874][ T6527] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 161.502826][ T6527] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 161.510796][ T6527] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001c [ 161.518764][ T6527] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:12 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010000000000000000000a000000d966cea74bccb919b9e6cb9f490a45bd865d0c710f829409ddcc63d709d8550adb9a1ace1aadfcfc8f09d99e9c0dd0997ca356810beb638ef230b368700d71d3713231b7a093f167885e8be11e6c77436be43f9277dac70b08f21d5acab60cd079631dc3255334e1b3"], 0x14}}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000002c0)={0x20, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 12:39:12 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x2) read(r0, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r0, 0xffffffffffffffff, 0x0) [ 161.552341][ T5039] usb 5-1: invalid UAC_HEADER (v1) [ 161.557619][ T5039] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 161.568050][ T5039] usb 5-1: USB disconnect, device number 19 12:39:12 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:12 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:12 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 161.614083][ T6544] fuse: Bad value for 'user_id' [ 161.625224][ T6546] fuse: Bad value for 'user_id' 12:39:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:12 executing program 0 (fault-call:11 fault-nth:29): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 161.693619][ T6556] serio: Serial port pts5 12:39:12 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x8000000002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_io_uring_complete(0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x14c, 0x12) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000300001000000000000000000000000004c000100480001000800010069666500200006"], 0x60}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:39:12 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 161.727153][ T6560] FAULT_INJECTION: forcing a failure. [ 161.727153][ T6560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.752621][ T6560] CPU: 0 PID: 6560 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 161.762677][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.772708][ T6560] Call Trace: [ 161.775980][ T6560] dump_stack+0x1b0/0x21e [ 161.780288][ T6560] ? devkmsg_release+0x11c/0x11c [ 161.785204][ T6560] ? show_regs_print_info+0x12/0x12 [ 161.790379][ T6560] ? kasan_alloc_pages+0x4a/0x60 [ 161.795291][ T6560] should_fail+0x6fb/0x860 [ 161.799781][ T6560] ? setup_fault_attr+0x2b0/0x2b0 [ 161.804807][ T6560] __alloc_pages_nodemask+0x1ee/0x7c0 [ 161.810162][ T6560] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 161.815684][ T6560] ? find_get_entry+0x5da/0x670 [ 161.820510][ T6560] ? xa_load+0x323/0x340 [ 161.824740][ T6560] __do_page_cache_readahead+0x244/0x510 [ 161.830367][ T6560] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 161.836759][ T6560] ? unwind_next_frame+0x1c07/0x22b0 [ 161.842035][ T6560] ? page_cache_sync_readahead+0xa3/0x3c0 [ 161.847735][ T6560] generic_file_read_iter+0x626/0x20a0 [ 161.853176][ T6560] ? find_get_pages_range_tag+0xae0/0xae0 [ 161.858881][ T6560] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 161.864242][ T6560] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 161.870283][ T6560] ? avc_denied+0x1c0/0x1c0 [ 161.874764][ T6560] generic_file_splice_read+0x491/0x780 [ 161.880287][ T6560] ? splice_shrink_spd+0xb0/0xb0 [ 161.885201][ T6560] ? security_file_permission+0x1e9/0x300 [ 161.890893][ T6560] ? splice_shrink_spd+0xb0/0xb0 [ 161.895822][ T6560] splice_direct_to_actor+0x3cf/0xb00 [ 161.901169][ T6560] ? do_splice_direct+0x3d0/0x3d0 [ 161.906169][ T6560] ? pipe_to_sendpage+0x300/0x300 [ 161.911170][ T6560] ? security_file_permission+0x128/0x300 [ 161.916861][ T6560] do_splice_direct+0x279/0x3d0 [ 161.921688][ T6560] ? splice_direct_to_actor+0xb00/0xb00 [ 161.927213][ T6560] ? security_file_permission+0x128/0x300 [ 161.932906][ T6560] do_sendfile+0x89d/0x1110 [ 161.937386][ T6560] ? compat_writev+0x390/0x390 [ 161.942124][ T6560] ? security_file_permission+0x128/0x300 [ 161.947823][ T6560] ? vfs_write+0x427/0x4f0 [ 161.952215][ T6560] ? fput_many+0x42/0x1a0 [ 161.956521][ T6560] __x64_sys_sendfile64+0x1ae/0x220 [ 161.961696][ T6560] ? __ia32_sys_sendfile+0x240/0x240 [ 161.966959][ T6560] do_syscall_64+0xcb/0x150 [ 161.971441][ T6560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 161.977307][ T6560] RIP: 0033:0x45de59 [ 161.981210][ T6560] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 162.000790][ T6560] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.009175][ T6560] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 162.017121][ T6560] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 162.025072][ T6560] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 162.033019][ T6560] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001d [ 162.040972][ T6560] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 162.086728][ T6574] serio: Serial port pts3 12:39:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x4, 0x5}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x44, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f7365300000000000000000000000000000000000000000000000000000000000a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000004000000000000000000000000000000000000000000000000fdd2a833c988d119000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000001000000070009000000000000000000000000000f0ffffff0000000020004e4f545241434b0002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000009b00000000000000feffffff"], 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e37, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 12:39:13 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp], 0x1) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x64, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) recvfrom$inet6(r1, &(0x7f0000000280)=""/119, 0x77, 0x10164, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 12:39:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:13 executing program 0 (fault-call:11 fault-nth:30): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 162.290291][ T6583] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.304363][ T6585] FAULT_INJECTION: forcing a failure. [ 162.304363][ T6585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.332266][ T6585] CPU: 1 PID: 6585 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 162.342323][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.352363][ T6585] Call Trace: [ 162.355646][ T6585] dump_stack+0x1b0/0x21e [ 162.358472][ T6591] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 162.359962][ T6585] ? devkmsg_release+0x11c/0x11c [ 162.359972][ T6585] ? show_regs_print_info+0x12/0x12 [ 162.359990][ T6585] ? kasan_alloc_pages+0x4a/0x60 [ 162.384439][ T6585] should_fail+0x6fb/0x860 [ 162.388842][ T6585] ? setup_fault_attr+0x2b0/0x2b0 [ 162.393861][ T6585] __alloc_pages_nodemask+0x1ee/0x7c0 [ 162.399225][ T6585] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 162.404757][ T6585] ? find_get_entry+0x5da/0x670 [ 162.409598][ T6585] ? xa_load+0x323/0x340 [ 162.413828][ T6585] __do_page_cache_readahead+0x244/0x510 [ 162.419448][ T6585] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 162.425859][ T6585] ? unwind_next_frame+0x1c07/0x22b0 [ 162.431136][ T6585] ? page_cache_sync_readahead+0xa3/0x3c0 [ 162.436861][ T6585] generic_file_read_iter+0x626/0x20a0 [ 162.442307][ T6585] ? find_get_pages_range_tag+0xae0/0xae0 [ 162.448012][ T6585] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 162.453372][ T6585] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.459426][ T6585] ? avc_denied+0x1c0/0x1c0 [ 162.463918][ T6585] generic_file_splice_read+0x491/0x780 [ 162.469449][ T6585] ? splice_shrink_spd+0xb0/0xb0 [ 162.474367][ T6585] ? security_file_permission+0x1e9/0x300 [ 162.480057][ T6585] ? splice_shrink_spd+0xb0/0xb0 [ 162.484969][ T6585] splice_direct_to_actor+0x3cf/0xb00 [ 162.490313][ T6585] ? do_splice_direct+0x3d0/0x3d0 [ 162.495309][ T6585] ? pipe_to_sendpage+0x300/0x300 [ 162.500305][ T6585] ? security_file_permission+0x128/0x300 [ 162.505997][ T6585] do_splice_direct+0x279/0x3d0 [ 162.510831][ T6585] ? splice_direct_to_actor+0xb00/0xb00 [ 162.516350][ T6585] ? security_file_permission+0x128/0x300 [ 162.522039][ T6585] do_sendfile+0x89d/0x1110 [ 162.526517][ T6585] ? compat_writev+0x390/0x390 [ 162.531252][ T6585] ? security_file_permission+0x128/0x300 [ 162.536946][ T6585] ? vfs_write+0x427/0x4f0 [ 162.541333][ T6585] ? fput_many+0x42/0x1a0 [ 162.545639][ T6585] __x64_sys_sendfile64+0x1ae/0x220 [ 162.550809][ T6585] ? __ia32_sys_sendfile+0x240/0x240 [ 162.556078][ T6585] do_syscall_64+0xcb/0x150 [ 162.560556][ T6585] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.566427][ T6585] RIP: 0033:0x45de59 [ 162.570297][ T6585] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:39:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x8, 0xffffffffffffffff}, {}, {0x2, 0x3, r1}, {0x2, 0x6, r2}], {0x4, 0x3}, [{0x8, 0x0, r4}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r8, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r5, 0x0, r7, 0x0, 0x8900000, 0x0) 12:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:13 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xfffffffb, 0x3, 0x18, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{0x0, 0x7, 0xfffffffffffffffe, 0x66, 0x8, 0x0, 0x0, 0x10001, 0x1, 0x3, 0x6, 0x5, 0x100, 0x991, 0x9}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getuid() sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10000}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000405e04dc00faa13d9fa140000102030009022400010100000009040000000301000009210000000122400009a84d0300000000009ba7590fb6"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) [ 162.589889][ T6585] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 162.598272][ T6585] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 162.606214][ T6585] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 162.614157][ T6585] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 162.622103][ T6585] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001e [ 162.630047][ T6585] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:13 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:13 executing program 0 (fault-call:11 fault-nth:31): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 162.757058][ T6610] FAULT_INJECTION: forcing a failure. [ 162.757058][ T6610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.770571][ T6610] CPU: 1 PID: 6610 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 162.780615][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.790646][ T6610] Call Trace: [ 162.793906][ T6610] dump_stack+0x1b0/0x21e [ 162.798230][ T6610] ? devkmsg_release+0x11c/0x11c [ 162.803164][ T6610] ? show_regs_print_info+0x12/0x12 [ 162.808334][ T6610] ? kasan_alloc_pages+0x4a/0x60 [ 162.813249][ T6610] should_fail+0x6fb/0x860 [ 162.817632][ T6610] ? setup_fault_attr+0x2b0/0x2b0 [ 162.822624][ T6610] __alloc_pages_nodemask+0x1ee/0x7c0 [ 162.827980][ T6610] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 162.833492][ T6610] ? find_get_entry+0x5da/0x670 [ 162.838307][ T6610] ? xa_load+0x323/0x340 [ 162.842518][ T6610] __do_page_cache_readahead+0x244/0x510 [ 162.848117][ T6610] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 162.854536][ T6610] ? unwind_next_frame+0x1c07/0x22b0 [ 162.859788][ T6610] ? page_cache_sync_readahead+0xa3/0x3c0 [ 162.865487][ T6610] generic_file_read_iter+0x626/0x20a0 [ 162.870913][ T6610] ? find_get_pages_range_tag+0xae0/0xae0 [ 162.876614][ T6610] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 162.884114][ T6610] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.890150][ T6610] ? avc_denied+0x1c0/0x1c0 [ 162.894657][ T6610] generic_file_splice_read+0x491/0x780 [ 162.900200][ T6610] ? splice_shrink_spd+0xb0/0xb0 [ 162.905108][ T6610] ? security_file_permission+0x1e9/0x300 [ 162.910833][ T6610] ? splice_shrink_spd+0xb0/0xb0 [ 162.915759][ T6610] splice_direct_to_actor+0x3cf/0xb00 [ 162.921097][ T6610] ? do_splice_direct+0x3d0/0x3d0 [ 162.926085][ T6610] ? pipe_to_sendpage+0x300/0x300 [ 162.931099][ T6610] ? security_file_permission+0x128/0x300 [ 162.936782][ T6610] do_splice_direct+0x279/0x3d0 [ 162.941597][ T6610] ? splice_direct_to_actor+0xb00/0xb00 [ 162.947109][ T6610] ? security_file_permission+0x128/0x300 [ 162.952793][ T6610] do_sendfile+0x89d/0x1110 [ 162.957266][ T6610] ? compat_writev+0x390/0x390 [ 162.961998][ T6610] ? security_file_permission+0x128/0x300 [ 162.967685][ T6610] ? vfs_write+0x427/0x4f0 [ 162.972066][ T6610] ? fput_many+0x42/0x1a0 [ 162.976362][ T6610] __x64_sys_sendfile64+0x1ae/0x220 [ 162.981524][ T6610] ? __ia32_sys_sendfile+0x240/0x240 [ 162.986773][ T6610] do_syscall_64+0xcb/0x150 [ 162.991264][ T6610] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 162.997138][ T6610] RIP: 0033:0x45de59 [ 163.001006][ T6610] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.020590][ T6610] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 163.028980][ T6610] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 163.036924][ T6610] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 163.044868][ T6610] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 12:39:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_REMOTE={0x8, 0xa, @multicast1}]}}}]}, 0x40}}, 0x0) 12:39:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:14 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) [ 163.052821][ T6610] R10: 0000000000200fff R11: 0000000000000246 R12: 000000000000001f [ 163.060763][ T6610] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 163.088476][ T6614] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 12:39:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:14 executing program 4: unshare(0x40000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x3, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) 12:39:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 163.102021][ T6617] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 12:39:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEXC(0xc, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454da, 0x400014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)) 12:39:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 163.232260][ T3536] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 163.632275][ T3536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.639947][ T3536] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 163.762274][ T3536] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 163.769855][ T3536] usb 6-1: can't read configurations, error -61 [ 163.922276][ T3536] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 164.332301][ T3536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.339974][ T3536] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 164.472347][ T3536] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 164.479940][ T3536] usb 6-1: can't read configurations, error -61 [ 164.486873][ T3536] usb usb6-port1: attempt power cycle [ 165.212254][ T3536] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 165.462309][ T3536] usb 6-1: unable to get BOS descriptor or descriptor too short [ 165.469989][ T3536] usb 6-1: too many configurations: 64, using maximum allowed: 8 [ 165.592300][ T3536] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 165.599876][ T3536] usb 6-1: can't read configurations, error -61 12:39:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6(0xa, 0xa, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x20, 0x0, "91cbec76dfb6ad392d8585653f24892e9a9b524be38d91255da36fcfe50c0be94269b602237628be3e95456a70342792e808a1a44f993e3e0d4eff4259e10c8d45d6531ef0fc8485c2367c6db69f6d85"}, 0xd8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0), 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7335f27f6e9d4106e4e4c53b7c74ca954e0293f6ba7ad88f64bd"], 0x1f) r5 = open(&(0x7f0000002000)='./bus\x00', 0x43, 0x93) ftruncate(r5, 0x2007fff) sendfile(r4, r4, &(0x7f00000001c0), 0x570ccbb7) r6 = socket(0x2, 0x803, 0xff) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0xfffffffffffffffe, 0x7ff}}, 0x30) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x79, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000200)=""/121}, &(0x7f0000000080)=0x78) r8 = open(&(0x7f0000000440)='./bus\x00', 0x20000, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) 12:39:16 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) statx(r0, &(0x7f0000000080)='./bus/file0\x00', 0x1000, 0x100, &(0x7f0000000440)) removexattr(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000300)=@random={'os2.', 'overlay\x00'}) 12:39:16 executing program 0 (fault-call:11 fault-nth:32): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:16 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r1, 0x2008002) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) [ 165.685707][ T6642] FAULT_INJECTION: forcing a failure. [ 165.685707][ T6642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.699459][ T6644] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.708216][ T6642] CPU: 1 PID: 6642 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 165.723776][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.729822][ T6644] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.733836][ T6642] Call Trace: [ 165.733851][ T6642] dump_stack+0x1b0/0x21e [ 165.733861][ T6642] ? devkmsg_release+0x11c/0x11c [ 165.733868][ T6642] ? show_regs_print_info+0x12/0x12 [ 165.733876][ T6642] ? kasan_alloc_pages+0x4a/0x60 [ 165.733890][ T6642] should_fail+0x6fb/0x860 [ 165.774922][ T6642] ? setup_fault_attr+0x2b0/0x2b0 [ 165.779934][ T6642] __alloc_pages_nodemask+0x1ee/0x7c0 [ 165.785383][ T6642] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 165.790921][ T6642] ? find_get_entry+0x5da/0x670 [ 165.795763][ T6642] ? xa_load+0x323/0x340 [ 165.799994][ T6642] __do_page_cache_readahead+0x244/0x510 [ 165.805701][ T6642] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 165.812111][ T6642] ? unwind_next_frame+0x1c07/0x22b0 [ 165.817381][ T6642] ? page_cache_sync_readahead+0xa3/0x3c0 [ 165.823087][ T6642] generic_file_read_iter+0x626/0x20a0 [ 165.828540][ T6642] ? find_get_pages_range_tag+0xae0/0xae0 [ 165.834241][ T6642] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 165.839594][ T6642] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 165.845644][ T6642] ? avc_denied+0x1c0/0x1c0 [ 165.850131][ T6642] generic_file_splice_read+0x491/0x780 [ 165.855661][ T6642] ? splice_shrink_spd+0xb0/0xb0 [ 165.860588][ T6642] ? security_file_permission+0x1e9/0x300 [ 165.866294][ T6642] ? splice_shrink_spd+0xb0/0xb0 [ 165.871213][ T6642] splice_direct_to_actor+0x3cf/0xb00 [ 165.876569][ T6642] ? do_splice_direct+0x3d0/0x3d0 [ 165.881573][ T6642] ? pipe_to_sendpage+0x300/0x300 [ 165.886580][ T6642] ? security_file_permission+0x128/0x300 [ 165.892282][ T6642] do_splice_direct+0x279/0x3d0 [ 165.897140][ T6642] ? splice_direct_to_actor+0xb00/0xb00 [ 165.902693][ T6642] ? security_file_permission+0x128/0x300 [ 165.908396][ T6642] do_sendfile+0x89d/0x1110 [ 165.912884][ T6642] ? compat_writev+0x390/0x390 [ 165.917633][ T6642] ? security_file_permission+0x128/0x300 [ 165.923335][ T6642] ? vfs_write+0x427/0x4f0 [ 165.927737][ T6642] ? fput_many+0x42/0x1a0 [ 165.932050][ T6642] __x64_sys_sendfile64+0x1ae/0x220 [ 165.937233][ T6642] ? __ia32_sys_sendfile+0x240/0x240 [ 165.942502][ T6642] do_syscall_64+0xcb/0x150 [ 165.946986][ T6642] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 165.952858][ T6642] RIP: 0033:0x45de59 [ 165.956735][ T6642] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.976324][ T6642] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 12:39:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100008000000000000000002e7f4839b6abf3d4afd85f57d1ffdf71519d1669029c9b"], &(0x7f0000000140)='GPL\x00', 0x2b6d1aaa, 0x1000, &(0x7f0000000880)=""/4096, 0x41000, 0x6, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x2, 0xffffffff, 0xffffffff}, 0x10, 0xffffffffffffffff}, 0x78) write$binfmt_script(r5, &(0x7f0000000580)=ANY=[@ANYRES32], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r4) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0xb) 12:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:17 executing program 5: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000070000000000000005000000480300005001000008020000500100000802d00008020000b0020000b0020000b0020000b0020000b0020000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800534e415400000000000000000000000000040000000000000000000000000100000000000000ac1414bbe0eeff020000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000022000000000000000000000000000000000000000000000000000000000000090000000000000000000000007000a800000000000000000000000000000000000000ee0038004e45544d41500000000000000000000000000000000000090000000000000000000003000000e0000002ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800444e41540000000000000000000000000000fdffffffffffffff0000000100000000fe8000000000000000000000000000aaac1414aadeff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a51b000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000003800444e415400000000400000000000000000000000000000000000000000000f00000000000000e0000001ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fe"], 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x9}, 0x8) [ 165.984807][ T6642] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 165.992764][ T6642] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 166.000721][ T6642] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 166.008695][ T6642] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000020 [ 166.016651][ T6642] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='overlay\x00', 0x204004, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@default_permissions='default_permissions'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}, {@xino_auto='xino=auto'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}, {@xino_off='xino=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ramfs\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xfff, 0xffffffff, 0x3}) read$char_usb(r1, &(0x7f0000000380)=""/224, 0xe0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x500a4000, 0x0, 0x0, 0x0, 0x0) 12:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:17 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x200, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) fchmod(r3, 0x80) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 12:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:17 executing program 0 (fault-call:11 fault-nth:33): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:17 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x80000079d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="04000509000000005d617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3a) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffff8) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000180)={0x0, 