000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c2}, 0x4) 10:43:03 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) lseek(r1, 0x1000, 0x3) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000003f0900"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fchdir(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/212, 0xd4}, {&(0x7f0000000400)=""/201, 0xc9}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/138, 0x8a}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f00000006c0)=""/61, 0x3d}], 0x9, 0x0, 0x1ff) 10:43:03 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r3, &(0x7f0000000100)=""/156, 0x9c, 0x2000, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0, 0x7fffffff}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="401000100000000000000000a653277a8d033029e67037e367aedae1ff0000000000000000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x22040800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0xaf, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2c000891) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:03 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000080)={0x3, 0x1, 0x30, 0x0, 0xff, 0x2}) fchmod(r0, 0x62) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000010"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:03 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:03 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:03 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:04 executing program 1: setpriority(0x1, 0x0, 0x7f) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x6f, 0x2, 0x8, 0x8000, 0x200, 0x9, 0xdcb}, 0x0) 10:43:04 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:04 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:04 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$CHAR_RAW_ALIGNOFF(r0, 0x127a, &(0x7f0000000080)) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 0: setpriority(0x1, 0x0, 0x1) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000340)={&(0x7f0000000300)=""/55, 0x37}) r0 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000540)='numa_maps\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x72}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r3, 0x0, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000002280)=[{&(0x7f0000000700)=0x2}, {&(0x7f0000000740)=0x2, 0x2}, {&(0x7f0000000780)=0x2}, {&(0x7f00000007c0)=0x2, 0x1}, {&(0x7f0000000800)=0x2}, {&(0x7f0000000840)=0x2}, {&(0x7f0000000880)=0x2, 0x1}, {&(0x7f00000008c0), 0x8}, {&(0x7f0000000900), 0x2}, {&(0x7f0000000940)=0x2, 0x2}, {&(0x7f0000000980)=0x2, 0x2}, {&(0x7f00000009c0)}, {&(0x7f0000000a00), 0x1}, {&(0x7f0000000a40), 