0xf8, &(0x7f0000000400)="00483c2803cf16acc54baca5fccef7877ef51a5e978c97798a80f1310f61ac40f3b5ffd9844d1abd53690fa8fd86c5c1ad717bd65b55f5ae1b04110d1116b900055b9e46d51788f0eceada1d3583006e3260448fd5996ac7fc363aa4adc535eb81f5a2fe2b8ac6ab0f31d4fdb13df646eabbd5604350e56b18361d8ef8e7f2af798952730ae6929dad03a75bdf555ecb599fd72418d44c057b44ff37f1bc36ba932509cbe8d084f730c5e5b4c3324eef47d245ca4765bf02759e0c2f53f755630e4621addf2f576aa21dc29fd6b3d218d9374be9594a4712961424e49fae7e8e72b6ed015c4d0a1c446dad89594f3a77c408549c3a7c3d6c"}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) [ 166.215034][ T6683] FAULT_INJECTION: forcing a failure. [ 166.215034][ T6683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.232077][ T6683] CPU: 1 PID: 6683 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 166.242141][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.252178][ T6683] Call Trace: [ 166.255457][ T6683] dump_stack+0x1b0/0x21e [ 166.259774][ T6683] ? devkmsg_release+0x11c/0x11c [ 166.264700][ T6683] ? show_regs_print_info+0x12/0x12 [ 166.269887][ T6683] ? kasan_alloc_pages+0x4a/0x60 [ 166.274815][ T6683] should_fail+0x6fb/0x860 [ 166.279217][ T6683] ? setup_fault_attr+0x2b0/0x2b0 [ 166.284234][ T6683] __alloc_pages_nodemask+0x1ee/0x7c0 [ 166.289597][ T6683] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 166.295129][ T6683] ? find_get_entry+0x5da/0x670 [ 166.299965][ T6683] ? xa_load+0x323/0x340 [ 166.304193][ T6683] __do_page_cache_readahead+0x244/0x510 [ 166.309825][ T6683] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 166.316367][ T6683] ? unwind_next_frame+0x1c07/0x22b0 [ 166.321625][ T6683] ? page_cache_sync_readahead+0xa3/0x3c0 [ 166.327348][ T6683] generic_file_read_iter+0x626/0x20a0 [ 166.332783][ T6683] ? find_get_pages_range_tag+0xae0/0xae0 [ 166.338470][ T6683] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 166.343809][ T6683] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 166.349844][ T6683] ? avc_denied+0x1c0/0x1c0 [ 166.354350][ T6683] generic_file_splice_read+0x491/0x780 [ 166.359864][ T6683] ? splice_shrink_spd+0xb0/0xb0 [ 166.364772][ T6683] ? security_file_permission+0x1e9/0x300 [ 166.370457][ T6683] ? splice_shrink_spd+0xb0/0xb0 [ 166.375393][ T6683] splice_direct_to_actor+0x3cf/0xb00 [ 166.380759][ T6683] ? do_splice_direct+0x3d0/0x3d0 [ 166.385962][ T6683] ? pipe_to_sendpage+0x300/0x300 [ 166.390965][ T6683] ? security_file_permission+0x128/0x300 [ 166.396691][ T6683] do_splice_direct+0x279/0x3d0 [ 166.401595][ T6683] ? splice_direct_to_actor+0xb00/0xb00 [ 166.407114][ T6683] ? security_file_permission+0x128/0x300 [ 166.412800][ T6683] do_sendfile+0x89d/0x1110 [ 166.417271][ T6683] ? compat_writev+0x390/0x390 [ 166.422003][ T6683] ? security_file_permission+0x128/0x300 [ 166.427690][ T6683] ? vfs_write+0x427/0x4f0 [ 166.432074][ T6683] ? fput_many+0x42/0x1a0 [ 166.436374][ T6683] __x64_sys_sendfile64+0x1ae/0x220 [ 166.441541][ T6683] ? __ia32_sys_sendfile+0x240/0x240 [ 166.446794][ T6683] do_syscall_64+0xcb/0x150 [ 166.451267][ T6683] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 166.457124][ T6683] RIP: 0033:0x45de59 [ 166.460987][ T6683] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.480573][ T6683] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.488951][ T6683] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 166.496901][ T6683] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 166.504853][ T6683] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 166.512793][ T6683] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000021 [ 166.520733][ T6683] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:17 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 12:39:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14ffffff1300"/20], 0x14}}, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) signalfd4(r3, &(0x7f0000000180)={[0x1]}, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400202201000a000000000000000000000000004201000000000000000100000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b134087805213163b96604b9aa061d074af10167af3f65e366478a9e00000000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf250b0000001c0003800800030000000000080003000900000008000100400000002400038008000200ff000000080003000700000008000300ff7f000008000300008000002c000980080002004000000008000200070000000800010000080000080001008000000008000200ff01000014000980080001000900000008000100f9ffffff2c00078008000200010000800c000400e885126b000000000c000400090000000000000008000200020000001c00098008000100090000000800010003000000080002003f0200001c000680040002000800010007000000080001000700000004000200"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000810}, 0x24040000) 12:39:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:17 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092509b86807000aab087a02000000b8481093210001", 0x1f) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x400, 0xfffffffb, 0x7, 0xf9, 0x1f}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d", 0x5) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket(0x10, 0x800000000080003, 0x0) splice(r2, 0x0, r4, 0x0, 0x24ffd8, 0xa) 12:39:17 executing program 4: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffc28}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) ptrace$getenv(0x4201, r2, 0x101, &(0x7f0000000080)) getpid() 12:39:17 executing program 0 (fault-call:11 fault-nth:34): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:17 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) [ 166.624148][ T6701] tipc: Enabling of bearer rejected, already enabled [ 166.624401][ T6697] FAULT_INJECTION: forcing a failure. [ 166.624401][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 166.645698][ T6701] tipc: Enabling of bearer rejected, already enabled [ 166.663896][ T6697] CPU: 1 PID: 6697 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 166.673948][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.683992][ T6697] Call Trace: [ 166.687267][ T6697] dump_stack+0x1b0/0x21e [ 166.691573][ T6697] ? devkmsg_release+0x11c/0x11c [ 166.696491][ T6697] ? memset+0x1f/0x40 [ 166.700452][ T6697] ? show_regs_print_info+0x12/0x12 [ 166.705626][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.710892][ T6697] should_fail+0x6fb/0x860 [ 166.715287][ T6697] ? setup_fault_attr+0x2b0/0x2b0 [ 166.720305][ T6697] ? memset+0x1f/0x40 [ 166.724265][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.729538][ T6697] ? kcalloc+0x2b/0x50 [ 166.733586][ T6697] should_failslab+0x5/0x20 [ 166.738066][ T6697] __kmalloc+0x5f/0x2c0 [ 166.742202][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.747484][ T6697] kcalloc+0x2b/0x50 [ 166.751373][ T6697] ext4_find_extent+0x2bb/0xce0 [ 166.756221][ T6697] ? arch_stack_walk+0x78/0xe0 [ 166.760960][ T6697] ext4_ext_map_blocks+0x344/0x4650 [ 166.766136][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.771399][ T6697] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 166.777442][ T6697] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 166.782964][ T6697] ? ext4_ext_release+0x10/0x10 [ 166.787787][ T6697] ? _raw_spin_lock_irq+0xa2/0x180 [ 166.792888][ T6697] ? mem_cgroup_try_charge_delay+0x10/0x10 [ 166.798671][ T6697] ? xas_nomem+0x177/0x1b0 [ 166.803073][ T6697] ? __down_read+0xf1/0x210 [ 166.807581][ T6697] ? percpu_counter_add_batch+0x12d/0x150 [ 166.813287][ T6697] ? __init_rwsem+0x120/0x120 [ 166.817965][ T6697] ? _raw_read_unlock+0xe/0x30 [ 166.822709][ T6697] ? ext4_es_lookup_extent+0x415/0x900 [ 166.828146][ T6697] ext4_map_blocks+0x480/0x1e30 [ 166.832977][ T6697] ? __lru_cache_add+0x1a1/0x1f0 [ 166.837891][ T6697] ? ext4_issue_zeroout+0x160/0x160 [ 166.843067][ T6697] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 166.848954][ T6697] ? memset+0x1f/0x40 [ 166.852931][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.858193][ T6697] ext4_mpage_readpages+0x8f4/0x1eb0 [ 166.863459][ T6697] ? ext4_end_bio+0x590/0x590 [ 166.868112][ T6697] ? prep_new_page+0x11a/0x380 [ 166.872870][ T6697] ? ext4_readpages+0x8b/0x110 [ 166.877694][ T6697] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 166.883754][ T6697] read_pages+0x108/0x3f0 [ 166.888065][ T6697] ? __do_page_cache_readahead+0x510/0x510 [ 166.893853][ T6697] ? find_get_entry+0x5da/0x670 [ 166.898679][ T6697] ? xa_load+0x323/0x340 [ 166.902920][ T6697] __do_page_cache_readahead+0x470/0x510 [ 166.908550][ T6697] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 166.914944][ T6697] ? unwind_next_frame+0x1c07/0x22b0 [ 166.920204][ T6697] ? page_cache_sync_readahead+0xa3/0x3c0 [ 166.925900][ T6697] generic_file_read_iter+0x626/0x20a0 [ 166.931339][ T6697] ? find_get_pages_range_tag+0xae0/0xae0 [ 166.937034][ T6697] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 166.942383][ T6697] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 166.948429][ T6697] ? avc_denied+0x1c0/0x1c0 [ 166.952907][ T6697] generic_file_splice_read+0x491/0x780 [ 166.958433][ T6697] ? splice_shrink_spd+0xb0/0xb0 [ 166.963351][ T6697] ? security_file_permission+0x1e9/0x300 [ 166.969046][ T6697] ? splice_shrink_spd+0xb0/0xb0 [ 166.973961][ T6697] splice_direct_to_actor+0x3cf/0xb00 [ 166.979310][ T6697] ? do_splice_direct+0x3d0/0x3d0 [ 166.984308][ T6697] ? pipe_to_sendpage+0x300/0x300 [ 166.989312][ T6697] ? security_file_permission+0x128/0x300 [ 166.995007][ T6697] do_splice_direct+0x279/0x3d0 [ 166.999834][ T6697] ? splice_direct_to_actor+0xb00/0xb00 [ 167.005357][ T6697] ? security_file_permission+0x128/0x300 [ 167.011053][ T6697] do_sendfile+0x89d/0x1110 [ 167.015541][ T6697] ? compat_writev+0x390/0x390 [ 167.020283][ T6697] ? security_file_permission+0x128/0x300 [ 167.025984][ T6697] ? vfs_write+0x427/0x4f0 [ 167.030383][ T6697] ? fput_many+0x42/0x1a0 [ 167.034692][ T6697] __x64_sys_sendfile64+0x1ae/0x220 [ 167.040041][ T6697] ? __ia32_sys_sendfile+0x240/0x240 [ 167.045320][ T6697] do_syscall_64+0xcb/0x150 [ 167.049803][ T6697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.055673][ T6697] RIP: 0033:0x45de59 [ 167.059548][ T6697] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.079131][ T6697] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 167.087520][ T6697] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 167.095474][ T6697] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 167.103421][ T6697] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 167.111369][ T6697] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000022 12:39:18 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'xfrm0\x00', {0x2, 0x0, @private}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xe0, 0x63, 0xe7, 0x8, 0x19b5, 0x21, 0x617b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0x0, 0x0, 0x34, 0x57, 0x67}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) [ 167.119324][ T6697] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 167.150659][ T6704] serio: Serial port pts2 12:39:18 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001300210200"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000100000000000401e48d7ce5ddfc2e8d8026fc36d120d29a05f2be9427750c32a1be25d717dbfbf711c8769a9fac4b0c05f27aea21c9ac405c20f3929fc3e7f800a9909a0525b77c0aa525c002dff429341b06d961039a4ed996c5df49e5c17fc7c7afc96215497e9f01e441dbe8d732596f"], 0x54}}, 0x0) 12:39:18 executing program 0 (fault-call:11 fault-nth:35): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:18 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) [ 167.228531][ T6722] FAULT_INJECTION: forcing a failure. [ 167.228531][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 167.241259][ T6722] CPU: 0 PID: 6722 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 167.251303][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.261345][ T6722] Call Trace: [ 167.264629][ T6722] dump_stack+0x1b0/0x21e [ 167.268951][ T6722] ? devkmsg_release+0x11c/0x11c 12:39:18 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004380)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0xb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x24048004) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000004400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf250300000014000900fe8000000000000000000000000000aa050003003b00000006000a004e24000008000800ac1414aa08000800ac1e010106000a004e2100000400050008000b00", @ANYRES32=0x0, @ANYBLOB="743f4f8ab425526724137c986656fbff2d17590d025394978353482e0bd5ccb72c3b91f02370e7426620fb0bc8e91b"], 0x5c}, 0x1, 0x0, 0x0, 0x4000844}, 0x90) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000004280)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002040)={&(0x7f0000002140)={0x48, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r5, 0x401870cc, 0x11a0000) [ 167.273910][ T6722] ? show_regs_print_info+0x12/0x12 [ 167.279102][ T6722] ? __es_remove_extent+0xbf7/0x2290 [ 167.284382][ T6722] ? unwind_get_return_address_ptr+0x130/0x130 [ 167.290531][ T6722] should_fail+0x6fb/0x860 [ 167.290689][ T6724] serio: Serial port pts2 [ 167.294934][ T6722] ? setup_fault_attr+0x2b0/0x2b0 [ 167.294944][ T6722] ? __kasan_kmalloc+0x117/0x1b0 [ 167.294952][ T6722] ? __kmalloc+0xf7/0x2c0 [ 167.294961][ T6722] ? kcalloc+0x2b/0x50 [ 167.294969][ T6722] ? ext4_find_extent+0x2bb/0xce0 [ 167.294980][ T6722] ? ext4_mpage_readpages+0x8f4/0x1eb0 12:39:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 167.294995][ T6722] ? read_pages+0x108/0x3f0 [ 167.332639][ T6722] ? __do_page_cache_readahead+0x470/0x510 [ 167.338431][ T6722] ? generic_file_read_iter+0x626/0x20a0 [ 167.344063][ T6722] ? __es_insert_extent+0x7a4/0x1770 [ 167.349375][ T6722] should_failslab+0x5/0x20 [ 167.353863][ T6722] kmem_cache_alloc+0x36/0x250 [ 167.358617][ T6722] ? unwind_get_return_address_ptr+0x130/0x130 [ 167.364802][ T6722] __es_insert_extent+0x7a4/0x1770 [ 167.369894][ T6722] ? _raw_write_lock+0xa1/0x170 12:39:18 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') exit(0xf325) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'wm\x00'}, 0x9) dup2(r1, r0) [ 167.374721][ T6722] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.380796][ T6722] ? should_fail+0x182/0x860 [ 167.385374][ T6722] ext4_es_insert_extent+0x42b/0x2f40 [ 167.390743][ T6722] ? ext4_es_scan_clu+0x270/0x270 [ 167.395745][ T6722] ? __es_find_extent_range+0x275/0x620 [ 167.401276][ T6722] ? ext4_ext_convert_to_initialized+0x1d70/0x1d70 [ 167.407817][ T6722] ? ext4_ext_convert_to_initialized+0x1d70/0x1d70 [ 167.414306][ T6722] ? ext4_es_find_extent_range+0x1a7/0x300 [ 167.420105][ T6722] ext4_ext_map_blocks+0x164b/0x4650 12:39:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() get_robust_list(0x0, &(0x7f0000000400)=&(0x7f0000000380)={&(0x7f0000000200)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)}, &(0x7f0000000440)=0x18) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000780)=""/136, 0x88}, 0x3}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f0000000940)=""/127, 0x7f}, {0x0}], 0x5}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/187, 0xbb}}], 0x3, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8885, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8) ioctl$TIOCSBRK(r2, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000006c0)=""/153}, 0x20) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x8000) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xfffffffe, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) [ 167.425380][ T6722] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 167.431435][ T6722] ? ext4_ext_release+0x10/0x10 [ 167.436277][ T6722] ? _raw_spin_lock_irq+0xa2/0x180 [ 167.445144][ T6722] ? mem_cgroup_try_charge_delay+0x10/0x10 [ 167.450943][ T6722] ? xas_nomem+0x177/0x1b0 [ 167.455350][ T6722] ? __down_read+0xf1/0x210 [ 167.459845][ T6722] ? percpu_counter_add_batch+0x12d/0x150 [ 167.465707][ T6722] ? __init_rwsem+0x120/0x120 [ 167.470374][ T6722] ? _raw_read_unlock+0xe/0x30 12:39:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 167.475819][ T6722] ? ext4_es_lookup_extent+0x415/0x900 [ 167.481259][ T6722] ext4_map_blocks+0x480/0x1e30 [ 167.486103][ T6722] ? __lru_cache_add+0x1a1/0x1f0 [ 167.491012][ T6722] ? ext4_issue_zeroout+0x160/0x160 [ 167.496182][ T6722] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 167.502045][ T6722] ? memset+0x1f/0x40 [ 167.506031][ T6722] ? unwind_next_frame+0x1c07/0x22b0 [ 167.511304][ T6722] ext4_mpage_readpages+0x8f4/0x1eb0 [ 167.516589][ T6722] ? ext4_end_bio+0x590/0x590 [ 167.521250][ T6722] ? prep_new_page+0x11a/0x380 12:39:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 167.525986][ T6722] ? ext4_readpages+0x8b/0x110 [ 167.530787][ T6722] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 167.536830][ T6722] read_pages+0x108/0x3f0 [ 167.541141][ T6722] ? __do_page_cache_readahead+0x510/0x510 [ 167.546959][ T6722] ? find_get_entry+0x5da/0x670 [ 167.551789][ T6722] ? xa_load+0x323/0x340 [ 167.556003][ T6722] __do_page_cache_readahead+0x470/0x510 [ 167.561608][ T6722] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 167.568003][ T6722] ? unwind_next_frame+0x1c07/0x22b0 [ 167.573281][ T6722] ? page_cache_sync_readahead+0xa3/0x3c0 [ 167.578984][ T6722] generic_file_read_iter+0x626/0x20a0 [ 167.584419][ T6722] ? find_get_pages_range_tag+0xae0/0xae0 [ 167.590115][ T6722] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 167.595524][ T6722] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.601594][ T6722] ? avc_denied+0x1c0/0x1c0 [ 167.606095][ T6722] generic_file_splice_read+0x491/0x780 [ 167.611624][ T6722] ? splice_shrink_spd+0xb0/0xb0 [ 167.616554][ T6722] ? security_file_permission+0x1e9/0x300 [ 167.622248][ T6722] ? splice_shrink_spd+0xb0/0xb0 [ 167.627165][ T6722] splice_direct_to_actor+0x3cf/0xb00 [ 167.632524][ T6722] ? do_splice_direct+0x3d0/0x3d0 [ 167.637540][ T6722] ? pipe_to_sendpage+0x300/0x300 [ 167.642280][ T3536] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 167.642558][ T6722] ? security_file_permission+0x128/0x300 [ 167.655768][ T6722] do_splice_direct+0x279/0x3d0 [ 167.660609][ T6722] ? splice_direct_to_actor+0xb00/0xb00 [ 167.666145][ T6722] ? security_file_permission+0x128/0x300 [ 167.671845][ T6722] do_sendfile+0x89d/0x1110 [ 167.676324][ T6722] ? compat_writev+0x390/0x390 [ 167.681061][ T6722] ? security_file_permission+0x128/0x300 [ 167.686760][ T6722] ? vfs_write+0x427/0x4f0 [ 167.691196][ T6722] ? fput_many+0x42/0x1a0 [ 167.695506][ T6722] __x64_sys_sendfile64+0x1ae/0x220 [ 167.700683][ T6722] ? __ia32_sys_sendfile+0x240/0x240 [ 167.705938][ T6722] do_syscall_64+0xcb/0x150 [ 167.710415][ T6722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 167.716276][ T6722] RIP: 0033:0x45de59 [ 167.720158][ T6722] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.732299][ T3536] usb 6-1: Using ep0 maxpacket: 8 [ 167.739736][ T6722] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 167.739746][ T6722] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 167.739751][ T6722] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 167.739756][ T6722] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 167.739760][ T6722] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000023 [ 167.739765][ T6722] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 167.912888][ T3536] usb 6-1: config 0 has an invalid interface number: 145 but max is 1 [ 167.921109][ T3536] usb 6-1: config 0 has no interface number 1 [ 168.082311][ T3536] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=61.7b [ 168.091406][ T3536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.100101][ T3536] usb 6-1: Product: syz [ 168.104710][ T3536] usb 6-1: Manufacturer: syz [ 168.109325][ T3536] usb 6-1: SerialNumber: syz [ 168.115886][ T3536] usb 6-1: config 0 descriptor?? [ 168.455054][ T3536] usb 6-1: USB disconnect, device number 27 12:39:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400100008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x4000000}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2105c0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nfs_export=off,uid>', @ANYRESDEC, @ANYBLOB="2c646f6e745f61707072616973652c646f6e745f61707072616973062c726f6f74636f6e746578743d73746166665f752c657569643e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xc338}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d9f68693a558aee7506ccba95eda5b3487b0d94d2d7f51215612d152ab6b118e7500f05799fd84322f98f7fd76c6d4bf56df78a274b117c35714ccdfd1199ca0fb30e41291fd3992a1c27d871441a3e450e97acd546a9860079e3924b763c32d0edbeed5ce0b213da8077400a16f3046aa050a5a27296226a288c0faf22cab235239784c51bcf74a60743", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 12:39:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:19 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) dup2(0xffffffffffffffff, r1) dup3(r1, r0, 0x0) 12:39:19 executing program 0 (fault-call:11 fault-nth:36): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:19 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="6db5b4f9229dff83893da8ca298d7507267c6342a8494d2a69f2421fbe9ef4f4933a2015be12bcba44db280b990af1fa752058bbca14ef36d792425687bb710ffdef52593ec1eaa98f233f170026c2ceabd1a1cc05f904afeab1e947", 0x5c}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000200)="095f197a0eb11fd566606df098471d6c35692480c2f4b695caaf3ce47a69093cb051be945d4b2fc03d5fe3b34f662f2078560c0841590bc0cd1958eaf1fff3f8489e714e35d2a80c1ee7207af1c73ac0540400"/93, 0x4d}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000140)="f716fd593d38428b93cae1d16c6dcbd9a65814b7f960f02b6c6d76d96c3d9ece33a69db5582c3cd4d188a06972de93", 0xfffffffffffffe35}], 0x5, 0xeb42, 0x5) 12:39:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000540)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f00000008c0)=""/32, 0x20}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {0x0}, {0x0}], 0x3}}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="81ca697ec754617047a2f6bf13db1d228695d352b47b520b2365850d9fa38e48f3", @ANYBLOB="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"]}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x4, 0x3, 0x104000000, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 168.877023][ T6770] serio: Serial port pts3 [ 168.880585][ T6775] FAULT_INJECTION: forcing a failure. [ 168.880585][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 168.893966][ T6775] CPU: 0 PID: 6775 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 168.903999][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.914071][ T6775] Call Trace: [ 168.917359][ T6775] dump_stack+0x1b0/0x21e [ 168.921691][ T6775] ? devkmsg_release+0x11c/0x11c 12:39:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 168.926617][ T6775] ? show_regs_print_info+0x12/0x12 [ 168.931806][ T6775] ? ext4_es_insert_extent+0x2996/0x2f40 [ 168.937446][ T6775] should_fail+0x6fb/0x860 [ 168.941835][ T6775] ? setup_fault_attr+0x2b0/0x2b0 [ 168.946839][ T6775] ? ext4_ext_map_blocks+0x3774/0x4650 [ 168.952286][ T6775] ? kfree+0x12b/0x5d0 [ 168.956349][ T6775] ? xas_create+0x4f9/0x1360 [ 168.960936][ T6775] should_failslab+0x5/0x20 [ 168.965422][ T6775] kmem_cache_alloc+0x36/0x250 [ 168.970176][ T6775] xas_create+0x4f9/0x1360 [ 168.974582][ T6775] xas_store+0x93/0x13b0 [ 168.974785][ T6781] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 168.978822][ T6775] ? _raw_spin_lock_irq+0xa2/0x180 [ 168.993182][ T6775] ? _raw_spin_lock_irqsave+0x1c0/0x1c0 [ 168.998703][ T6775] ? xas_load+0x46f/0x4c0 [ 169.003012][ T6775] __add_to_page_cache_locked+0x390/0x8a0 [ 169.008705][ T6775] ? add_to_page_cache_locked+0x30/0x30 [ 169.014230][ T6775] ? workingset_activation+0x150/0x150 [ 169.019663][ T6775] ? ext4_map_blocks+0x7e5/0x1e30 [ 169.024679][ T6775] ? __lru_cache_add+0x1a1/0x1f0 [ 169.029591][ T6775] add_to_page_cache_lru+0x11d/0x280 [ 169.034856][ T6775] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 169.040747][ T6775] ? memset+0x1f/0x40 [ 169.044722][ T6775] ? unwind_next_frame+0x1c07/0x22b0 [ 169.049983][ T6775] ext4_mpage_readpages+0x467/0x1eb0 [ 169.055250][ T6775] ? ext4_end_bio+0x590/0x590 [ 169.059899][ T6775] ? prep_new_page+0x11a/0x380 [ 169.064637][ T6775] ? ext4_readpages+0x8b/0x110 [ 169.069373][ T6775] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 169.075413][ T6775] read_pages+0x108/0x3f0 [ 169.079720][ T6775] ? __do_page_cache_readahead+0x510/0x510 [ 169.085520][ T6775] ? find_get_entry+0x5da/0x670 [ 169.090351][ T6775] ? xa_load+0x323/0x340 [ 169.094569][ T6775] __do_page_cache_readahead+0x470/0x510 [ 169.100194][ T6775] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 169.106607][ T6775] ? unwind_next_frame+0x1c07/0x22b0 [ 169.111869][ T6775] ? page_cache_sync_readahead+0xa3/0x3c0 [ 169.117565][ T6775] generic_file_read_iter+0x626/0x20a0 [ 169.123000][ T6775] ? find_get_pages_range_tag+0xae0/0xae0 [ 169.128692][ T6775] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 169.134053][ T6775] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 169.140092][ T6775] ? avc_denied+0x1c0/0x1c0 [ 169.144571][ T6775] generic_file_splice_read+0x491/0x780 [ 169.150092][ T6775] ? splice_shrink_spd+0xb0/0xb0 [ 169.155097][ T6775] ? security_file_permission+0x1e9/0x300 [ 169.160807][ T6775] ? splice_shrink_spd+0xb0/0xb0 [ 169.165733][ T6775] splice_direct_to_actor+0x3cf/0xb00 [ 169.171095][ T6775] ? do_splice_direct+0x3d0/0x3d0 [ 169.176109][ T6775] ? pipe_to_sendpage+0x300/0x300 [ 169.181111][ T6775] ? security_file_permission+0x128/0x300 [ 169.186827][ T6775] do_splice_direct+0x279/0x3d0 [ 169.191673][ T6775] ? splice_direct_to_actor+0xb00/0xb00 [ 169.197196][ T6775] ? security_file_permission+0x128/0x300 [ 169.202889][ T6775] do_sendfile+0x89d/0x1110 [ 169.207396][ T6775] ? compat_writev+0x390/0x390 [ 169.212308][ T6775] ? security_file_permission+0x128/0x300 [ 169.218002][ T6775] ? vfs_write+0x427/0x4f0 [ 169.222390][ T6775] ? fput_many+0x42/0x1a0 [ 169.226695][ T6775] __x64_sys_sendfile64+0x1ae/0x220 [ 169.231867][ T6775] ? __ia32_sys_sendfile+0x240/0x240 [ 169.237133][ T6775] do_syscall_64+0xcb/0x150 [ 169.241874][ T6775] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 169.247739][ T6775] RIP: 0033:0x45de59 [ 169.251610][ T6775] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:39:20 executing program 4: io_setup(0x6, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x4c, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84400) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000140)={'HL\x00'}, &(0x7f00000001c0)=0x1e) io_submit(r0, 0xa, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 12:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 169.271200][ T6775] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.279581][ T6775] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 169.287526][ T6775] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 169.295472][ T6775] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 169.303420][ T6775] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000024 [ 169.311372][ T6775] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 169.322330][ T6778] fuse: Bad value for 'fd' 12:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 169.363084][ T6788] skbuff: bad partial csum: csum=112/56319 headroom=64 headlen=3712 12:39:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) 12:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) [ 169.506722][ T6794] skbuff: bad partial csum: csum=112/56319 headroom=64 headlen=3712 [ 169.521307][ T6798] serio: Serial port pts2 12:39:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:20 executing program 0 (fault-call:11 fault-nth:37): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) 12:39:20 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) 12:39:20 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) 12:39:20 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) [ 169.739240][ T6808] overlayfs: unrecognized mount option "uid>18446744073709551615" or missing value [ 169.749290][ T6809] fuse: Bad value for 'fd' [ 169.811001][ T6819] serio: Serial port pts2 [ 169.813053][ T6817] FAULT_INJECTION: forcing a failure. [ 169.813053][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 169.821923][ T6823] serio: Serial port pts4 [ 169.831809][ T6821] serio: Serial port pts5 [ 169.838505][ T6816] serio: Serial port pts3 [ 169.848563][ T6817] CPU: 1 PID: 6817 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 169.858618][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.868748][ T6817] Call Trace: [ 169.872022][ T6817] dump_stack+0x1b0/0x21e [ 169.876340][ T6817] ? devkmsg_release+0x11c/0x11c [ 169.881262][ T6817] ? show_regs_print_info+0x12/0x12 [ 169.881477][ T6832] serio: Serial port pts2 [ 169.886456][ T6817] ? kmem_cache_alloc+0x1d5/0x250 [ 169.886468][ T6817] ? __rcu_read_lock+0x50/0x50 [ 169.886480][ T6817] ? workingset_activation+0x150/0x150 [ 169.886494][ T6817] should_fail+0x6fb/0x860 12:39:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 12:39:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffff8) dup3(r1, r0, 0x0) 12:39:20 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x1012, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8000400, 0x0, 0x0, 0x0, 0x0) 12:39:20 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f00000000000000020000000200000000800000008000002000001228c4645f28c4645f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00ecd85f0eaeb006e06aaeadc530e101a797d080a9ce97291fd05a73d984bf21cb3980242646f7"]) socketpair(0x11, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x4201}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x1, 0x7, 0x302, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x34}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xaa9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040040}, 0x44) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x609ecb97}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8001) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff7f}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48800) [ 169.910543][ T6817] ? setup_fault_attr+0x2b0/0x2b0 [ 169.915558][ T6817] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 169.921672][ T6817] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 169.927208][ T6817] ? __alloc_skb+0x88/0x4d0 [ 169.931701][ T6817] should_failslab+0x5/0x20 [ 169.936186][ T6817] kmem_cache_alloc+0x36/0x250 [ 169.940938][ T6817] __alloc_skb+0x88/0x4d0 [ 169.945256][ T6817] ? xas_nomem+0x177/0x1b0 [ 169.949663][ T6817] tipc_msg_build+0x74a/0x1b20 [ 169.954415][ T6817] ? tipc_link_mtu+0x9/0x50 [ 169.958912][ T6817] tipc_send_group_bcast+0x9c1/0xd50 [ 169.963473][ T6842] tipc: Enabling of bearer rejected, already enabled [ 169.964186][ T6817] ? __tipc_sendmsg+0x2d30/0x2d30 [ 169.975365][ T6842] tipc: Enabling of bearer rejected, already enabled [ 169.976798][ T6817] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 169.976808][ T6817] ? wait_woken+0x250/0x250 [ 169.976815][ T6817] ? ext4_get_group_desc+0x253/0x2a0 [ 169.976829][ T6817] ? __ext4_journal_get_create_access+0x300/0x300 [ 170.006618][ T6817] ? __ext4_get_inode_loc+0x499/0x1030 12:39:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x14, 0x1}, 0x14}}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r12, r12, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)="b29e041019cb93bd64f08c4bc0a7bbbdd457c0bb87beafd907e2af2aa37133452511", 0x22}], 0x1, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r1, r2, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0xd8, 0x20040000}, 0x20008800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000004300010c2cbd7000010000800a2154f97841579c86fc92e37882366002a007c3938e5a6ffb"], 0x90}}, 0x0) [ 170.012064][ T6817] __tipc_sendmsg+0x400/0x2d30 [ 170.016823][ T6817] ? local_bh_enable+0x20/0x20 [ 170.021575][ T6817] ? ext4_chunk_trans_blocks+0x280/0x280 [ 170.027197][ T6817] ? _raw_spin_lock_bh+0xa4/0x180 [ 170.032208][ T6817] ? _local_bh_enable+0x30/0x30 [ 170.037047][ T6817] ? memset+0x1f/0x40 [ 170.041016][ T6817] ? selinux_socket_sendmsg+0x10b/0x320 [ 170.046547][ T6817] ? lock_sock_nested+0x25a/0x320 [ 170.051555][ T6817] ? xas_load+0x468/0x4c0 [ 170.055905][ T6817] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 170.061610][ T6817] ? __ext4_journal_start_sb+0x3ad/0x420 [ 170.067230][ T6817] ? tipc_recvmsg+0x17c0/0x17c0 [ 170.072058][ T6817] tipc_sendmsg+0x51/0x70 [ 170.076360][ T6817] kernel_sendmsg+0xe2/0x120 [ 170.080950][ T6817] sock_no_sendpage+0x13f/0x1b0 [ 170.085774][ T6817] ? __receive_sock+0xb0/0xb0 [ 170.090435][ T6817] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 170.096137][ T6817] ? __receive_sock+0xb0/0xb0 [ 170.100797][ T6817] sock_sendpage+0xd0/0x120 [ 170.105710][ T6817] pipe_to_sendpage+0x23b/0x300 [ 170.110543][ T6817] ? sock_fasync+0xf0/0xf0 [ 170.114927][ T6817] ? generic_splice_sendpage+0x200/0x200 [ 170.120534][ T6817] ? atime_needs_update+0x378/0x570 [ 170.125704][ T6817] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 170.131651][ T6817] __splice_from_pipe+0x2d3/0x870 [ 170.136659][ T6817] ? generic_splice_sendpage+0x200/0x200 [ 170.142263][ T6817] generic_splice_sendpage+0x172/0x200 [ 170.147694][ T6817] ? iter_file_splice_write+0xf20/0xf20 [ 170.153208][ T6817] ? direct_splice_actor+0x25/0x120 [ 170.158388][ T6817] splice_direct_to_actor+0x496/0xb00 [ 170.163754][ T6817] ? do_splice_direct+0x3d0/0x3d0 [ 170.168756][ T6817] ? pipe_to_sendpage+0x300/0x300 [ 170.173762][ T6817] ? security_file_permission+0x128/0x300 [ 170.179468][ T6817] do_splice_direct+0x279/0x3d0 [ 170.184918][ T6817] ? splice_direct_to_actor+0xb00/0xb00 [ 170.190439][ T6817] ? security_file_permission+0x128/0x300 [ 170.196128][ T6817] do_sendfile+0x89d/0x1110 [ 170.200615][ T6817] ? compat_writev+0x390/0x390 [ 170.205362][ T6817] ? security_file_permission+0x128/0x300 [ 170.211090][ T6817] ? vfs_write+0x427/0x4f0 [ 170.215550][ T6817] ? fput_many+0x42/0x1a0 [ 170.219850][ T6817] __x64_sys_sendfile64+0x1ae/0x220 [ 170.225050][ T6817] ? __ia32_sys_sendfile+0x240/0x240 [ 170.230327][ T6817] do_syscall_64+0xcb/0x150 [ 170.234819][ T6817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 170.240688][ T6817] RIP: 0033:0x45de59 12:39:21 executing program 0 (fault-call:11 fault-nth:38): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:21 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x100, 0x0, 0x200, 0x70bd2b, 0x25dfdbfa, {}, [@TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32530fa1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfdf}, @TIPC_NLA_PROP_MTU={0xfffffe12, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 170.244550][ T6817] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.264138][ T6817] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.272535][ T6817] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 170.280495][ T6817] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 170.288439][ T6817] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 170.296402][ T6817] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000025 [ 170.304342][ T6817] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 170.339768][ T6857] FAULT_INJECTION: forcing a failure. [ 170.339768][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 170.354573][ T6857] CPU: 0 PID: 6857 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 170.364736][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.374935][ T6857] Call Trace: [ 170.378204][ T6857] dump_stack+0x1b0/0x21e [ 170.382523][ T6857] ? devkmsg_release+0x11c/0x11c [ 170.387441][ T6857] ? show_regs_print_info+0x12/0x12 [ 170.392641][ T6857] ? __perf_event_task_sched_in+0x4ed/0x550 [ 170.398556][ T6857] should_fail+0x6fb/0x860 [ 170.402946][ T6857] ? setup_fault_attr+0x2b0/0x2b0 [ 170.407942][ T6857] ? setup_fault_attr+0x2b0/0x2b0 [ 170.412942][ T6857] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 170.419963][ T6857] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 170.425518][ T6857] ? tipc_msg_build+0x74a/0x1b20 [ 170.430429][ T6857] should_failslab+0x5/0x20 [ 170.434906][ T6857] __kmalloc_track_caller+0x5d/0x2b0 [ 170.440181][ T6857] ? kmem_cache_alloc+0x1d5/0x250 [ 170.445183][ T6857] ? tipc_msg_build+0x74a/0x1b20 [ 170.450115][ T6857] __alloc_skb+0xd1/0x4d0 [ 170.454428][ T6857] tipc_msg_build+0x74a/0x1b20 [ 170.459166][ T6857] ? tipc_link_mtu+0x9/0x50 [ 170.463650][ T6857] tipc_send_group_bcast+0x9c1/0xd50 [ 170.468919][ T6857] ? ___preempt_schedule+0x16/0x20 [ 170.474207][ T6857] ? __tipc_sendmsg+0x2d30/0x2d30 [ 170.479225][ T6857] ? memset+0x1f/0x40 [ 170.483180][ T6857] ? unwind_next_frame+0x1c07/0x22b0 [ 170.488457][ T6857] ? wait_woken+0x250/0x250 [ 170.492933][ T6857] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 170.498447][ T6857] __tipc_sendmsg+0x400/0x2d30 [ 170.503201][ T6857] ? local_bh_enable+0x20/0x20 [ 170.508121][ T6857] ? blk_flush_plug_list+0x4b7/0x500 [ 170.513384][ T6857] ? prep_new_page+0x11a/0x380 [ 170.518127][ T6857] ? _raw_spin_lock_bh+0xa4/0x180 [ 170.523148][ T6857] ? _local_bh_enable+0x30/0x30 [ 170.527991][ T6857] ? memset+0x1f/0x40 [ 170.531960][ T6857] ? selinux_socket_sendmsg+0x10b/0x320 [ 170.537490][ T6857] ? lock_sock_nested+0x25a/0x320 [ 170.542487][ T6857] ? xas_load+0x468/0x4c0 [ 170.546807][ T6857] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 170.552498][ T6857] ? tipc_recvmsg+0x17c0/0x17c0 [ 170.557318][ T6857] tipc_sendmsg+0x51/0x70 [ 170.561624][ T6857] kernel_sendmsg+0xe2/0x120 [ 170.566192][ T6857] sock_no_sendpage+0x13f/0x1b0 [ 170.571022][ T6857] ? __receive_sock+0xb0/0xb0 [ 170.575671][ T6857] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 170.581359][ T6857] ? __receive_sock+0xb0/0xb0 [ 170.586015][ T6857] sock_sendpage+0xd0/0x120 [ 170.590500][ T6857] pipe_to_sendpage+0x23b/0x300 [ 170.595328][ T6857] ? sock_fasync+0xf0/0xf0 [ 170.599722][ T6857] ? generic_splice_sendpage+0x200/0x200 [ 170.605354][ T6857] ? atime_needs_update+0x2cf/0x570 [ 170.610528][ T6857] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 170.616567][ T6857] __splice_from_pipe+0x2d3/0x870 [ 170.621563][ T6857] ? generic_splice_sendpage+0x200/0x200 [ 170.627186][ T6857] generic_splice_sendpage+0x172/0x200 [ 170.632615][ T6857] ? iter_file_splice_write+0xf20/0xf20 [ 170.638145][ T6857] ? direct_splice_actor+0x25/0x120 [ 170.643407][ T6857] splice_direct_to_actor+0x496/0xb00 [ 170.648759][ T6857] ? do_splice_direct+0x3d0/0x3d0 [ 170.653764][ T6857] ? pipe_to_sendpage+0x300/0x300 [ 170.658778][ T6857] ? security_file_permission+0x128/0x300 [ 170.664472][ T6857] do_splice_direct+0x279/0x3d0 [ 170.669384][ T6857] ? splice_direct_to_actor+0xb00/0xb00 [ 170.674930][ T6857] ? security_file_permission+0x128/0x300 [ 170.680738][ T6857] do_sendfile+0x89d/0x1110 [ 170.685224][ T6857] ? compat_writev+0x390/0x390 [ 170.689969][ T6857] ? security_file_permission+0x128/0x300 [ 170.695660][ T6857] ? vfs_write+0x427/0x4f0 [ 170.700048][ T6857] ? fput_many+0x42/0x1a0 [ 170.704357][ T6857] __x64_sys_sendfile64+0x1ae/0x220 [ 170.709567][ T6857] ? __ia32_sys_sendfile+0x240/0x240 [ 170.715507][ T6857] do_syscall_64+0xcb/0x150 [ 170.719991][ T6857] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 170.726466][ T6857] RIP: 0033:0x45de59 [ 170.730341][ T6857] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 170.749920][ T6857] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.758341][ T6857] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 170.766295][ T6857] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 170.774238][ T6857] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 170.783047][ T6857] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000026 12:39:21 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) 12:39:21 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x82a) fallocate(r0, 0x0, 0x0, 0x6) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='\xde\x00', &(0x7f00000000c0)='^\x00', &(0x7f0000000100)='-\x00', &(0x7f0000000140)='B%\x00', &(0x7f0000000180)='@)\\,\x00'], &(0x7f00000003c0)=[&(0x7f0000000240)='[^\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)=')$@\x1b.\x00', &(0x7f0000000300)='%[$\x00', &(0x7f0000000340)='%\'(\x00', &(0x7f0000000380)='#-\'#,\x00']) 12:39:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, @mcast2, @mcast2={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3}}) 12:39:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 12:39:21 executing program 0 (fault-call:11 fault-nth:39): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 170.790989][ T6857] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:21 executing program 4: getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4240, 0x0, 0x4, 0x0, 0x400000, 0x0, 0x1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 170.852787][ T6862] FAULT_INJECTION: forcing a failure. [ 170.852787][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 170.860283][ T6867] serio: Serial port pts2 [ 170.873624][ T6866] serio: Serial port pts3 [ 170.880573][ T6862] CPU: 1 PID: 6862 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 170.890665][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.901397][ T6862] Call Trace: [ 170.904661][ T6862] dump_stack+0x1b0/0x21e [ 170.908988][ T6862] ? devkmsg_release+0x11c/0x11c [ 170.913894][ T6862] ? show_regs_print_info+0x12/0x12 [ 170.919070][ T6862] ? is_mmconf_reserved+0x420/0x420 [ 170.924269][ T6862] should_fail+0x6fb/0x860 [ 170.928655][ T6862] ? setup_fault_attr+0x2b0/0x2b0 [ 170.933658][ T6862] ? __alloc_skb+0x88/0x4d0 [ 170.938146][ T6862] should_failslab+0x5/0x20 [ 170.942642][ T6862] kmem_cache_alloc+0x36/0x250 [ 170.947395][ T6862] __alloc_skb+0x88/0x4d0 [ 170.951735][ T6862] ? __check_object_size+0x2e5/0x3b0 [ 170.957006][ T6862] tipc_msg_build+0xcf5/0x1b20 [ 170.961758][ T6862] ? tipc_link_mtu+0x9/0x50 [ 170.966251][ T6862] tipc_send_group_bcast+0x9c1/0xd50 [ 170.971545][ T6862] ? __tipc_sendmsg+0x2d30/0x2d30 [ 170.976577][ T6862] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 170.982630][ T6862] ? wait_woken+0x250/0x250 [ 170.987401][ T6862] ? ext4_get_group_desc+0x253/0x2a0 [ 170.992667][ T6862] ? __ext4_journal_get_create_access+0x300/0x300 [ 170.999051][ T6862] ? __ext4_get_inode_loc+0x499/0x1030 [ 171.007893][ T6862] __tipc_sendmsg+0x400/0x2d30 [ 171.012655][ T6862] ? local_bh_enable+0x20/0x20 [ 171.017400][ T6862] ? ext4_chunk_trans_blocks+0x280/0x280 [ 171.023012][ T6862] ? _raw_spin_lock_bh+0xa4/0x180 [ 171.028066][ T6862] ? _local_bh_enable+0x30/0x30 [ 171.032895][ T6862] ? memset+0x1f/0x40 [ 171.036894][ T6862] ? selinux_socket_sendmsg+0x10b/0x320 [ 171.042437][ T6862] ? lock_sock_nested+0x25a/0x320 [ 171.048092][ T6862] ? xas_load+0x468/0x4c0 [ 171.052395][ T6862] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 171.058086][ T6862] ? __ext4_journal_start_sb+0x3ad/0x420 [ 171.063724][ T6862] ? tipc_recvmsg+0x17c0/0x17c0 [ 171.068645][ T6862] tipc_sendmsg+0x51/0x70 [ 171.072972][ T6862] kernel_sendmsg+0xe2/0x120 [ 171.077534][ T6862] sock_no_sendpage+0x13f/0x1b0 [ 171.082375][ T6862] ? __receive_sock+0xb0/0xb0 [ 171.087046][ T6862] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 171.092733][ T6862] ? __receive_sock+0xb0/0xb0 [ 171.097379][ T6862] sock_sendpage+0xd0/0x120 [ 171.101852][ T6862] pipe_to_sendpage+0x23b/0x300 [ 171.106673][ T6862] ? sock_fasync+0xf0/0xf0 [ 171.111078][ T6862] ? generic_splice_sendpage+0x200/0x200 [ 171.116717][ T6862] ? atime_needs_update+0x378/0x570 [ 171.121886][ T6862] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 171.127850][ T6862] __splice_from_pipe+0x2d3/0x870 [ 171.132848][ T6862] ? generic_splice_sendpage+0x200/0x200 [ 171.138447][ T6862] generic_splice_sendpage+0x172/0x200 [ 171.143875][ T6862] ? iter_file_splice_write+0xf20/0xf20 [ 171.149391][ T6862] ? direct_splice_actor+0x25/0x120 [ 171.154597][ T6862] splice_direct_to_actor+0x496/0xb00 [ 171.159951][ T6862] ? do_splice_direct+0x3d0/0x3d0 [ 171.164941][ T6862] ? pipe_to_sendpage+0x300/0x300 [ 171.169944][ T6862] ? security_file_permission+0x128/0x300 [ 171.175656][ T6862] do_splice_direct+0x279/0x3d0 [ 171.180477][ T6862] ? splice_direct_to_actor+0xb00/0xb00 [ 171.185992][ T6862] ? security_file_permission+0x128/0x300 [ 171.191679][ T6862] do_sendfile+0x89d/0x1110 [ 171.196159][ T6862] ? compat_writev+0x390/0x390 [ 171.200895][ T6862] ? security_file_permission+0x128/0x300 [ 171.206585][ T6862] ? vfs_write+0x427/0x4f0 [ 171.211122][ T6862] ? fput_many+0x42/0x1a0 [ 171.215420][ T6862] __x64_sys_sendfile64+0x1ae/0x220 [ 171.220591][ T6862] ? __ia32_sys_sendfile+0x240/0x240 [ 171.225848][ T6862] do_syscall_64+0xcb/0x150 [ 171.230320][ T6862] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 171.236181][ T6862] RIP: 0033:0x45de59 12:39:22 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$FIOCLEX(r0, 0x5451) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0x3, 0xb, 0x36, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 12:39:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x22a}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x402, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xd, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc801) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900000007000000068100023b2509000100010100ff3ffe58", 0xea}], 0x1) [ 171.240057][ T6862] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.259643][ T6862] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 171.268046][ T6862] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 171.276002][ T6862] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 171.283958][ T6862] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 171.291905][ T6862] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000027 [ 171.299856][ T6862] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c 12:39:22 executing program 5: r0 = syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @string={0x4, 0x3, "915a"}}}, 0x0) 12:39:22 executing program 0 (fault-call:11 fault-nth:40): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) 12:39:22 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(0xffffffffffffffff, r1, 0x0) 12:39:22 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, 0xffffffffffffffff) dup3(r2, r1, 0x0) [ 171.367893][ T6895] FAULT_INJECTION: forcing a failure. [ 171.367893][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 171.393296][ T6898] serio: Serial port pts3 [ 171.408861][ T6895] CPU: 0 PID: 6895 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 171.418923][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.428962][ T6895] Call Trace: [ 171.432311][ T6895] dump_stack+0x1b0/0x21e [ 171.436621][ T6895] ? devkmsg_release+0x11c/0x11c [ 171.441534][ T6895] ? show_regs_print_info+0x12/0x12 [ 171.446186][ T6908] serio: Serial port pts4 [ 171.446725][ T6895] ? kmem_cache_alloc+0x1d5/0x250 [ 171.456029][ T6895] ? workingset_update_node+0xe7/0x150 [ 171.461471][ T6895] should_fail+0x6fb/0x860 [ 171.465864][ T6895] ? setup_fault_attr+0x2b0/0x2b0 [ 171.470869][ T6895] ? setup_fault_attr+0x2b0/0x2b0 [ 171.475867][ T6895] ? tipc_msg_build+0xcf5/0x1b20 [ 171.480774][ T6895] should_failslab+0x5/0x20 [ 171.485253][ T6895] __kmalloc_track_caller+0x5d/0x2b0 [ 171.490521][ T6895] ? kmem_cache_alloc+0x1d5/0x250 [ 171.495528][ T6895] ? tipc_msg_build+0xcf5/0x1b20 [ 171.500435][ T6895] __alloc_skb+0xd1/0x4d0 [ 171.504750][ T6895] tipc_msg_build+0xcf5/0x1b20 [ 171.509502][ T6895] ? tipc_link_mtu+0x9/0x50 [ 171.513986][ T6895] tipc_send_group_bcast+0x9c1/0xd50 [ 171.519241][ T6895] ? __tipc_sendmsg+0x2d30/0x2d30 [ 171.524258][ T6895] ? memset+0x1f/0x40 [ 171.528212][ T6895] ? unwind_next_frame+0x1c07/0x22b0 [ 171.533473][ T6895] ? wait_woken+0x250/0x250 [ 171.537962][ T6895] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 171.543494][ T6895] __tipc_sendmsg+0x400/0x2d30 [ 171.548253][ T6895] ? local_bh_enable+0x20/0x20 [ 171.552987][ T6895] ? blk_flush_plug_list+0x4b7/0x500 [ 171.558247][ T6895] ? prep_new_page+0x11a/0x380 [ 171.563003][ T6895] ? _raw_spin_lock_bh+0xa4/0x180 [ 171.568024][ T6895] ? _local_bh_enable+0x30/0x30 [ 171.572850][ T6895] ? memset+0x1f/0x40 [ 171.576812][ T6895] ? selinux_socket_sendmsg+0x10b/0x320 [ 171.582327][ T6895] ? lock_sock_nested+0x25a/0x320 [ 171.587420][ T6895] ? xas_load+0x468/0x4c0 [ 171.591823][ T6895] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 171.597516][ T6895] ? tipc_recvmsg+0x17c0/0x17c0 [ 171.602340][ T6895] tipc_sendmsg+0x51/0x70 [ 171.606650][ T6895] kernel_sendmsg+0xe2/0x120 [ 171.611229][ T6895] sock_no_sendpage+0x13f/0x1b0 [ 171.616064][ T6895] ? __receive_sock+0xb0/0xb0 [ 171.620719][ T6895] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 171.626406][ T6895] ? __receive_sock+0xb0/0xb0 [ 171.631061][ T6895] sock_sendpage+0xd0/0x120 [ 171.635552][ T6895] pipe_to_sendpage+0x23b/0x300 [ 171.640398][ T6895] ? sock_fasync+0xf0/0xf0 [ 171.644812][ T6895] ? generic_splice_sendpage+0x200/0x200 [ 171.650414][ T6895] ? atime_needs_update+0x2cf/0x570 [ 171.655585][ T6895] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 171.661548][ T6895] __splice_from_pipe+0x2d3/0x870 12:39:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) [ 171.666564][ T6895] ? generic_splice_sendpage+0x200/0x200 [ 171.672207][ T6895] generic_splice_sendpage+0x172/0x200 [ 171.677661][ T6895] ? iter_file_splice_write+0xf20/0xf20 [ 171.683197][ T6895] ? direct_splice_actor+0x25/0x120 [ 171.688382][ T6895] splice_direct_to_actor+0x496/0xb00 [ 171.693743][ T6895] ? do_splice_direct+0x3d0/0x3d0 [ 171.695969][ T6914] serio: Serial port pts2 [ 171.698751][ T6895] ? pipe_to_sendpage+0x300/0x300 [ 171.698764][ T6895] ? security_file_permission+0x128/0x300 [ 171.698772][ T6895] do_splice_direct+0x279/0x3d0 [ 171.698780][ T6895] ? splice_direct_to_actor+0xb00/0xb00 [ 171.698791][ T6895] ? security_file_permission+0x128/0x300 [ 171.698798][ T6895] do_sendfile+0x89d/0x1110 [ 171.698809][ T6895] ? compat_writev+0x390/0x390 [ 171.698817][ T6895] ? security_file_permission+0x128/0x300 [ 171.698826][ T6895] ? vfs_write+0x427/0x4f0 [ 171.698839][ T6895] ? fput_many+0x42/0x1a0 [ 171.753620][ T6895] __x64_sys_sendfile64+0x1ae/0x220 [ 171.758809][ T6895] ? __ia32_sys_sendfile+0x240/0x240 [ 171.764079][ T6895] do_syscall_64+0xcb/0x150 [ 171.768585][ T6895] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 171.774494][ T6895] RIP: 0033:0x45de59 [ 171.778371][ T6895] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 171.797946][ T6895] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 171.808129][ T6895] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 12:39:22 executing program 0 (fault-call:11 fault-nth:41): r0 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000002640)=@req={0x43fc, 0x0, 0x0, 0x5}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fff) [ 171.816944][ T6895] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 171.824927][ T6895] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 171.832912][ T6895] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000028 [ 171.840863][ T6895] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 171.862681][ T6918] FAULT_INJECTION: forcing a failure. 12:39:22 executing program 1: process_vm_writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x5, &(0x7f0000000500)=[{&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/38, 0x26}], 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) exit_group(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$P9_RFLUSH(r2, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) [ 171.862681][ T6918] name failslab, interval 1, probability 0, space 0, times 0 [ 171.875666][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 171.885717][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.895786][ T6918] Call Trace: [ 171.899067][ T6918] dump_stack+0x1b0/0x21e [ 171.903403][ T6918] ? devkmsg_release+0x11c/0x11c [ 171.908330][ T6918] ? show_regs_print_info+0x12/0x12 [ 171.913509][ T6918] should_fail+0x6fb/0x860 12:39:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x16, 0xd785ab268586148d, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @str=']nodev{\x00'}]}]}, 0x24}}, 0x0) syz_io_uring_complete(0x0) [ 171.917926][ T6918] ? setup_fault_attr+0x2b0/0x2b0 [ 171.922922][ T6918] ? unwind_get_return_address+0x48/0x90 [ 171.928534][ T6918] ? arch_stack_walk+0x98/0xe0 [ 171.933285][ T6918] ? __alloc_skb+0x88/0x4d0 [ 171.937779][ T6918] should_failslab+0x5/0x20 [ 171.942273][ T6918] kmem_cache_alloc+0x36/0x250 [ 171.947020][ T6918] __alloc_skb+0x88/0x4d0 [ 171.951329][ T6918] ? __do_page_cache_readahead+0x470/0x510 [ 171.957113][ T6918] skb_copy+0xe3/0x740 [ 171.961219][ T6918] ? memcpy+0x38/0x50 [ 171.965185][ T6918] tipc_buf_append+0x461/0xad0 [ 171.969925][ T6918] ? __kasan_kmalloc+0x117/0x1b0 [ 171.974840][ T6918] ? tipc_msg_create+0x3a0/0x3a0 [ 171.979756][ T6918] ? skb_clone+0x1f4/0x370 [ 171.984149][ T6918] tipc_msg_reassemble+0x331/0x590 [ 171.989238][ T6918] ? tipc_msg_lookup_dest+0x980/0x980 [ 171.994587][ T6918] ? xas_create+0x1269/0x1360 [ 171.999246][ T6918] ? __rcu_read_lock+0x50/0x50 [ 172.003982][ T6918] ? should_fail+0x182/0x860 [ 172.008594][ T6918] ? should_fail+0x182/0x860 [ 172.013190][ T6918] ? setup_fault_attr+0x2b0/0x2b0 [ 172.018196][ T6918] tipc_mcast_xmit+0x223/0x16c0 [ 172.023035][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 172.029170][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 172.034463][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 172.039731][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 172.044734][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 172.050777][ T6918] ? wait_woken+0x250/0x250 [ 172.055257][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 172.060536][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 172.066943][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 172.072386][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 172.077128][ T6918] ? local_bh_enable+0x20/0x20 [ 172.081869][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 172.087474][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 172.092479][ T6918] ? _local_bh_enable+0x30/0x30 [ 172.097319][ T6918] ? memset+0x1f/0x40 [ 172.101276][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 172.106798][ T6918] ? lock_sock_nested+0x25a/0x320 [ 172.111814][ T6918] ? xas_load+0x468/0x4c0 [ 172.116125][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 172.121817][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 172.127438][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 172.132264][ T6918] tipc_sendmsg+0x51/0x70 [ 172.136574][ T6918] kernel_sendmsg+0xe2/0x120 [ 172.141142][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 172.145984][ T6918] ? __receive_sock+0xb0/0xb0 [ 172.150658][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 172.156370][ T6918] ? __receive_sock+0xb0/0xb0 [ 172.161024][ T6918] sock_sendpage+0xd0/0x120 [ 172.165505][ T6918] pipe_to_sendpage+0x23b/0x300 [ 172.170333][ T6918] ? sock_fasync+0xf0/0xf0 [ 172.174780][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 172.180407][ T6918] ? atime_needs_update+0x378/0x570 [ 172.185581][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 172.191562][ T6918] __splice_from_pipe+0x2d3/0x870 [ 172.196607][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 172.202217][ T6918] generic_splice_sendpage+0x172/0x200 [ 172.207658][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 172.213202][ T6918] ? direct_splice_actor+0x25/0x120 [ 172.218396][ T6918] splice_direct_to_actor+0x496/0xb00 [ 172.223753][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 172.228750][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 172.233767][ T6918] ? security_file_permission+0x128/0x300 [ 172.241022][ T6918] do_splice_direct+0x279/0x3d0 [ 172.245850][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 172.252342][ T6918] ? security_file_permission+0x128/0x300 [ 172.258050][ T6918] do_sendfile+0x89d/0x1110 [ 172.262529][ T6918] ? compat_writev+0x390/0x390 [ 172.267265][ T6918] ? security_file_permission+0x128/0x300 [ 172.272960][ T6918] ? vfs_write+0x427/0x4f0 [ 172.277349][ T6918] ? fput_many+0x42/0x1a0 [ 172.281669][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 172.286861][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 172.292120][ T6918] do_syscall_64+0xcb/0x150 [ 172.296613][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 172.302482][ T6918] RIP: 0033:0x45de59 [ 172.306353][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.325932][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.334318][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 172.342286][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 172.350235][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 172.358180][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 172.366126][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 172.375769][ T6918] tipc: Failed do clone local mcast rcv buffer [ 172.382100][ T6918] ================================================================== [ 172.390164][ T6918] BUG: KASAN: use-after-free in tipc_mcast_xmit+0x1026/0x16c0 [ 172.397630][ T6918] Read of size 8 at addr ffff8881d2327900 by task syz-executor.0/6918 [ 172.405757][ T6918] [ 172.408087][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Not tainted 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 172.418125][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.428170][ T6918] Call Trace: [ 172.431438][ T6918] dump_stack+0x1b0/0x21e [ 172.435744][ T6918] ? show_regs_print_info+0x12/0x12 [ 172.440913][ T6918] ? printk+0xc0/0x104 [ 172.444959][ T6918] ? printk+0xc0/0x104 [ 172.449006][ T6918] print_address_description+0x96/0x5d0 [ 172.454524][ T6918] ? devkmsg_release+0x11c/0x11c [ 172.459437][ T6918] ? skb_clone+0x1f4/0x370 [ 172.463828][ T6918] ? kfree_skb+0x1b6/0x220 [ 172.468218][ T6918] ? tipc_msg_reassemble+0x3e2/0x590 [ 172.473480][ T6918] __kasan_report+0x14b/0x1c0 [ 172.478134][ T6918] ? tipc_mcast_xmit+0x1026/0x16c0 [ 172.483217][ T6918] kasan_report+0x27/0x50 [ 172.487532][ T6918] tipc_mcast_xmit+0x1026/0x16c0 [ 172.492447][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 172.498574][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 172.503840][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 172.509100][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 172.514102][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 172.520161][ T6918] ? wait_woken+0x250/0x250 [ 172.524637][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 172.529897][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 172.536286][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 172.541717][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 172.546459][ T6918] ? local_bh_enable+0x20/0x20 [ 172.551289][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 172.556896][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 172.561892][ T6918] ? _local_bh_enable+0x30/0x30 [ 172.566719][ T6918] ? memset+0x1f/0x40 [ 172.570677][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 172.576198][ T6918] ? lock_sock_nested+0x25a/0x320 [ 172.581197][ T6918] ? xas_load+0x468/0x4c0 [ 172.585516][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 172.591209][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 172.596818][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 172.601658][ T6918] tipc_sendmsg+0x51/0x70 [ 172.605964][ T6918] kernel_sendmsg+0xe2/0x120 [ 172.610529][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 172.615356][ T6918] ? __receive_sock+0xb0/0xb0 [ 172.620032][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 172.625723][ T6918] ? __receive_sock+0xb0/0xb0 [ 172.630376][ T6918] sock_sendpage+0xd0/0x120 [ 172.634854][ T6918] pipe_to_sendpage+0x23b/0x300 [ 172.639691][ T6918] ? sock_fasync+0xf0/0xf0 [ 172.644088][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 172.649711][ T6918] ? atime_needs_update+0x378/0x570 [ 172.654913][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 172.660868][ T6918] __splice_from_pipe+0x2d3/0x870 [ 172.665869][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 172.671475][ T6918] generic_splice_sendpage+0x172/0x200 [ 172.676908][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 172.682435][ T6918] ? direct_splice_actor+0x25/0x120 [ 172.687610][ T6918] splice_direct_to_actor+0x496/0xb00 [ 172.692960][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 172.697977][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 172.702996][ T6918] ? security_file_permission+0x128/0x300 [ 172.708689][ T6918] do_splice_direct+0x279/0x3d0 [ 172.713515][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 172.719079][ T6918] ? security_file_permission+0x128/0x300 [ 172.724785][ T6918] do_sendfile+0x89d/0x1110 [ 172.729263][ T6918] ? compat_writev+0x390/0x390 [ 172.734001][ T6918] ? security_file_permission+0x128/0x300 [ 172.739693][ T6918] ? vfs_write+0x427/0x4f0 [ 172.744084][ T6918] ? fput_many+0x42/0x1a0 [ 172.748388][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 172.753649][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 172.758910][ T6918] do_syscall_64+0xcb/0x150 [ 172.763388][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 172.769269][ T6918] RIP: 0033:0x45de59 [ 172.773139][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 172.792715][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.801116][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 172.809068][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 172.817020][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 172.824988][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 172.832938][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 172.840885][ T6918] [ 172.843188][ T6918] Allocated by task 6918: [ 172.847494][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 172.852231][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 172.857070][ T6918] __alloc_skb+0x88/0x4d0 [ 172.861375][ T6918] tipc_msg_build+0x74a/0x1b20 [ 172.866114][ T6918] tipc_send_group_bcast+0x9c1/0xd50 [ 172.871390][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 172.876126][ T6918] tipc_sendmsg+0x51/0x70 [ 172.880427][ T6918] kernel_sendmsg+0xe2/0x120 [ 172.884989][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 172.889830][ T6918] sock_sendpage+0xd0/0x120 [ 172.894310][ T6918] pipe_to_sendpage+0x23b/0x300 [ 172.899147][ T6918] __splice_from_pipe+0x2d3/0x870 [ 172.904144][ T6918] generic_splice_sendpage+0x172/0x200 [ 172.909575][ T6918] splice_direct_to_actor+0x496/0xb00 [ 172.914919][ T6918] do_splice_direct+0x279/0x3d0 [ 172.919742][ T6918] do_sendfile+0x89d/0x1110 [ 172.924234][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 172.929412][ T6918] do_syscall_64+0xcb/0x150 [ 172.933891][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 172.939766][ T6918] [ 172.942082][ T6918] Freed by task 6918: [ 172.946038][ T6918] __kasan_slab_free+0x168/0x220 [ 172.950951][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 172.956296][ T6918] kmem_cache_free+0xac/0x5c0 [ 172.960945][ T6918] tipc_buf_append+0x2d1/0xad0 [ 172.965681][ T6918] tipc_msg_reassemble+0x331/0x590 [ 172.970764][ T6918] tipc_mcast_xmit+0x223/0x16c0 [ 172.975604][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 172.981641][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 172.986377][ T6918] tipc_sendmsg+0x51/0x70 [ 172.990678][ T6918] kernel_sendmsg+0xe2/0x120 [ 172.995243][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 173.000066][ T6918] sock_sendpage+0xd0/0x120 [ 173.004541][ T6918] pipe_to_sendpage+0x23b/0x300 [ 173.009365][ T6918] __splice_from_pipe+0x2d3/0x870 [ 173.014362][ T6918] generic_splice_sendpage+0x172/0x200 [ 173.019811][ T6918] splice_direct_to_actor+0x496/0xb00 [ 173.025160][ T6918] do_splice_direct+0x279/0x3d0 [ 173.029983][ T6918] do_sendfile+0x89d/0x1110 [ 173.034462][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 173.039654][ T6918] do_syscall_64+0xcb/0x150 [ 173.044134][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 173.049994][ T6918] [ 173.052303][ T6918] The buggy address belongs to the object at ffff8881d2327900 [ 173.052303][ T6918] which belongs to the cache skbuff_fclone_cache of size 488 [ 173.067026][ T6918] The buggy address is located 0 bytes inside of [ 173.067026][ T6918] 488-byte region [ffff8881d2327900, ffff8881d2327ae8) [ 173.080109][ T6918] The buggy address belongs to the page: [ 173.085726][ T6918] page:ffffea000748c980 refcount:1 mapcount:0 mapping:ffff8881daa93b80 index:0x0 compound_mapcount: 0 [ 173.096643][ T6918] flags: 0x8000000000010200(slab|head) [ 173.102080][ T6918] raw: 8000000000010200 ffffea00072b2e80 0000000a0000000a ffff8881daa93b80 [ 173.110658][ T6918] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 173.119210][ T6918] page dumped because: kasan: bad access detected [ 173.125592][ T6918] [ 173.127897][ T6918] Memory state around the buggy address: [ 173.133505][ T6918] ffff8881d2327800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 173.141539][ T6918] ffff8881d2327880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 173.149576][ T6918] >ffff8881d2327900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.157609][ T6918] ^ [ 173.161650][ T6918] ffff8881d2327980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 12:39:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) [ 173.169702][ T6918] ffff8881d2327a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 173.177749][ T6918] ================================================================== [ 173.185784][ T6918] Disabling lock debugging due to kernel taint [ 173.193349][ T5038] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 173.214984][ T6918] ================================================================== [ 173.223059][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 173.231361][ T6918] [ 173.233684][ T6918] CPU: 1 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 173.245114][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.254891][ T6929] serio: Serial port pts2 [ 173.255158][ T6918] Call Trace: [ 173.262736][ T6918] dump_stack+0x1b0/0x21e [ 173.267055][ T6918] ? show_regs_print_info+0x12/0x12 [ 173.272244][ T6918] ? printk+0xc0/0x104 [ 173.276288][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 173.281109][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 173.285928][ T6918] print_address_description+0x96/0x5d0 [ 173.291478][ T6918] ? devkmsg_release+0x11c/0x11c [ 173.296384][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 173.301203][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 173.306036][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 173.311485][ T6918] __kasan_slab_free+0x102/0x220 [ 173.316392][ T6918] ? cmp_ex_search+0x6d/0x90 [ 173.320955][ T6918] ? __start___ex_table+0x7170/0xa620 [ 173.326313][ T6918] ? bsearch+0x9b/0xc0 [ 173.330348][ T6918] ? search_extable+0xf0/0xf0 [ 173.335008][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 173.340954][ T6918] ? __stop_notes+0xc/0xc [ 173.345251][ T6918] ? search_extable+0xaf/0xf0 [ 173.349900][ T6918] ? __rcu_read_lock+0x50/0x50 [ 173.354636][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 173.359715][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 173.365677][ T6918] ? __start___ex_table+0x7170/0xa620 [ 173.371015][ T6918] ? __start___ex_table+0x7170/0xa620 [ 173.376354][ T6918] ? kasan_report+0x27/0x50 [ 173.380842][ T6918] ? ex_handler_refcount+0x130/0x170 [ 173.386098][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 173.390933][ T6918] ? __start___ex_table+0x7178/0xa620 [ 173.396271][ T6918] ? fixup_exception+0x92/0xd0 [ 173.401003][ T6918] ? do_trap+0x148/0x340 [ 173.405239][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 173.410843][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 173.416809][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 173.422758][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 173.428109][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 173.433220][ T6918] kmem_cache_free+0xac/0x5c0 [ 173.437875][ T6918] ? kasan_report+0x27/0x50 [ 173.442372][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 173.447300][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 173.453423][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 173.458695][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 173.463978][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 173.468999][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 173.475037][ T6918] ? wait_woken+0x250/0x250 [ 173.479546][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 173.484823][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 173.491229][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 173.496747][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 173.501488][ T6918] ? local_bh_enable+0x20/0x20 [ 173.506231][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 173.511833][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 173.516846][ T6918] ? _local_bh_enable+0x30/0x30 [ 173.521664][ T6918] ? memset+0x1f/0x40 [ 173.525630][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 173.531142][ T6918] ? lock_sock_nested+0x25a/0x320 [ 173.536134][ T6918] ? xas_load+0x468/0x4c0 [ 173.540954][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 173.546646][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 173.552249][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 173.557066][ T6918] tipc_sendmsg+0x51/0x70 [ 173.561381][ T6918] kernel_sendmsg+0xe2/0x120 [ 173.565940][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 173.570765][ T6918] ? __receive_sock+0xb0/0xb0 [ 173.575422][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 173.581107][ T6918] ? __receive_sock+0xb0/0xb0 [ 173.585750][ T6918] sock_sendpage+0xd0/0x120 [ 173.590240][ T6918] pipe_to_sendpage+0x23b/0x300 [ 173.595076][ T6918] ? sock_fasync+0xf0/0xf0 [ 173.599460][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 173.605060][ T6918] ? atime_needs_update+0x378/0x570 [ 173.610228][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 173.616174][ T6918] __splice_from_pipe+0x2d3/0x870 [ 173.621173][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 173.626828][ T6918] generic_splice_sendpage+0x172/0x200 [ 173.632256][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 173.637769][ T6918] ? direct_splice_actor+0x25/0x120 [ 173.642939][ T6918] splice_direct_to_actor+0x496/0xb00 [ 173.648322][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 173.653313][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 173.658420][ T6918] ? security_file_permission+0x128/0x300 [ 173.664131][ T6918] do_splice_direct+0x279/0x3d0 [ 173.669038][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 173.674569][ T6918] ? security_file_permission+0x128/0x300 [ 173.680268][ T6918] do_sendfile+0x89d/0x1110 [ 173.685269][ T6918] ? compat_writev+0x390/0x390 [ 173.690004][ T6918] ? security_file_permission+0x128/0x300 [ 173.695693][ T6918] ? vfs_write+0x427/0x4f0 [ 173.700100][ T6918] ? fput_many+0x42/0x1a0 [ 173.704398][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 173.709566][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 173.714835][ T6918] do_syscall_64+0xcb/0x150 [ 173.719308][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 173.725166][ T6918] RIP: 0033:0x45de59 [ 173.729029][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.748616][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 173.756993][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 173.764948][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 173.772892][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 173.780835][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 173.788791][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 173.796755][ T6918] [ 173.799052][ T6918] Allocated by task 6918: [ 173.803358][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 173.808139][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 173.812962][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 173.817958][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 173.823397][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 173.828862][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 173.834290][ T6918] __iterate_interfaces+0x1fc/0x390 [ 173.839457][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 173.846362][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 173.851544][ T6918] __run_hrtimer+0x405/0x7a0 [ 173.856102][ T6918] hrtimer_run_softirq+0x320/0x450 [ 173.861181][ T6918] __do_softirq+0x22e/0x569 [ 173.865660][ T6918] [ 173.867959][ T6918] Freed by task 6918: [ 173.871919][ T6918] __kasan_slab_free+0x168/0x220 [ 173.877528][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 173.882874][ T6918] kmem_cache_free+0xac/0x5c0 [ 173.887527][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 173.893040][ T6918] __iterate_interfaces+0x1fc/0x390 [ 173.898205][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 173.905107][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 173.910290][ T6918] __run_hrtimer+0x405/0x7a0 [ 173.914850][ T6918] hrtimer_run_softirq+0x320/0x450 [ 173.919948][ T6918] __do_softirq+0x22e/0x569 [ 173.924429][ T6918] [ 173.926739][ T6918] The buggy address belongs to the object at ffff8881c80703c0 [ 173.926739][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 173.941304][ T6918] The buggy address is located 0 bytes inside of [ 173.941304][ T6918] 240-byte region [ffff8881c80703c0, ffff8881c80704b0) [ 173.954365][ T6918] The buggy address belongs to the page: [ 173.959981][ T6918] page:ffffea0007201c00 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 173.969066][ T6918] flags: 0x8000000000000200(slab) [ 173.974066][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 173.982619][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 173.991164][ T6918] page dumped because: kasan: bad access detected [ 173.997547][ T6918] [ 173.999842][ T6918] Memory state around the buggy address: [ 174.005451][ T6918] ffff8881c8070280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.013492][ T6918] ffff8881c8070300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 174.021537][ T6918] >ffff8881c8070380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 174.029567][ T6918] ^ [ 174.035687][ T6918] ffff8881c8070400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.043716][ T6918] ffff8881c8070480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 174.051740][ T6918] ================================================================== 12:39:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) keyctl$set_timeout(0xf, 0x0, 0xffffffffffffffe0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, @perf_config_ext={0x41, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x9) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000200)=@random="6f3060b21a107b401c36d24593621e69792865f9ccf04a872548a2", 0x1b, 0x2cc) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x10a) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) 12:39:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/146) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fallocate(r1, 0x3, 0x1000000, 0xfff000) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f00000002c0)=""/197, 0xc5) 12:39:25 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(0xffffffffffffffff, r1, 0x0) [ 174.074134][ T6918] ================================================================== [ 174.082213][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 174.090544][ T6918] [ 174.092874][ T6918] CPU: 1 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 174.099853][ T6936] serio: Serial port pts2 [ 174.104301][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.104305][ T6918] Call Trace: [ 174.104319][ T6918] dump_stack+0x1b0/0x21e [ 174.104327][ T6918] ? show_regs_print_info+0x12/0x12 [ 174.104340][ T6918] ? printk+0xc0/0x104 [ 174.136599][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 174.141440][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 174.146281][ T6918] print_address_description+0x96/0x5d0 [ 174.151815][ T6918] ? devkmsg_release+0x11c/0x11c [ 174.157694][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 174.162533][ T6918] ? ___preempt_schedule+0x16/0x20 [ 174.167630][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 174.172466][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 174.177303][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 174.182746][ T6918] __kasan_slab_free+0x102/0x220 [ 174.187671][ T6918] ? cmp_ex_search+0x6d/0x90 [ 174.192251][ T6918] ? __start___ex_table+0x7170/0xa620 [ 174.197608][ T6918] ? bsearch+0x9b/0xc0 [ 174.201661][ T6918] ? search_extable+0xf0/0xf0 [ 174.206323][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 174.212285][ T6918] ? __stop_notes+0xc/0xc [ 174.216599][ T6918] ? search_extable+0xaf/0xf0 [ 174.221263][ T6918] ? __rcu_read_lock+0x50/0x50 [ 174.226015][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 174.231113][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 174.237085][ T6918] ? __start___ex_table+0x7170/0xa620 [ 174.242442][ T6918] ? __start___ex_table+0x7170/0xa620 [ 174.247799][ T6918] ? kasan_report+0x27/0x50 [ 174.252288][ T6918] ? ex_handler_refcount+0x130/0x170 [ 174.257558][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 174.262416][ T6918] ? __start___ex_table+0x7178/0xa620 [ 174.267771][ T6918] ? fixup_exception+0x92/0xd0 [ 174.272518][ T6918] ? do_trap+0x148/0x340 [ 174.276747][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 174.282364][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 174.288328][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 174.294295][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 174.299652][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 174.304776][ T6918] kmem_cache_free+0xac/0x5c0 [ 174.309436][ T6918] ? kasan_report+0x27/0x50 [ 174.313947][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 174.318873][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 174.325016][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 174.330294][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 174.335567][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 174.340598][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 174.346652][ T6918] ? wait_woken+0x250/0x250 [ 174.351140][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 174.356410][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 174.362809][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 174.368275][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 174.373032][ T6918] ? local_bh_enable+0x20/0x20 [ 174.377779][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 174.383399][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 174.388406][ T6918] ? _local_bh_enable+0x30/0x30 [ 174.393263][ T6918] ? memset+0x1f/0x40 [ 174.397230][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 174.402791][ T6918] ? lock_sock_nested+0x25a/0x320 [ 174.407800][ T6918] ? xas_load+0x468/0x4c0 [ 174.412121][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 174.417826][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 174.423449][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 174.428284][ T6918] tipc_sendmsg+0x51/0x70 [ 174.432600][ T6918] kernel_sendmsg+0xe2/0x120 [ 174.437176][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 174.442034][ T6918] ? __receive_sock+0xb0/0xb0 [ 174.446701][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 174.452427][ T6918] ? __receive_sock+0xb0/0xb0 [ 174.457099][ T6918] sock_sendpage+0xd0/0x120 [ 174.461586][ T6918] pipe_to_sendpage+0x23b/0x300 [ 174.466422][ T6918] ? sock_fasync+0xf0/0xf0 [ 174.470836][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 174.476453][ T6918] ? atime_needs_update+0x378/0x570 [ 174.481657][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 174.487620][ T6918] __splice_from_pipe+0x2d3/0x870 [ 174.492650][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 174.498266][ T6918] generic_splice_sendpage+0x172/0x200 [ 174.503710][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 174.509239][ T6918] ? direct_splice_actor+0x25/0x120 [ 174.514421][ T6918] splice_direct_to_actor+0x496/0xb00 [ 174.519778][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 174.524784][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 174.529795][ T6918] ? security_file_permission+0x128/0x300 [ 174.535497][ T6918] do_splice_direct+0x279/0x3d0 [ 174.540333][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 174.545868][ T6918] ? security_file_permission+0x128/0x300 [ 174.551571][ T6918] do_sendfile+0x89d/0x1110 [ 174.556060][ T6918] ? compat_writev+0x390/0x390 [ 174.560815][ T6918] ? security_file_permission+0x128/0x300 [ 174.566539][ T6918] ? vfs_write+0x427/0x4f0 [ 174.570938][ T6918] ? fput_many+0x42/0x1a0 [ 174.575254][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 174.580437][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 174.585706][ T6918] do_syscall_64+0xcb/0x150 [ 174.590197][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 174.596072][ T6918] RIP: 0033:0x45de59 [ 174.599962][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 174.619549][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.627943][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 174.635899][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 174.643853][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 174.651807][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 174.659786][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 174.667743][ T6918] [ 174.670082][ T6918] Allocated by task 6918: [ 174.674397][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 174.679146][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 174.683984][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 174.688994][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 174.694433][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 174.699962][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 174.705406][ T6918] __iterate_interfaces+0x1fc/0x390 [ 174.710606][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 174.717523][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 174.722703][ T6918] __run_hrtimer+0x405/0x7a0 [ 174.727276][ T6918] hrtimer_run_softirq+0x320/0x450 [ 174.732372][ T6918] __do_softirq+0x22e/0x569 [ 174.736848][ T6918] [ 174.739158][ T6918] Freed by task 6918: [ 174.743128][ T6918] __kasan_slab_free+0x168/0x220 [ 174.748055][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 174.753413][ T6918] kmem_cache_free+0xac/0x5c0 [ 174.758073][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 174.763635][ T6918] __iterate_interfaces+0x1fc/0x390 [ 174.768819][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 174.775737][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 174.780921][ T6918] __run_hrtimer+0x405/0x7a0 [ 174.785516][ T6918] hrtimer_run_softirq+0x320/0x450 [ 174.790609][ T6918] __do_softirq+0x22e/0x569 [ 174.795113][ T6918] [ 174.797426][ T6918] The buggy address belongs to the object at ffff8881c8070dc0 [ 174.797426][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 174.812007][ T6918] The buggy address is located 0 bytes inside of [ 174.812007][ T6918] 240-byte region [ffff8881c8070dc0, ffff8881c8070eb0) [ 174.825093][ T6918] The buggy address belongs to the page: [ 174.830716][ T6918] page:ffffea0007201c00 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 174.839829][ T6918] flags: 0x8000000000000200(slab) [ 174.844843][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 174.853412][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 174.861976][ T6918] page dumped because: kasan: bad access detected [ 174.868365][ T6918] [ 174.870676][ T6918] Memory state around the buggy address: [ 174.876293][ T6918] ffff8881c8070c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.884336][ T6918] ffff8881c8070d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 174.892381][ T6918] >ffff8881c8070d80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 174.900421][ T6918] ^ [ 174.906558][ T6918] ffff8881c8070e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.914609][ T6918] ffff8881c8070e80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 174.922759][ T6918] ================================================================== 12:39:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000002c0)={0x1, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xe00, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000009a6e7019b8bb9f", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 12:39:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) [ 175.072041][ T6918] ================================================================== [ 175.080136][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 175.088462][ T6918] [ 175.090785][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 175.102224][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.112293][ T6918] Call Trace: [ 175.115600][ T6918] dump_stack+0x1b0/0x21e 12:39:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) keyctl$set_timeout(0xf, 0x0, 0xffffffffffffffe0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, @perf_config_ext={0x41, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x9) syz_80211_join_ibss(&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000200)=@random="6f3060b21a107b401c36d24593621e69792865f9ccf04a872548a2", 0x1b, 0x2cc) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x10a) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) 12:39:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000540)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f00000004c0)=""/118, 0x76}], 0x2, &(0x7f00000008c0)=""/32, 0x20}, 0xdd7}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/109, 0x6d}, 0x2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000001200)=""/167, 0xa7}, {0x0}], 0x3}}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"]}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x4, 0x3, 0x104000000, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 175.118638][ T6959] serio: Serial port pts2 [ 175.121049][ T6918] ? show_regs_print_info+0x12/0x12 [ 175.121058][ T6918] ? printk+0xc0/0x104 [ 175.121067][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 175.121080][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 175.121089][ T6918] print_address_description+0x96/0x5d0 [ 175.121096][ T6918] ? devkmsg_release+0x11c/0x11c [ 175.121104][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 175.121112][ T6918] ? ___preempt_schedule+0x16/0x20 [ 175.121126][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 175.169498][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 175.174322][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 175.179784][ T6918] __kasan_slab_free+0x102/0x220 [ 175.184713][ T6918] ? cmp_ex_search+0x6d/0x90 [ 175.189543][ T6918] ? __start___ex_table+0x7170/0xa620 [ 175.194892][ T6918] ? bsearch+0x9b/0xc0 [ 175.198948][ T6918] ? search_extable+0xf0/0xf0 [ 175.203612][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 175.209576][ T6918] ? __stop_notes+0xc/0xc [ 175.213890][ T6918] ? search_extable+0xaf/0xf0 [ 175.218552][ T6918] ? __rcu_read_lock+0x50/0x50 [ 175.223298][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 175.228400][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 175.234368][ T6918] ? __start___ex_table+0x7170/0xa620 [ 175.240073][ T6918] ? __start___ex_table+0x7170/0xa620 [ 175.245440][ T6918] ? kasan_report+0x27/0x50 [ 175.249928][ T6918] ? ex_handler_refcount+0x130/0x170 [ 175.255217][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 175.260052][ T6918] ? __start___ex_table+0x7178/0xa620 [ 175.265410][ T6918] ? fixup_exception+0x92/0xd0 [ 175.270221][ T6918] ? do_trap+0x148/0x340 [ 175.274452][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 175.280070][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 175.286910][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 175.292877][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 175.298234][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 175.303331][ T6918] kmem_cache_free+0xac/0x5c0 [ 175.307988][ T6918] ? kasan_report+0x27/0x50 [ 175.312481][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 175.317405][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 175.323548][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 175.328823][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 175.334192][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 175.339208][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 175.345264][ T6918] ? wait_woken+0x250/0x250 [ 175.349744][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 175.355019][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 175.361410][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 175.366844][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 175.371584][ T6918] ? local_bh_enable+0x20/0x20 [ 175.376324][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 175.381930][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 175.386926][ T6918] ? _local_bh_enable+0x30/0x30 [ 175.391769][ T6918] ? memset+0x1f/0x40 [ 175.395727][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 175.401248][ T6918] ? lock_sock_nested+0x25a/0x320 [ 175.406265][ T6918] ? xas_load+0x468/0x4c0 [ 175.410585][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 175.416281][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 175.421884][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 175.426715][ T6918] tipc_sendmsg+0x51/0x70 [ 175.431054][ T6918] kernel_sendmsg+0xe2/0x120 [ 175.435635][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 175.441157][ T6918] ? __receive_sock+0xb0/0xb0 [ 175.445831][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 175.451523][ T6918] ? __receive_sock+0xb0/0xb0 [ 175.456190][ T6918] sock_sendpage+0xd0/0x120 [ 175.460671][ T6918] pipe_to_sendpage+0x23b/0x300 [ 175.465496][ T6918] ? sock_fasync+0xf0/0xf0 [ 175.469886][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 175.475496][ T6918] ? atime_needs_update+0x378/0x570 [ 175.480686][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 175.486656][ T6918] __splice_from_pipe+0x2d3/0x870 [ 175.491753][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 175.497366][ T6918] generic_splice_sendpage+0x172/0x200 [ 175.503197][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 175.508721][ T6918] ? direct_splice_actor+0x25/0x120 [ 175.514642][ T6918] splice_direct_to_actor+0x496/0xb00 [ 175.520626][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 175.525623][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 175.530633][ T6918] ? security_file_permission+0x128/0x300 [ 175.536332][ T6918] do_splice_direct+0x279/0x3d0 [ 175.541175][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 175.546712][ T6918] ? security_file_permission+0x128/0x300 [ 175.552434][ T6918] do_sendfile+0x89d/0x1110 [ 175.556913][ T6918] ? compat_writev+0x390/0x390 [ 175.561648][ T6918] ? security_file_permission+0x128/0x300 [ 175.567361][ T6918] ? vfs_write+0x427/0x4f0 [ 175.571765][ T6918] ? fput_many+0x42/0x1a0 [ 175.576068][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 175.581240][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 175.586513][ T6918] do_syscall_64+0xcb/0x150 [ 175.591009][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 175.596890][ T6918] RIP: 0033:0x45de59 [ 175.600760][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 175.620350][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 175.628736][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 175.636729][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 175.644675][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 175.652622][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 175.660671][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 175.668619][ T6918] [ 175.670921][ T6918] Allocated by task 6918: [ 175.675233][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 175.679978][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 175.684807][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 175.689806][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 175.695238][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 175.700670][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 175.706105][ T6918] __iterate_interfaces+0x1fc/0x390 [ 175.711276][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 175.718180][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 175.723352][ T6918] __run_hrtimer+0x405/0x7a0 [ 175.727912][ T6918] hrtimer_run_softirq+0x320/0x450 [ 175.732994][ T6918] __do_softirq+0x22e/0x569 [ 175.737469][ T6918] [ 175.739784][ T6918] Freed by task 6918: [ 175.743741][ T6918] __kasan_slab_free+0x168/0x220 [ 175.748657][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 175.754001][ T6918] kmem_cache_free+0xac/0x5c0 [ 175.758698][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 175.764217][ T6918] __iterate_interfaces+0x1fc/0x390 [ 175.769406][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 175.776311][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 175.781478][ T6918] __run_hrtimer+0x405/0x7a0 [ 175.786039][ T6918] hrtimer_run_softirq+0x320/0x450 [ 175.791124][ T6918] __do_softirq+0x22e/0x569 [ 175.795618][ T6918] [ 175.797938][ T6918] The buggy address belongs to the object at ffff8881c8070640 [ 175.797938][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 175.812487][ T6918] The buggy address is located 0 bytes inside of [ 175.812487][ T6918] 240-byte region [ffff8881c8070640, ffff8881c8070730) [ 175.825576][ T6918] The buggy address belongs to the page: [ 175.831186][ T6918] page:ffffea0007201c00 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 175.840279][ T6918] flags: 0x8000000000000200(slab) [ 175.845279][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 175.853837][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 175.862406][ T6918] page dumped because: kasan: bad access detected [ 175.868802][ T6918] [ 175.871102][ T6918] Memory state around the buggy address: [ 175.876719][ T6918] ffff8881c8070500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.884782][ T6918] ffff8881c8070580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 175.892831][ T6918] >ffff8881c8070600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 175.900863][ T6918] ^ [ 175.906986][ T6918] ffff8881c8070680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.915019][ T6918] ffff8881c8070700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc 12:39:26 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r0}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6612, 0x0) [ 175.923050][ T6918] ================================================================== [ 175.974055][ T6918] ================================================================== [ 175.982126][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 175.990418][ T6918] [ 175.992738][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 176.004187][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.014227][ T6918] Call Trace: [ 176.017593][ T6918] dump_stack+0x1b0/0x21e [ 176.021913][ T6918] ? show_regs_print_info+0x12/0x12 [ 176.027099][ T6918] ? printk+0xc0/0x104 [ 176.031158][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.035998][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.040839][ T6918] print_address_description+0x96/0x5d0 [ 176.046488][ T6918] ? devkmsg_release+0x11c/0x11c [ 176.051415][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.056342][ T6918] ? ___preempt_schedule+0x16/0x20 [ 176.061441][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.066275][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.071114][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 176.076561][ T6918] __kasan_slab_free+0x102/0x220 [ 176.081488][ T6918] ? cmp_ex_search+0x6d/0x90 [ 176.086108][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.091449][ T6918] ? bsearch+0x9b/0xc0 [ 176.095486][ T6918] ? search_extable+0xf0/0xf0 [ 176.100175][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.106165][ T6918] ? __stop_notes+0xc/0xc [ 176.110496][ T6918] ? search_extable+0xaf/0xf0 [ 176.115145][ T6918] ? __rcu_read_lock+0x50/0x50 [ 176.119882][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 176.124964][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.131352][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.136694][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.142059][ T6918] ? kasan_report+0x27/0x50 [ 176.146717][ T6918] ? ex_handler_refcount+0x130/0x170 [ 176.151970][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 176.156813][ T6918] ? __start___ex_table+0x7178/0xa620 [ 176.162166][ T6918] ? fixup_exception+0x92/0xd0 [ 176.166910][ T6918] ? do_trap+0x148/0x340 [ 176.171135][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 176.176739][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.184103][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.190065][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 176.195412][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 176.200492][ T6918] kmem_cache_free+0xac/0x5c0 [ 176.205144][ T6918] ? kasan_report+0x27/0x50 [ 176.209621][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 176.214534][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 176.220658][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 176.225919][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 176.231176][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 176.236218][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 176.242275][ T6918] ? wait_woken+0x250/0x250 [ 176.246748][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 176.252025][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 176.258407][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 176.263837][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 176.268574][ T6918] ? local_bh_enable+0x20/0x20 [ 176.273315][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 176.278927][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 176.283939][ T6918] ? _local_bh_enable+0x30/0x30 [ 176.288760][ T6918] ? memset+0x1f/0x40 [ 176.292718][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 176.298242][ T6918] ? lock_sock_nested+0x25a/0x320 [ 176.303258][ T6918] ? xas_load+0x468/0x4c0 [ 176.307577][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 176.313269][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 176.318872][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 176.323690][ T6918] tipc_sendmsg+0x51/0x70 [ 176.327992][ T6918] kernel_sendmsg+0xe2/0x120 [ 176.332558][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 176.337395][ T6918] ? __receive_sock+0xb0/0xb0 [ 176.342052][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 176.347765][ T6918] ? __receive_sock+0xb0/0xb0 [ 176.352410][ T6918] sock_sendpage+0xd0/0x120 [ 176.356883][ T6918] pipe_to_sendpage+0x23b/0x300 [ 176.361717][ T6918] ? sock_fasync+0xf0/0xf0 [ 176.366105][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 176.371709][ T6918] ? atime_needs_update+0x378/0x570 [ 176.376878][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 176.382827][ T6918] __splice_from_pipe+0x2d3/0x870 [ 176.387820][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 176.393424][ T6918] generic_splice_sendpage+0x172/0x200 [ 176.398871][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 176.404393][ T6918] ? direct_splice_actor+0x25/0x120 [ 176.409590][ T6918] splice_direct_to_actor+0x496/0xb00 [ 176.414932][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 176.419951][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 176.424947][ T6918] ? security_file_permission+0x128/0x300 [ 176.431155][ T6918] do_splice_direct+0x279/0x3d0 [ 176.435976][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 176.441512][ T6918] ? security_file_permission+0x128/0x300 [ 176.447212][ T6918] do_sendfile+0x89d/0x1110 [ 176.451688][ T6918] ? compat_writev+0x390/0x390 [ 176.456440][ T6918] ? security_file_permission+0x128/0x300 [ 176.462131][ T6918] ? vfs_write+0x427/0x4f0 [ 176.466524][ T6918] ? fput_many+0x42/0x1a0 [ 176.470833][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 176.476009][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 176.481268][ T6918] do_syscall_64+0xcb/0x150 [ 176.485761][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 176.491644][ T6918] RIP: 0033:0x45de59 [ 176.495527][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 176.515103][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 176.523497][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 176.531439][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 176.539382][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 176.547326][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 176.555288][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 176.563251][ T6918] [ 176.565565][ T6918] Allocated by task 6918: [ 176.569874][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 176.574609][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 176.579430][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 176.584444][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 176.589885][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 176.595331][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 176.600777][ T6918] __iterate_interfaces+0x1fc/0x390 [ 176.605944][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 176.612857][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 176.618059][ T6918] __run_hrtimer+0x405/0x7a0 [ 176.622634][ T6918] hrtimer_run_softirq+0x320/0x450 [ 176.629538][ T6918] __do_softirq+0x22e/0x569 [ 176.634024][ T6918] [ 176.636331][ T6918] Freed by task 6918: [ 176.640320][ T6918] __kasan_slab_free+0x168/0x220 [ 176.645234][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 176.651447][ T6918] kmem_cache_free+0xac/0x5c0 [ 176.656102][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 176.661628][ T6918] __iterate_interfaces+0x1fc/0x390 [ 176.666799][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 176.673707][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 176.678887][ T6918] __run_hrtimer+0x405/0x7a0 [ 176.683452][ T6918] hrtimer_run_softirq+0x320/0x450 [ 176.688560][ T6918] __do_softirq+0x22e/0x569 [ 176.693050][ T6918] [ 176.695351][ T6918] The buggy address belongs to the object at ffff8881d7094c80 [ 176.695351][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 176.709893][ T6918] The buggy address is located 0 bytes inside of [ 176.709893][ T6918] 240-byte region [ffff8881d7094c80, ffff8881d7094d70) [ 176.722960][ T6918] The buggy address belongs to the page: [ 176.728595][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 176.737670][ T6918] flags: 0x8000000000000200(slab) [ 176.742668][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 176.751228][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 176.759797][ T6918] page dumped because: kasan: bad access detected [ 176.766196][ T6918] [ 176.768494][ T6918] Memory state around the buggy address: [ 176.774097][ T6918] ffff8881d7094b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.782329][ T6918] ffff8881d7094c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 176.790393][ T6918] >ffff8881d7094c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.798433][ T6918] ^ [ 176.802480][ T6918] ffff8881d7094d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 176.810513][ T6918] ffff8881d7094d80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 176.818545][ T6918] ================================================================== [ 176.829443][ T6918] ================================================================== [ 176.837511][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 176.845816][ T6918] [ 176.848137][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 176.859568][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.869618][ T6918] Call Trace: [ 176.872898][ T6918] dump_stack+0x1b0/0x21e [ 176.877198][ T6918] ? show_regs_print_info+0x12/0x12 [ 176.882374][ T6918] ? printk+0xc0/0x104 [ 176.886423][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.891244][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.896080][ T6918] print_address_description+0x96/0x5d0 [ 176.902550][ T6918] ? devkmsg_release+0x11c/0x11c [ 176.907463][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.912293][ T6918] ? ___preempt_schedule+0x16/0x20 [ 176.917395][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.922223][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 176.927058][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 176.932515][ T6918] __kasan_slab_free+0x102/0x220 [ 176.937447][ T6918] ? cmp_ex_search+0x6d/0x90 [ 176.942007][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.947368][ T6918] ? bsearch+0x9b/0xc0 [ 176.951433][ T6918] ? search_extable+0xf0/0xf0 [ 176.956081][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.962031][ T6918] ? __stop_notes+0xc/0xc [ 176.966331][ T6918] ? search_extable+0xaf/0xf0 [ 176.970979][ T6918] ? __rcu_read_lock+0x50/0x50 [ 176.975715][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 176.980798][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 176.986771][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.992117][ T6918] ? __start___ex_table+0x7170/0xa620 [ 176.997609][ T6918] ? kasan_report+0x27/0x50 [ 177.002120][ T6918] ? ex_handler_refcount+0x130/0x170 [ 177.007408][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 177.012235][ T6918] ? __start___ex_table+0x7178/0xa620 [ 177.017597][ T6918] ? fixup_exception+0x92/0xd0 [ 177.022340][ T6918] ? do_trap+0x148/0x340 [ 177.026555][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 177.032164][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.038127][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.044111][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 177.049456][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 177.054537][ T6918] kmem_cache_free+0xac/0x5c0 [ 177.059187][ T6918] ? kasan_report+0x27/0x50 [ 177.063662][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 177.068572][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 177.074710][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 177.079984][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 177.085260][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 177.090286][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 177.096334][ T6918] ? wait_woken+0x250/0x250 [ 177.100809][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 177.106070][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 177.112492][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 177.118208][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 177.122943][ T6918] ? local_bh_enable+0x20/0x20 [ 177.127712][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 177.133338][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 177.138334][ T6918] ? _local_bh_enable+0x30/0x30 [ 177.143178][ T6918] ? memset+0x1f/0x40 [ 177.147129][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 177.152644][ T6918] ? lock_sock_nested+0x25a/0x320 [ 177.157638][ T6918] ? xas_load+0x468/0x4c0 [ 177.162029][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 177.167722][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 177.173326][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 177.178154][ T6918] tipc_sendmsg+0x51/0x70 [ 177.182469][ T6918] kernel_sendmsg+0xe2/0x120 [ 177.187031][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 177.191855][ T6918] ? __receive_sock+0xb0/0xb0 [ 177.196512][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 177.203003][ T6918] ? __receive_sock+0xb0/0xb0 [ 177.207681][ T6918] sock_sendpage+0xd0/0x120 [ 177.212174][ T6918] pipe_to_sendpage+0x23b/0x300 [ 177.217029][ T6918] ? sock_fasync+0xf0/0xf0 [ 177.221425][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 177.227040][ T6918] ? atime_needs_update+0x378/0x570 [ 177.232226][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 177.239136][ T6918] __splice_from_pipe+0x2d3/0x870 [ 177.244141][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 177.249801][ T6918] generic_splice_sendpage+0x172/0x200 [ 177.255238][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 177.260820][ T6918] ? direct_splice_actor+0x25/0x120 [ 177.266028][ T6918] splice_direct_to_actor+0x496/0xb00 [ 177.271389][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 177.276398][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 177.281409][ T6918] ? security_file_permission+0x128/0x300 [ 177.287129][ T6918] do_splice_direct+0x279/0x3d0 [ 177.292037][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 177.297556][ T6918] ? security_file_permission+0x128/0x300 [ 177.303267][ T6918] do_sendfile+0x89d/0x1110 [ 177.307741][ T6918] ? compat_writev+0x390/0x390 [ 177.312489][ T6918] ? security_file_permission+0x128/0x300 [ 177.318185][ T6918] ? vfs_write+0x427/0x4f0 [ 177.322587][ T6918] ? fput_many+0x42/0x1a0 [ 177.326886][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 177.332055][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 177.337337][ T6918] do_syscall_64+0xcb/0x150 [ 177.341831][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 177.347713][ T6918] RIP: 0033:0x45de59 [ 177.351579][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 177.371157][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.379553][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 177.387592][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 177.395543][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 177.403502][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 177.411451][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 177.419407][ T6918] [ 177.421742][ T6918] Allocated by task 6918: [ 177.426061][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 177.430823][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 177.435663][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 177.440680][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 177.446110][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 177.451538][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 177.456967][ T6918] __iterate_interfaces+0x1fc/0x390 [ 177.462134][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 177.469038][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 177.474204][ T6918] __run_hrtimer+0x405/0x7a0 [ 177.478782][ T6918] hrtimer_run_softirq+0x320/0x450 [ 177.483863][ T6918] __do_softirq+0x22e/0x569 [ 177.488338][ T6918] [ 177.490703][ T6918] Freed by task 6918: [ 177.494709][ T6918] __kasan_slab_free+0x168/0x220 [ 177.499639][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 177.505974][ T6918] kmem_cache_free+0xac/0x5c0 [ 177.510642][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 177.516162][ T6918] __iterate_interfaces+0x1fc/0x390 [ 177.521339][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 177.528265][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 177.533432][ T6918] __run_hrtimer+0x405/0x7a0 [ 177.537994][ T6918] hrtimer_run_softirq+0x320/0x450 [ 177.543076][ T6918] __do_softirq+0x22e/0x569 [ 177.548509][ T6918] [ 177.550830][ T6918] The buggy address belongs to the object at ffff8881d70943c0 [ 177.550830][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 177.565374][ T6918] The buggy address is located 0 bytes inside of [ 177.565374][ T6918] 240-byte region [ffff8881d70943c0, ffff8881d70944b0) [ 177.578463][ T6918] The buggy address belongs to the page: [ 177.584068][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 177.593162][ T6918] flags: 0x8000000000000200(slab) [ 177.598183][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 177.606753][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 177.615319][ T6918] page dumped because: kasan: bad access detected [ 177.621809][ T6918] [ 177.624117][ T6918] Memory state around the buggy address: [ 177.629722][ T6918] ffff8881d7094280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.637785][ T6918] ffff8881d7094300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 177.645816][ T6918] >ffff8881d7094380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 177.653868][ T6918] ^ [ 177.659999][ T6918] ffff8881d7094400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.668032][ T6918] ffff8881d7094480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 177.676079][ T6918] ================================================================== [ 177.685966][ T6918] ================================================================== [ 177.694045][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 177.702346][ T6918] [ 177.704670][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 177.716102][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.726138][ T6918] Call Trace: [ 177.729405][ T6918] dump_stack+0x1b0/0x21e [ 177.733708][ T6918] ? show_regs_print_info+0x12/0x12 [ 177.738914][ T6918] ? printk+0xc0/0x104 [ 177.742955][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 177.747774][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 177.752595][ T6918] print_address_description+0x96/0x5d0 [ 177.758126][ T6918] ? devkmsg_release+0x11c/0x11c [ 177.763063][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 177.767901][ T6918] ? ___preempt_schedule+0x16/0x20 [ 177.773002][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 177.777826][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 177.782647][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 177.788079][ T6918] __kasan_slab_free+0x102/0x220 [ 177.793079][ T6918] ? cmp_ex_search+0x6d/0x90 [ 177.797651][ T6918] ? __start___ex_table+0x7170/0xa620 [ 177.803006][ T6918] ? bsearch+0x9b/0xc0 [ 177.807044][ T6918] ? search_extable+0xf0/0xf0 [ 177.811753][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.817712][ T6918] ? __stop_notes+0xc/0xc [ 177.822043][ T6918] ? search_extable+0xaf/0xf0 [ 177.826699][ T6918] ? __rcu_read_lock+0x50/0x50 [ 177.831450][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 177.836534][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.842485][ T6918] ? __start___ex_table+0x7170/0xa620 [ 177.847873][ T6918] ? __start___ex_table+0x7170/0xa620 [ 177.853866][ T6918] ? kasan_report+0x27/0x50 [ 177.858349][ T6918] ? ex_handler_refcount+0x130/0x170 [ 177.863613][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 177.868440][ T6918] ? __start___ex_table+0x7178/0xa620 [ 177.873782][ T6918] ? fixup_exception+0x92/0xd0 [ 177.878515][ T6918] ? do_trap+0x148/0x340 [ 177.882727][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 177.888329][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.894323][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 177.900282][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 177.905653][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 177.910746][ T6918] kmem_cache_free+0xac/0x5c0 [ 177.915397][ T6918] ? kasan_report+0x27/0x50 [ 177.919875][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 177.924809][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 177.930962][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 177.936229][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 177.941484][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 177.946498][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 177.952536][ T6918] ? wait_woken+0x250/0x250 [ 177.957007][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 177.962268][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 177.968659][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 177.974088][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 177.978826][ T6918] ? local_bh_enable+0x20/0x20 [ 177.983560][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 177.989240][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 177.994243][ T6918] ? _local_bh_enable+0x30/0x30 [ 177.999069][ T6918] ? memset+0x1f/0x40 [ 178.003037][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 178.008566][ T6918] ? lock_sock_nested+0x25a/0x320 [ 178.013580][ T6918] ? xas_load+0x468/0x4c0 [ 178.017899][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 178.023592][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 178.029197][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 178.034657][ T6918] tipc_sendmsg+0x51/0x70 [ 178.038973][ T6918] kernel_sendmsg+0xe2/0x120 [ 178.043546][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 178.048389][ T6918] ? __receive_sock+0xb0/0xb0 [ 178.053068][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 178.058801][ T6918] ? __receive_sock+0xb0/0xb0 [ 178.063455][ T6918] sock_sendpage+0xd0/0x120 [ 178.067940][ T6918] pipe_to_sendpage+0x23b/0x300 [ 178.073202][ T6918] ? sock_fasync+0xf0/0xf0 [ 178.077598][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 178.083462][ T6918] ? atime_needs_update+0x378/0x570 [ 178.088639][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 178.094596][ T6918] __splice_from_pipe+0x2d3/0x870 [ 178.099603][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 178.105219][ T6918] generic_splice_sendpage+0x172/0x200 [ 178.110656][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 178.116189][ T6918] ? direct_splice_actor+0x25/0x120 [ 178.121366][ T6918] splice_direct_to_actor+0x496/0xb00 [ 178.126727][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 178.131728][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 178.136731][ T6918] ? security_file_permission+0x128/0x300 [ 178.142457][ T6918] do_splice_direct+0x279/0x3d0 [ 178.147303][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 178.152839][ T6918] ? security_file_permission+0x128/0x300 [ 178.158528][ T6918] do_sendfile+0x89d/0x1110 [ 178.163001][ T6918] ? compat_writev+0x390/0x390 [ 178.167743][ T6918] ? security_file_permission+0x128/0x300 [ 178.173466][ T6918] ? vfs_write+0x427/0x4f0 [ 178.177858][ T6918] ? fput_many+0x42/0x1a0 [ 178.182168][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 178.187345][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 178.192665][ T6918] do_syscall_64+0xcb/0x150 [ 178.197196][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 178.203056][ T6918] RIP: 0033:0x45de59 [ 178.206940][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 178.226529][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 178.234941][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 178.243597][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 178.251544][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 178.259502][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 178.268161][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 178.276106][ T6918] [ 178.278424][ T6918] Allocated by task 6918: [ 178.282727][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 178.287462][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 178.292286][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 178.297281][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 178.302708][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 178.308145][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 178.313573][ T6918] __iterate_interfaces+0x1fc/0x390 [ 178.318749][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 178.325668][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 178.330847][ T6918] __run_hrtimer+0x405/0x7a0 [ 178.335501][ T6918] hrtimer_run_softirq+0x320/0x450 [ 178.340591][ T6918] __do_softirq+0x22e/0x569 [ 178.345057][ T6918] [ 178.347380][ T6918] Freed by task 6918: [ 178.351351][ T6918] __kasan_slab_free+0x168/0x220 [ 178.356274][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 178.361628][ T6918] kmem_cache_free+0xac/0x5c0 [ 178.366293][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 178.372614][ T6918] __iterate_interfaces+0x1fc/0x390 [ 178.377803][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 178.384717][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 178.389884][ T6918] __run_hrtimer+0x405/0x7a0 [ 178.394449][ T6918] hrtimer_run_softirq+0x320/0x450 [ 178.399553][ T6918] __do_softirq+0x22e/0x569 [ 178.404020][ T6918] [ 178.406328][ T6918] The buggy address belongs to the object at ffff8881d7094dc0 [ 178.406328][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 178.420869][ T6918] The buggy address is located 0 bytes inside of [ 178.420869][ T6918] 240-byte region [ffff8881d7094dc0, ffff8881d7094eb0) [ 178.433947][ T6918] The buggy address belongs to the page: [ 178.439556][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 178.449777][ T6918] flags: 0x8000000000000200(slab) [ 178.454771][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 178.463333][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 178.472171][ T6918] page dumped because: kasan: bad access detected [ 178.478557][ T6918] [ 178.480864][ T6918] Memory state around the buggy address: [ 178.487002][ T6918] ffff8881d7094c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.495032][ T6918] ffff8881d7094d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 178.503079][ T6918] >ffff8881d7094d80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 178.511129][ T6918] ^ [ 178.517268][ T6918] ffff8881d7094e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.525298][ T6918] ffff8881d7094e80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 178.534369][ T6918] ================================================================== [ 178.554817][ T6918] ================================================================== [ 178.562923][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 178.571223][ T6918] [ 178.573547][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 178.584986][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.595020][ T6918] Call Trace: [ 178.598282][ T6918] dump_stack+0x1b0/0x21e [ 178.602602][ T6918] ? show_regs_print_info+0x12/0x12 [ 178.607780][ T6918] ? printk+0xc0/0x104 [ 178.611829][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 178.616669][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 178.621495][ T6918] print_address_description+0x96/0x5d0 [ 178.627026][ T6918] ? devkmsg_release+0x11c/0x11c [ 178.631946][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 178.636766][ T6918] ? ___preempt_schedule+0x16/0x20 [ 178.641848][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 178.646686][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 178.651681][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 178.657114][ T6918] __kasan_slab_free+0x102/0x220 [ 178.662021][ T6918] ? cmp_ex_search+0x6d/0x90 [ 178.666606][ T6918] ? __start___ex_table+0x7170/0xa620 [ 178.671993][ T6918] ? bsearch+0x9b/0xc0 [ 178.676041][ T6918] ? search_extable+0xf0/0xf0 [ 178.680736][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 178.686713][ T6918] ? __stop_notes+0xc/0xc [ 178.691026][ T6918] ? search_extable+0xaf/0xf0 [ 178.695684][ T6918] ? __rcu_read_lock+0x50/0x50 [ 178.700474][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 178.705575][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 178.711539][ T6918] ? __start___ex_table+0x7170/0xa620 [ 178.716918][ T6918] ? __start___ex_table+0x7170/0xa620 [ 178.722366][ T6918] ? kasan_report+0x27/0x50 [ 178.726854][ T6918] ? ex_handler_refcount+0x130/0x170 [ 178.732114][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 178.736946][ T6918] ? __start___ex_table+0x7178/0xa620 [ 178.742298][ T6918] ? fixup_exception+0x92/0xd0 [ 178.747032][ T6918] ? do_trap+0x148/0x340 [ 178.751261][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 178.756876][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 178.762850][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 178.768827][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 178.774179][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 178.779315][ T6918] kmem_cache_free+0xac/0x5c0 [ 178.783964][ T6918] ? kasan_report+0x27/0x50 [ 178.788441][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 178.793358][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 178.799496][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 178.804757][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 178.810015][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 178.815010][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 178.821047][ T6918] ? wait_woken+0x250/0x250 [ 178.825519][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 178.830776][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 178.837158][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 178.842607][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 178.847344][ T6918] ? local_bh_enable+0x20/0x20 [ 178.852091][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 178.857704][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 178.865479][ T6918] ? _local_bh_enable+0x30/0x30 [ 178.870305][ T6918] ? memset+0x1f/0x40 [ 178.874285][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 178.879804][ T6918] ? lock_sock_nested+0x25a/0x320 [ 178.884798][ T6918] ? xas_load+0x468/0x4c0 [ 178.889120][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 178.894820][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 178.900432][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 178.905259][ T6918] tipc_sendmsg+0x51/0x70 [ 178.909582][ T6918] kernel_sendmsg+0xe2/0x120 [ 178.914173][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 178.919021][ T6918] ? __receive_sock+0xb0/0xb0 [ 178.923680][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 178.929407][ T6918] ? __receive_sock+0xb0/0xb0 [ 178.934061][ T6918] sock_sendpage+0xd0/0x120 [ 178.938546][ T6918] pipe_to_sendpage+0x23b/0x300 [ 178.943366][ T6918] ? sock_fasync+0xf0/0xf0 [ 178.947781][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 178.953418][ T6918] ? atime_needs_update+0x378/0x570 [ 178.958605][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 178.964564][ T6918] __splice_from_pipe+0x2d3/0x870 [ 178.969558][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 178.975161][ T6918] generic_splice_sendpage+0x172/0x200 [ 178.980596][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 178.989160][ T6918] ? direct_splice_actor+0x25/0x120 [ 178.994335][ T6918] splice_direct_to_actor+0x496/0xb00 [ 178.999680][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 179.004685][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 179.010500][ T6918] ? security_file_permission+0x128/0x300 [ 179.016816][ T6918] do_splice_direct+0x279/0x3d0 [ 179.021660][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 179.027199][ T6918] ? security_file_permission+0x128/0x300 [ 179.032888][ T6918] do_sendfile+0x89d/0x1110 [ 179.037369][ T6918] ? compat_writev+0x390/0x390 [ 179.042148][ T6918] ? security_file_permission+0x128/0x300 [ 179.048816][ T6918] ? vfs_write+0x427/0x4f0 [ 179.053223][ T6918] ? fput_many+0x42/0x1a0 [ 179.058392][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 179.063568][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 179.068854][ T6918] do_syscall_64+0xcb/0x150 [ 179.073438][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 179.079299][ T6918] RIP: 0033:0x45de59 [ 179.083184][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.102757][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.111155][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 179.119102][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 179.127065][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 179.135006][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 179.142946][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 179.150890][ T6918] [ 179.153211][ T6918] Allocated by task 6918: [ 179.157511][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 179.162265][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 179.167086][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 179.172107][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 179.177632][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 179.183068][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 179.188505][ T6918] __iterate_interfaces+0x1fc/0x390 [ 179.193693][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 179.200613][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 179.205793][ T6918] __run_hrtimer+0x405/0x7a0 [ 179.210369][ T6918] hrtimer_run_softirq+0x320/0x450 [ 179.215483][ T6918] __do_softirq+0x22e/0x569 [ 179.219950][ T6918] [ 179.222254][ T6918] Freed by task 6918: [ 179.226237][ T6918] __kasan_slab_free+0x168/0x220 [ 179.231149][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 179.236499][ T6918] kmem_cache_free+0xac/0x5c0 [ 179.241150][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 179.246664][ T6918] __iterate_interfaces+0x1fc/0x390 [ 179.251855][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 179.258787][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 179.263973][ T6918] __run_hrtimer+0x405/0x7a0 [ 179.268539][ T6918] hrtimer_run_softirq+0x320/0x450 [ 179.273634][ T6918] __do_softirq+0x22e/0x569 [ 179.278111][ T6918] [ 179.280411][ T6918] The buggy address belongs to the object at ffff8881d7094640 [ 179.280411][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 179.294998][ T6918] The buggy address is located 0 bytes inside of [ 179.294998][ T6918] 240-byte region [ffff8881d7094640, ffff8881d7094730) [ 179.308065][ T6918] The buggy address belongs to the page: [ 179.313668][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 179.322740][ T6918] flags: 0x8000000000000200(slab) [ 179.327755][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 179.336366][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 179.344927][ T6918] page dumped because: kasan: bad access detected [ 179.351305][ T6918] [ 179.353603][ T6918] Memory state around the buggy address: [ 179.359303][ T6918] ffff8881d7094500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.367333][ T6918] ffff8881d7094580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 179.375388][ T6918] >ffff8881d7094600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 179.383415][ T6918] ^ [ 179.389549][ T6918] ffff8881d7094680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.397579][ T6918] ffff8881d7094700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 179.405606][ T6918] ================================================================== [ 179.415941][ T6918] ================================================================== [ 179.424006][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 179.432306][ T6918] [ 179.434629][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 179.446152][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.456206][ T6918] Call Trace: [ 179.460423][ T6918] dump_stack+0x1b0/0x21e [ 179.464724][ T6918] ? show_regs_print_info+0x12/0x12 [ 179.469892][ T6918] ? printk+0xc0/0x104 [ 179.473930][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 179.478756][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 179.483606][ T6918] print_address_description+0x96/0x5d0 [ 179.489123][ T6918] ? devkmsg_release+0x11c/0x11c [ 179.494029][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 179.498849][ T6918] ? ___preempt_schedule+0x16/0x20 [ 179.503927][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 179.508745][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 179.513574][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 179.519023][ T6918] __kasan_slab_free+0x102/0x220 [ 179.523928][ T6918] ? cmp_ex_search+0x6d/0x90 [ 179.528510][ T6918] ? __start___ex_table+0x7170/0xa620 [ 179.533868][ T6918] ? bsearch+0x9b/0xc0 [ 179.537953][ T6918] ? search_extable+0xf0/0xf0 [ 179.542606][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 179.548563][ T6918] ? __stop_notes+0xc/0xc [ 179.552881][ T6918] ? search_extable+0xaf/0xf0 [ 179.557529][ T6918] ? __rcu_read_lock+0x50/0x50 [ 179.562262][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 179.567387][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 179.573338][ T6918] ? __start___ex_table+0x7170/0xa620 [ 179.578783][ T6918] ? __start___ex_table+0x7170/0xa620 [ 179.584128][ T6918] ? kasan_report+0x27/0x50 [ 179.588614][ T6918] ? ex_handler_refcount+0x130/0x170 [ 179.593869][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 179.598707][ T6918] ? __start___ex_table+0x7178/0xa620 [ 179.604047][ T6918] ? fixup_exception+0x92/0xd0 [ 179.608778][ T6918] ? do_trap+0x148/0x340 [ 179.612987][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 179.618586][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 179.624532][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 179.630480][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 179.635837][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 179.640917][ T6918] kmem_cache_free+0xac/0x5c0 [ 179.645569][ T6918] ? kasan_report+0x27/0x50 [ 179.650060][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 179.654996][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 179.661122][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 179.666422][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 179.671685][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 179.676704][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 179.682787][ T6918] ? wait_woken+0x250/0x250 [ 179.687259][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 179.692531][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 179.698916][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 179.704375][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 179.709121][ T6918] ? local_bh_enable+0x20/0x20 [ 179.713857][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 179.719491][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 179.724484][ T6918] ? _local_bh_enable+0x30/0x30 [ 179.729302][ T6918] ? memset+0x1f/0x40 [ 179.733257][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 179.738772][ T6918] ? lock_sock_nested+0x25a/0x320 [ 179.743772][ T6918] ? xas_load+0x468/0x4c0 [ 179.748095][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 179.753815][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 179.759434][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 179.764252][ T6918] tipc_sendmsg+0x51/0x70 [ 179.768552][ T6918] kernel_sendmsg+0xe2/0x120 [ 179.773112][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 179.777939][ T6918] ? __receive_sock+0xb0/0xb0 [ 179.782598][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 179.788288][ T6918] ? __receive_sock+0xb0/0xb0 [ 179.792937][ T6918] sock_sendpage+0xd0/0x120 [ 179.797410][ T6918] pipe_to_sendpage+0x23b/0x300 [ 179.802234][ T6918] ? sock_fasync+0xf0/0xf0 [ 179.806632][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 179.812237][ T6918] ? atime_needs_update+0x378/0x570 [ 179.817406][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 179.823354][ T6918] __splice_from_pipe+0x2d3/0x870 [ 179.828350][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 179.834011][ T6918] generic_splice_sendpage+0x172/0x200 [ 179.839480][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 179.844994][ T6918] ? direct_splice_actor+0x25/0x120 [ 179.850283][ T6918] splice_direct_to_actor+0x496/0xb00 [ 179.855631][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 179.860646][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 179.865642][ T6918] ? security_file_permission+0x128/0x300 [ 179.871327][ T6918] do_splice_direct+0x279/0x3d0 [ 179.876165][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 179.881682][ T6918] ? security_file_permission+0x128/0x300 [ 179.887387][ T6918] do_sendfile+0x89d/0x1110 [ 179.891876][ T6918] ? compat_writev+0x390/0x390 [ 179.896614][ T6918] ? security_file_permission+0x128/0x300 [ 179.902304][ T6918] ? vfs_write+0x427/0x4f0 [ 179.906710][ T6918] ? fput_many+0x42/0x1a0 [ 179.918825][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 179.923996][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 179.929864][ T6918] do_syscall_64+0xcb/0x150 [ 179.934363][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 179.940245][ T6918] RIP: 0033:0x45de59 [ 179.944110][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 179.963707][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.972087][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 179.980045][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 179.988003][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 179.995973][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 180.003917][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 180.011859][ T6918] [ 180.014161][ T6918] Allocated by task 6918: [ 180.018463][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 180.023198][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 180.028022][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 180.033019][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 180.038471][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 180.043900][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 180.049331][ T6918] __iterate_interfaces+0x1fc/0x390 [ 180.054588][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 180.061493][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 180.066669][ T6918] __run_hrtimer+0x405/0x7a0 [ 180.071240][ T6918] hrtimer_run_softirq+0x320/0x450 [ 180.076429][ T6918] __do_softirq+0x22e/0x569 [ 180.080913][ T6918] [ 180.083211][ T6918] Freed by task 6918: [ 180.087162][ T6918] __kasan_slab_free+0x168/0x220 [ 180.092092][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 180.097450][ T6918] kmem_cache_free+0xac/0x5c0 [ 180.102098][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 180.107639][ T6918] __iterate_interfaces+0x1fc/0x390 [ 180.112860][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 180.119764][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 180.124961][ T6918] __run_hrtimer+0x405/0x7a0 [ 180.129529][ T6918] hrtimer_run_softirq+0x320/0x450 [ 180.135045][ T6918] __do_softirq+0x22e/0x569 [ 180.139514][ T6918] [ 180.141820][ T6918] The buggy address belongs to the object at ffff8881d7094280 [ 180.141820][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 180.156426][ T6918] The buggy address is located 0 bytes inside of [ 180.156426][ T6918] 240-byte region [ffff8881d7094280, ffff8881d7094370) [ 180.169504][ T6918] The buggy address belongs to the page: [ 180.175123][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 180.184222][ T6918] flags: 0x8000000000000200(slab) [ 180.189215][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 180.197770][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 180.206317][ T6918] page dumped because: kasan: bad access detected [ 180.212706][ T6918] [ 180.215053][ T6918] Memory state around the buggy address: [ 180.220651][ T6918] ffff8881d7094180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.228680][ T6918] ffff8881d7094200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 180.236715][ T6918] >ffff8881d7094280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 180.244746][ T6918] ^ [ 180.248799][ T6918] ffff8881d7094300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 180.256835][ T6918] ffff8881d7094380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 180.264894][ T6918] ================================================================== [ 180.274733][ T6918] ================================================================== [ 180.282804][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 180.291104][ T6918] [ 180.293425][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 180.304853][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.314888][ T6918] Call Trace: [ 180.318168][ T6918] dump_stack+0x1b0/0x21e [ 180.322511][ T6918] ? show_regs_print_info+0x12/0x12 [ 180.327678][ T6918] ? printk+0xc0/0x104 [ 180.331717][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 180.336542][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 180.341369][ T6918] print_address_description+0x96/0x5d0 [ 180.346882][ T6918] ? devkmsg_release+0x11c/0x11c [ 180.351789][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 180.356614][ T6918] ? ___preempt_schedule+0x16/0x20 [ 180.361701][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 180.366520][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 180.371360][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 180.376789][ T6918] __kasan_slab_free+0x102/0x220 [ 180.381694][ T6918] ? cmp_ex_search+0x6d/0x90 [ 180.386253][ T6918] ? __start___ex_table+0x7170/0xa620 [ 180.391598][ T6918] ? bsearch+0x9b/0xc0 [ 180.395637][ T6918] ? search_extable+0xf0/0xf0 [ 180.400291][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 180.406242][ T6918] ? __stop_notes+0xc/0xc [ 180.410553][ T6918] ? search_extable+0xaf/0xf0 [ 180.415199][ T6918] ? __rcu_read_lock+0x50/0x50 [ 180.419942][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 180.425049][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 180.431000][ T6918] ? __start___ex_table+0x7170/0xa620 [ 180.436340][ T6918] ? __start___ex_table+0x7170/0xa620 [ 180.441679][ T6918] ? kasan_report+0x27/0x50 [ 180.446156][ T6918] ? ex_handler_refcount+0x130/0x170 [ 180.451408][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 180.456227][ T6918] ? __start___ex_table+0x7178/0xa620 [ 180.461566][ T6918] ? fixup_exception+0x92/0xd0 [ 180.466303][ T6918] ? do_trap+0x148/0x340 [ 180.470524][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 180.476126][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 180.482090][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 180.488056][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 180.493411][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 180.498503][ T6918] kmem_cache_free+0xac/0x5c0 [ 180.503273][ T6918] ? kasan_report+0x27/0x50 [ 180.507749][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 180.512658][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 180.518781][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 180.524036][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 180.529290][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 180.534293][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 180.540364][ T6918] ? wait_woken+0x250/0x250 [ 180.544865][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 180.550127][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 180.556528][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 180.561963][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 180.566701][ T6918] ? local_bh_enable+0x20/0x20 [ 180.571436][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 180.577039][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 180.582052][ T6918] ? _local_bh_enable+0x30/0x30 [ 180.586871][ T6918] ? memset+0x1f/0x40 [ 180.590833][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 180.596351][ T6918] ? lock_sock_nested+0x25a/0x320 [ 180.601345][ T6918] ? xas_load+0x468/0x4c0 [ 180.605646][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 180.611336][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 180.616956][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 180.621777][ T6918] tipc_sendmsg+0x51/0x70 [ 180.626081][ T6918] kernel_sendmsg+0xe2/0x120 [ 180.630658][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 180.635479][ T6918] ? __receive_sock+0xb0/0xb0 [ 180.640166][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 180.645879][ T6918] ? __receive_sock+0xb0/0xb0 [ 180.650580][ T6918] sock_sendpage+0xd0/0x120 [ 180.655084][ T6918] pipe_to_sendpage+0x23b/0x300 [ 180.659916][ T6918] ? sock_fasync+0xf0/0xf0 [ 180.664314][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 180.669931][ T6918] ? atime_needs_update+0x378/0x570 [ 180.675116][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 180.681104][ T6918] __splice_from_pipe+0x2d3/0x870 [ 180.686097][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 180.691705][ T6918] generic_splice_sendpage+0x172/0x200 [ 180.697143][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 180.702657][ T6918] ? direct_splice_actor+0x25/0x120 [ 180.707848][ T6918] splice_direct_to_actor+0x496/0xb00 [ 180.713191][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 180.718188][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 180.723192][ T6918] ? security_file_permission+0x128/0x300 [ 180.728914][ T6918] do_splice_direct+0x279/0x3d0 [ 180.733767][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 180.739301][ T6918] ? security_file_permission+0x128/0x300 [ 180.744998][ T6918] do_sendfile+0x89d/0x1110 [ 180.749476][ T6918] ? compat_writev+0x390/0x390 [ 180.754209][ T6918] ? security_file_permission+0x128/0x300 [ 180.759953][ T6918] ? vfs_write+0x427/0x4f0 [ 180.764343][ T6918] ? fput_many+0x42/0x1a0 [ 180.768650][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 180.773827][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 180.779089][ T6918] do_syscall_64+0xcb/0x150 [ 180.783568][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 180.789473][ T6918] RIP: 0033:0x45de59 [ 180.793347][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 180.812944][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.821339][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 180.829289][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 180.837232][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 180.845171][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 180.853131][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 180.861071][ T6918] [ 180.863374][ T6918] Allocated by task 6918: [ 180.867674][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 180.872412][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 180.877357][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 180.882351][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 180.887862][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 180.893310][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 180.898738][ T6918] __iterate_interfaces+0x1fc/0x390 [ 180.903914][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 180.910834][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 180.916017][ T6918] __run_hrtimer+0x405/0x7a0 [ 180.920593][ T6918] hrtimer_run_softirq+0x320/0x450 [ 180.925672][ T6918] __do_softirq+0x22e/0x569 [ 180.930137][ T6918] [ 180.932435][ T6918] Freed by task 6918: [ 180.936393][ T6918] __kasan_slab_free+0x168/0x220 [ 180.941311][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 180.946669][ T6918] kmem_cache_free+0xac/0x5c0 [ 180.951316][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 180.956829][ T6918] __iterate_interfaces+0x1fc/0x390 [ 180.962007][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 180.968931][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 180.974111][ T6918] __run_hrtimer+0x405/0x7a0 [ 180.978679][ T6918] hrtimer_run_softirq+0x320/0x450 [ 180.983808][ T6918] __do_softirq+0x22e/0x569 [ 180.988275][ T6918] [ 180.990575][ T6918] The buggy address belongs to the object at ffff8881d7094500 [ 180.990575][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 181.005157][ T6918] The buggy address is located 0 bytes inside of [ 181.005157][ T6918] 240-byte region [ffff8881d7094500, ffff8881d70945f0) [ 181.018253][ T6918] The buggy address belongs to the page: [ 181.023867][ T6918] page:ffffea00075c2500 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 181.032952][ T6918] flags: 0x8000000000000200(slab) [ 181.037968][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 181.046532][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 181.055096][ T6918] page dumped because: kasan: bad access detected [ 181.061475][ T6918] [ 181.063779][ T6918] Memory state around the buggy address: [ 181.069379][ T6918] ffff8881d7094400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.077408][ T6918] ffff8881d7094480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 181.085438][ T6918] >ffff8881d7094500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.093481][ T6918] ^ [ 181.097532][ T6918] ffff8881d7094580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 181.105561][ T6918] ffff8881d7094600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 181.113597][ T6918] ================================================================== [ 181.123369][ T6918] ================================================================== [ 181.131433][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 181.139732][ T6918] [ 181.142054][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 181.153483][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.163532][ T6918] Call Trace: [ 181.166795][ T6918] dump_stack+0x1b0/0x21e [ 181.171095][ T6918] ? show_regs_print_info+0x12/0x12 [ 181.176262][ T6918] ? printk+0xc0/0x104 [ 181.180337][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 181.185157][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 181.189977][ T6918] print_address_description+0x96/0x5d0 [ 181.195505][ T6918] ? devkmsg_release+0x11c/0x11c [ 181.200427][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 181.205275][ T6918] ? ___preempt_schedule+0x16/0x20 [ 181.210356][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 181.215174][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 181.220019][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 181.225454][ T6918] __kasan_slab_free+0x102/0x220 [ 181.230366][ T6918] ? cmp_ex_search+0x6d/0x90 [ 181.234933][ T6918] ? __start___ex_table+0x7170/0xa620 [ 181.240276][ T6918] ? bsearch+0x9b/0xc0 [ 181.244312][ T6918] ? search_extable+0xf0/0xf0 [ 181.248967][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 181.254914][ T6918] ? __stop_notes+0xc/0xc [ 181.259211][ T6918] ? search_extable+0xaf/0xf0 [ 181.263867][ T6918] ? __rcu_read_lock+0x50/0x50 [ 181.268601][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 181.273704][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 181.279652][ T6918] ? __start___ex_table+0x7170/0xa620 [ 181.284994][ T6918] ? __start___ex_table+0x7170/0xa620 [ 181.290336][ T6918] ? kasan_report+0x27/0x50 [ 181.294817][ T6918] ? ex_handler_refcount+0x130/0x170 [ 181.300078][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 181.304908][ T6918] ? __start___ex_table+0x7178/0xa620 [ 181.310248][ T6918] ? fixup_exception+0x92/0xd0 [ 181.315001][ T6918] ? do_trap+0x148/0x340 [ 181.319216][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 181.324821][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 181.330794][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 181.336781][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 181.342131][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 181.347229][ T6918] kmem_cache_free+0xac/0x5c0 [ 181.351890][ T6918] ? kasan_report+0x27/0x50 [ 181.356371][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 181.361303][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 181.369957][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 181.375212][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 181.380466][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 181.385475][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 181.391515][ T6918] ? wait_woken+0x250/0x250 [ 181.396085][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 181.401357][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 181.407743][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 181.413171][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 181.417904][ T6918] ? local_bh_enable+0x20/0x20 [ 181.422640][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 181.428256][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 181.433282][ T6918] ? _local_bh_enable+0x30/0x30 [ 181.438104][ T6918] ? memset+0x1f/0x40 [ 181.442055][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 181.447585][ T6918] ? lock_sock_nested+0x25a/0x320 [ 181.452577][ T6918] ? xas_load+0x468/0x4c0 [ 181.456876][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 181.462584][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 181.468183][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 181.473013][ T6918] tipc_sendmsg+0x51/0x70 [ 181.477313][ T6918] kernel_sendmsg+0xe2/0x120 [ 181.481886][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 181.486721][ T6918] ? __receive_sock+0xb0/0xb0 [ 181.491377][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 181.497072][ T6918] ? __receive_sock+0xb0/0xb0 [ 181.501717][ T6918] sock_sendpage+0xd0/0x120 [ 181.506189][ T6918] pipe_to_sendpage+0x23b/0x300 [ 181.511008][ T6918] ? sock_fasync+0xf0/0xf0 [ 181.515394][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 181.521010][ T6918] ? atime_needs_update+0x378/0x570 [ 181.526196][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 181.532149][ T6918] __splice_from_pipe+0x2d3/0x870 [ 181.537152][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 181.542751][ T6918] generic_splice_sendpage+0x172/0x200 [ 181.548195][ T6918] ? iter_file_splice_write+0xf20/0xf20 [ 181.553797][ T6918] ? direct_splice_actor+0x25/0x120 [ 181.558962][ T6918] splice_direct_to_actor+0x496/0xb00 [ 181.564320][ T6918] ? do_splice_direct+0x3d0/0x3d0 [ 181.569311][ T6918] ? pipe_to_sendpage+0x300/0x300 [ 181.574305][ T6918] ? security_file_permission+0x128/0x300 [ 181.579992][ T6918] do_splice_direct+0x279/0x3d0 [ 181.584816][ T6918] ? splice_direct_to_actor+0xb00/0xb00 [ 181.590353][ T6918] ? security_file_permission+0x128/0x300 [ 181.596068][ T6918] do_sendfile+0x89d/0x1110 [ 181.600550][ T6918] ? compat_writev+0x390/0x390 [ 181.605312][ T6918] ? security_file_permission+0x128/0x300 [ 181.611009][ T6918] ? vfs_write+0x427/0x4f0 [ 181.615393][ T6918] ? fput_many+0x42/0x1a0 [ 181.619698][ T6918] __x64_sys_sendfile64+0x1ae/0x220 [ 181.624889][ T6918] ? __ia32_sys_sendfile+0x240/0x240 [ 181.630146][ T6918] do_syscall_64+0xcb/0x150 [ 181.634629][ T6918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.640498][ T6918] RIP: 0033:0x45de59 [ 181.644363][ T6918] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 181.663939][ T6918] RSP: 002b:00007f33856e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 181.672341][ T6918] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 181.680282][ T6918] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 181.688223][ T6918] RBP: 00007f33856e1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 181.696171][ T6918] R10: 0000000000200fff R11: 0000000000000246 R12: 0000000000000029 [ 181.704140][ T6918] R13: 00007ffd1345421f R14: 00007f33856e29c0 R15: 000000000118bf2c [ 181.712079][ T6918] [ 181.714378][ T6918] Allocated by task 6918: [ 181.718678][ T6918] __kasan_kmalloc+0x117/0x1b0 [ 181.723414][ T6918] kmem_cache_alloc+0x1d5/0x250 [ 181.728244][ T6918] __netdev_alloc_skb+0x1d8/0x710 [ 181.733255][ T6918] __ieee80211_beacon_get+0x628/0x11b0 [ 181.738687][ T6918] ieee80211_beacon_get_tim+0xb7/0x500 [ 181.744122][ T6918] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 181.749578][ T6918] __iterate_interfaces+0x1fc/0x390 [ 181.754761][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 181.761666][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 181.766834][ T6918] __run_hrtimer+0x405/0x7a0 [ 181.771399][ T6918] hrtimer_run_softirq+0x320/0x450 [ 181.776490][ T6918] __do_softirq+0x22e/0x569 [ 181.780997][ T6918] [ 181.783297][ T6918] Freed by task 6918: [ 181.787249][ T6918] __kasan_slab_free+0x168/0x220 [ 181.792156][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 181.797502][ T6918] kmem_cache_free+0xac/0x5c0 [ 181.802169][ T6918] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 181.807698][ T6918] __iterate_interfaces+0x1fc/0x390 [ 181.812878][ T6918] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 181.819781][ T6918] mac80211_hwsim_beacon+0xa1/0x180 [ 181.824950][ T6918] __run_hrtimer+0x405/0x7a0 [ 181.829507][ T6918] hrtimer_run_softirq+0x320/0x450 [ 181.834585][ T6918] __do_softirq+0x22e/0x569 [ 181.839093][ T6918] [ 181.841394][ T6918] The buggy address belongs to the object at ffff8881c87f6140 [ 181.841394][ T6918] which belongs to the cache skbuff_head_cache of size 240 [ 181.855934][ T6918] The buggy address is located 0 bytes inside of [ 181.855934][ T6918] 240-byte region [ffff8881c87f6140, ffff8881c87f6230) [ 181.868995][ T6918] The buggy address belongs to the page: [ 181.874638][ T6918] page:ffffea000721fd80 refcount:1 mapcount:0 mapping:ffff8881daa92000 index:0x0 [ 181.883715][ T6918] flags: 0x8000000000000200(slab) [ 181.888751][ T6918] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92000 [ 181.897302][ T6918] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 181.905958][ T6918] page dumped because: kasan: bad access detected [ 181.912333][ T6918] [ 181.914626][ T6918] Memory state around the buggy address: [ 181.920219][ T6918] ffff8881c87f6000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.928244][ T6918] ffff8881c87f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 181.936279][ T6918] >ffff8881c87f6100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 181.944302][ T6918] ^ [ 181.950416][ T6918] ffff8881c87f6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.958451][ T6918] ffff8881c87f6200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 181.966483][ T6918] ================================================================== [ 181.976779][ T6918] ================================================================== [ 181.984846][ T6918] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 181.993146][ T6918] [ 181.995467][ T6918] CPU: 0 PID: 6918 Comm: syz-executor.0 Tainted: G B 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 182.006895][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.016926][ T6918] Call Trace: [ 182.020183][ T6918] dump_stack+0x1b0/0x21e [ 182.024493][ T6918] ? show_regs_print_info+0x12/0x12 [ 182.029655][ T6918] ? printk+0xc0/0x104 [ 182.033699][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 182.038522][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 182.043349][ T6918] print_address_description+0x96/0x5d0 [ 182.048859][ T6918] ? devkmsg_release+0x11c/0x11c [ 182.053760][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 182.058584][ T6918] ? ___preempt_schedule+0x16/0x20 [ 182.063661][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 182.068484][ T6918] ? kmem_cache_free+0xac/0x5c0 [ 182.073300][ T6918] kasan_report_invalid_free+0x54/0xc0 [ 182.078732][ T6918] __kasan_slab_free+0x102/0x220 [ 182.083648][ T6918] ? cmp_ex_search+0x6d/0x90 [ 182.088212][ T6918] ? __start___ex_table+0x7170/0xa620 [ 182.093549][ T6918] ? bsearch+0x9b/0xc0 [ 182.097595][ T6918] ? search_extable+0xf0/0xf0 [ 182.102248][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 182.108205][ T6918] ? __stop_notes+0xc/0xc [ 182.112512][ T6918] ? search_extable+0xaf/0xf0 [ 182.117174][ T6918] ? __rcu_read_lock+0x50/0x50 [ 182.121901][ T6918] ? trim_init_extable+0x3e0/0x3e0 [ 182.126979][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 182.132923][ T6918] ? __start___ex_table+0x7170/0xa620 [ 182.138270][ T6918] ? __start___ex_table+0x7170/0xa620 [ 182.143607][ T6918] ? kasan_report+0x27/0x50 [ 182.148075][ T6918] ? ex_handler_refcount+0x130/0x170 [ 182.153323][ T6918] ? ex_handler_fault+0xa0/0xa0 [ 182.158150][ T6918] ? __start___ex_table+0x7178/0xa620 [ 182.163492][ T6918] ? fixup_exception+0x92/0xd0 [ 182.168229][ T6918] ? do_trap+0x148/0x340 [ 182.172440][ T6918] ? schedule_preempt_disabled+0x20/0x20 [ 182.178083][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 182.184039][ T6918] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 182.189981][ T6918] slab_free_freelist_hook+0xd0/0x150 [ 182.195321][ T6918] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 182.200410][ T6918] kmem_cache_free+0xac/0x5c0 [ 182.205054][ T6918] ? kasan_report+0x27/0x50 [ 182.209530][ T6918] tipc_mcast_xmit+0x10a8/0x16c0 [ 182.214439][ T6918] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 182.220558][ T6918] ? __check_object_size+0x2e5/0x3b0 [ 182.225809][ T6918] tipc_send_group_bcast+0x9f8/0xd50 [ 182.231058][ T6918] ? __tipc_sendmsg+0x2d30/0x2d30 [ 182.236048][ T6918] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 182.242081][ T6918] ? wait_woken+0x250/0x250 [ 182.246551][ T6918] ? ext4_get_group_desc+0x253/0x2a0 [ 182.251808][ T6918] ? __ext4_journal_get_create_access+0x300/0x300 [ 182.258185][ T6918] ? __ext4_get_inode_loc+0x499/0x1030 [ 182.263621][ T6918] __tipc_sendmsg+0x400/0x2d30 [ 182.268361][ T6918] ? local_bh_enable+0x20/0x20 [ 182.273110][ T6918] ? ext4_chunk_trans_blocks+0x280/0x280 [ 182.278705][ T6918] ? _raw_spin_lock_bh+0xa4/0x180 [ 182.283694][ T6918] ? _local_bh_enable+0x30/0x30 [ 182.288520][ T6918] ? memset+0x1f/0x40 [ 182.292468][ T6918] ? selinux_socket_sendmsg+0x10b/0x320 [ 182.297979][ T6918] ? lock_sock_nested+0x25a/0x320 [ 182.302969][ T6918] ? xas_load+0x468/0x4c0 [ 182.307271][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 182.312958][ T6918] ? __ext4_journal_start_sb+0x3ad/0x420 [ 182.318555][ T6918] ? tipc_recvmsg+0x17c0/0x17c0 [ 182.323367][ T6918] tipc_sendmsg+0x51/0x70 [ 182.327671][ T6918] kernel_sendmsg+0xe2/0x120 [ 182.332225][ T6918] sock_no_sendpage+0x13f/0x1b0 [ 182.337041][ T6918] ? __receive_sock+0xb0/0xb0 [ 182.341693][ T6918] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 182.347375][ T6918] ? __receive_sock+0xb0/0xb0 [ 182.352014][ T6918] sock_sendpage+0xd0/0x120 [ 182.356483][ T6918] pipe_to_sendpage+0x23b/0x300 [ 182.361309][ T6918] ? sock_fasync+0xf0/0xf0 [ 182.365692][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 182.371288][ T6918] ? atime_needs_update+0x378/0x570 [ 182.376453][ T6918] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 182.382397][ T6918] __splice_from_pipe+0x2d3/0x870 [ 182.387386][ T6918] ? generic_splice_sendpage+0x200/0x200 [ 182.392994][ T6918] generic_splice_sendpage+0x172/0x200 [ 182.398427][ T6918] ? iter_file_splice_write+0xf20/0xf20