0x40}, {&(0x7f0000000a80), 0x2}, {&(0x7f0000000ac0)=0x2, 0x1}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=0x2, 0x1}, {&(0x7f0000000b80)=0x1}, {&(0x7f0000000bc0), 0x1}, {&(0x7f0000000c00)=0x1, 0x2}, {&(0x7f0000000c40)=0x2, 0x2}, {&(0x7f0000000c80)=0x1}, {&(0x7f0000000cc0)=0x1}, {&(0x7f0000000d00), 0x1}, {&(0x7f0000000d40)=0x1}, {&(0x7f0000000d80)=0x2, 0x10001}, {&(0x7f0000000dc0)=0x2}, {&(0x7f0000000e00), 0x1}, {&(0x7f0000000e40)=0x1}, {&(0x7f0000000e80), 0x2}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=0x1, 0x1}, {&(0x7f0000000f40)=0x2, 0xffffffff}, {&(0x7f0000000f80), 0x1}, {&(0x7f0000000fc0)=0x2}, {&(0x7f0000001000)=0x2, 0x2}, {&(0x7f0000001040)=0x2, 0x2}, {&(0x7f0000001080)=0x1}, {&(0x7f00000010c0)=0x1, 0x2}, {&(0x7f0000001100)=0x1, 0x1}, {&(0x7f0000001140)=0x2}, {&(0x7f0000001180)=0x2, 0x1}, {&(0x7f00000011c0)}, {&(0x7f0000001200), 0x1}, {&(0x7f0000001240)}, {&(0x7f0000001280)=0x2, 0x1}, {&(0x7f00000012c0)=0x2}, {&(0x7f0000001300)=0x2, 0x1}, {&(0x7f0000001340)=0x1, 0x2}, {&(0x7f0000001380)=0x1, 0x2}, {&(0x7f00000013c0)=0x2, 0x2}, {&(0x7f0000001400)=0x2}, {&(0x7f0000001440), 0x800}, {&(0x7f0000001480), 0x1}, {&(0x7f00000014c0)=0x1, 0x2}, {&(0x7f0000001500)=0x1, 0x2}, {&(0x7f0000001540)=0x1, 0x1}, {&(0x7f0000001580)=0x2, 0x2}, {&(0x7f00000015c0), 0x1}, {&(0x7f0000001600)=0x2}, {&(0x7f0000001640)}, {&(0x7f0000001680)=0x1, 0x1}, {&(0x7f00000016c0), 0x2}, {&(0x7f0000001700)=0x1, 0x2}, {&(0x7f0000001740)=0x2, 0x2}, {&(0x7f0000001780)=0x2, 0x1}, {&(0x7f00000017c0)=0x2}, {&(0x7f0000001800)=0x2}, {&(0x7f0000001840)=0x1}, {&(0x7f0000001880)=0x1, 0x1}, {&(0x7f00000018c0)=0x2, 0x1}, {&(0x7f0000001900)=0x2, 0x1}, {&(0x7f0000001940), 0x2}, {&(0x7f0000001980), 0x2}, {&(0x7f00000019c0)=0x1, 0x1}, {&(0x7f0000001a00)=0x2}, {&(0x7f0000001a40), 0x2}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)=0x2, 0x2}, {&(0x7f0000001b00)=0x1, 0x2}, {&(0x7f0000001b40)=0x1, 0x1}, {&(0x7f0000001b80), 0x1}, {&(0x7f0000001bc0)=0x2, 0x2}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=0x1, 0x2}, {&(0x7f0000001c80)=0x2, 0x84c}, {&(0x7f0000001cc0)=0x2, 0x2}, {&(0x7f0000001d00)}, {&(0x7f0000001d40), 0x1}, {&(0x7f0000001d80), 0x2}, {&(0x7f0000001dc0)=0x1}, {&(0x7f0000001e00)=0x1}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=0x2, 0x2}, {&(0x7f0000001ec0)=0x1, 0x2}, {&(0x7f0000001f00)=0x2, 0x2}, {&(0x7f0000001f40)=0x1, 0x2}, {&(0x7f0000001f80)=0x2, 0x1}, {&(0x7f0000001fc0)=0x2, 0x2}, {&(0x7f0000002000)=0x2}, {&(0x7f0000002040)=0x2, 0x2}, {&(0x7f0000002080)=0x1, 0x2}, {&(0x7f00000020c0)=0x1}, {&(0x7f0000002100)=0x1}, {&(0x7f0000002140)=0x1}, {&(0x7f0000002180), 0x1}, {&(0x7f00000021c0)=0x2, 0xbe40}, {&(0x7f0000002200), 0x2}, {&(0x7f0000002240)=0x1, 0x2}], 0xd, 0x6e, &(0x7f0000002980)={0x77359400}, 0x0, 0x0) rt_tgsigqueueinfo(r0, r3, 0x2, &(0x7f0000000380)={0x18, 0x0, 0x4ad}) sched_setscheduler(r0, 0x3, &(0x7f0000000400)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000002a00)=0x80000000) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="000100006d4b000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x4}, 0x28001000) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000003c0)=ANY=[], 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ptmx\x00', 0x20402, 0x0) dup(r5) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3fb, 0x300, 0x70bd2d, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c2}, 0x4) 10:43:04 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = dup3(r0, r1, 0x80000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000780)={{0x2, 0x100, 0x5, 0x200, 0x0, 0x7ff}, 0xbd, [0x5, 0x7, 0x1d19, 0x5, 0x10001, 0x1, 0xc21, 0x6, 0x1, 0x4, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x4, 0x20, 0x49d8, 0x7, 0x2, 0xfffffffa, 0x8001, 0x1000, 0x9b, 0x4, 0x0, 0x80000001, 0x9, 0x10001, 0x7fff, 0x1, 0x4, 0x5, 0x3, 0xd24a, 0x7ff, 0xffff, 0x3, 0x4, 0x5, 0xffff8000, 0x1, 0x80000000, 0x8, 0x7fffffff, 0x6, 0x10001, 0xbc88, 0xff, 0x4, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x3, 0x9b7, 0xff, 0x2, 0x2, 0x3c9, 0x80000001, 0x40, 0x20af, 0x8, 0x2, 0x4, 0x38, 0x7f, 0xfffffff8, 0x9, 0x1, 0x3f, 0x7fff, 0x6, 0xfffffffd, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0x10000, 0xa1eb, 0x200, 0x7, 0x4, 0x177, 0x5681, 0xf4c, 0x2, 0x589, 0x800, 0x9, 0x2, 0x9, 0x8, 0x2, 0x2, 0xffff0000, 0x7ff, 0x80, 0x6, 0x0, 0x0, 0x2, 0x0, 0x1aee, 0x2, 0x2, 0x1, 0xffffffff, 0x9, 0x1c18320d, 0x2fd, 0x5, 0x4, 0x8, 0x2, 0x4, 0xb9af, 0x4, 0x3, 0xfffff800, 0x6, 0x3f, 0x4, 0x3, 0x1, 0x3, 0x6, 0x4, 0x1f, 0x9d0e, 0x2, 0x9, 0xd34f, 0x4, 0x5, 0x6f, 0x1000, 0x2, 0xd1a4, 0x1, 0xa5, 0x9, 0x100, 0x7fffffff, 0x8, 0xe5f, 0x6b, 0x1, 0x9, 0x8, 0x0, 0xffffffff, 0x3, 0x2, 0xffff3422, 0x75b6, 0x24e, 0xda74, 0x1, 0x8001, 0x401, 0x9, 0x401, 0x3, 0x6, 0x9, 0x3ff, 0x3ff, 0x4, 0x91d, 0xda8, 0x1ff, 0x40, 0x8f, 0x7f, 0x1, 0x8, 0x0, 0x5, 0x140000, 0x6, 0xcb, 0x7f, 0x9, 0x5, 0x401, 0x4, 0x6, 0x9, 0x81, 0x1ffe00, 0x7, 0x3f, 0x2, 0xa63c, 0x7, 0xfffffffb, 0x80, 0x9, 0x4, 0x3f, 0x0, 0xc4, 0x1acb, 0x7d, 0xed43, 0x80000000, 0xaba, 0x4, 0x3, 0x71b0, 0x0, 0x29d92222, 0x3e, 0xffff, 0x0, 0x2, 0x70b, 0x3, 0x3, 0x10000, 0xfffffffd, 0xfffffff8, 0x3, 0x200, 0xfa0, 0x3, 0x2, 0x23f, 0x800, 0x1, 0x6, 0x18, 0x4, 0x5d, 0x4e6d, 0x2, 0xbb40, 0x1f, 0x10001, 0x7fff, 0x4, 0x3, 0x7, 0x2, 0x5, 0x73a1, 0x2, 0x5, 0x2, 0xa6, 0x0, 0x1, 0x4, 0x8, 0x400, 0x3f, 0x8, 0x1f, 0x4919, 0x1000, 0x80000001, 0x7fffffff, 0x8, 0xffffffc1, 0xdbf0, 0x7, 0x7, 0xffffff00, 0x6, 0x1, 0x2, 0x0, 0x1, 0x9, 0x1a, 0x80, 0xb7, 0x3, 0x8, 0xfffff034, 0x5, 0x16e, 0x401, 0xffffffff, 0x8, 0xffffffff, 0x0, 0x4, 0x6, 0x3ab, 0x0, 0x4, 0x0, 0x8, 0x9, 0x4, 0x1, 0xc6ad, 0x1, 0x6, 0x7, 0x4, 0x2e, 0xf, 0x1000, 0x4, 0xe7ea, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x4, 0x7, 0x100, 0x3, 0x8, 0xfffffffe, 0x0, 0x0, 0x5, 0x7, 0x5, 0x85c, 0xf9a8, 0x10000, 0xffffff80, 0xfffffff9, 0x9, 0x4, 0x800, 0xffffffff, 0x80, 0x800, 0x6, 0xc6c8, 0x7e899ea4, 0x6, 0x800, 0x400, 0x9, 0x100, 0x353, 0x5, 0x3, 0x4, 0x401, 0x40, 0xffff, 0x2, 0xfb2a, 0x8, 0x0, 0x637e592, 0x7, 0x13977883, 0xc8, 0xfffff4c0, 0x0, 0x80000001, 0x9, 0x5, 0xffffff7f, 0xfe, 0x88, 0x7, 0x0, 0x7fffffff, 0x7f, 0xffffff86, 0xff, 0x8000, 0x0, 0x6, 0x81, 0xffffffff, 0x8001, 0x4, 0x1000, 0x2, 0x80000001, 0x0, 0x7, 0x6, 0x9, 0x2, 0x10000, 0x2, 0xd9, 0x2, 0x3, 0x3, 0x4, 0x20, 0x80000001, 0x101, 0x2, 0x2, 0x86f7, 0x2, 0x0, 0x800, 0x3, 0x6, 0x3d, 0x8, 0x2, 0xdd15, 0x1, 0xdc3c, 0x1f, 0xfffff000, 0x9, 0x23, 0x1, 0x19f800, 0x4c65, 0xffff, 0x5, 0xd8, 0x0, 0x7f, 0x0, 0x7fffffff, 0xffff, 0xfffff801, 0x160, 0x3, 0xffffffff, 0x1, 0x81, 0x800, 0x7f, 0x1ab, 0x0, 0x1, 0x9, 0xfffffffa, 0x2, 0x401, 0x8, 0x3, 0x6b, 0x10001, 0x8000, 0x5, 0x8, 0x0, 0xe7, 0x7, 0xffff, 0x20, 0x6, 0x1f, 0x1, 0x56ca, 0xfff, 0x7, 0x5, 0x5897, 0x12027688, 0x7, 0x7, 0x5, 0x80000000, 0x0, 0x80, 0x0, 0x92d0, 0x1, 0x3, 0xffffffff, 0x4, 0x2, 0x9, 0x7fff, 0xfffffff9, 0x2, 0xffffff81, 0x3ff, 0x6, 0x0, 0x7fffffff, 0x9, 0xff, 0x1, 0xae5, 0x0, 0xb8, 0x2, 0x2, 0x40, 0x7a59, 0x0, 0x5, 0x8, 0x200, 0x0, 0x8, 0x1, 0x6, 0x3b97, 0x7f, 0x2, 0x654b02ee, 0x7f, 0x3, 0x2, 0x3, 0x6, 0x0, 0x3, 0x5, 0x97f, 0xea, 0xfffffff9, 0x10001, 0xe1df, 0x2, 0x7f, 0xffffffff, 0x8, 0x2, 0x4, 0x6, 0xfffff473, 0xffffffff, 0x40, 0x2, 0x4, 0x0, 0xce8, 0xff, 0x4, 0x3f, 0x5, 0x3f, 0x3, 0x81, 0xfff, 0x0, 0x10001, 0x800, 0x7fffffff, 0x3f, 0x401, 0x4, 0x20, 0x401, 0x8, 0x3ff, 0x3ff, 0x5, 0x5, 0xfffffffa, 0x3, 0x3ff, 0x9, 0x1, 0x7, 0x1, 0xfffffff8, 0xfff, 0x6, 0x7, 0x9acf, 0x0, 0x5e67, 0x1, 0xffffff30, 0x11, 0x4, 0x80000001, 0x68, 0x1, 0x10000, 0x3, 0x72f9, 0x7, 0x1, 0xb5, 0x8, 0x8, 0x5, 0x9, 0xfffffff8, 0x40, 0x2, 0xfff, 0x3f, 0x6fc, 0x5, 0x0, 0x1, 0x1, 0x10000, 0x8, 0x9, 0x9, 0x9c8, 0x6, 0xfffffffd, 0x8, 0x1, 0x3, 0x0, 0x7ff, 0x1, 0xfffffbff, 0x3, 0x8, 0x9, 0x9, 0x4, 0x1, 0x1, 0x1, 0x7, 0x0, 0x65, 0x1, 0x5, 0x8, 0x0, 0x5, 0x7fff, 0x8, 0x3, 0x8, 0x100, 0x5, 0x5, 0x7, 0x3, 0x0, 0x9, 0x7fff, 0x8, 0x3, 0x9, 0x26a, 0xffffffff, 0x1000, 0x1, 0x9, 0x2, 0x4, 0x8, 0x0, 0x4d, 0x57, 0x8, 0x3, 0x4a, 0x800, 0x200, 0x47, 0x80, 0x6, 0x4, 0x5, 0x1, 0x1f, 0x7fffffff, 0x4, 0x3f, 0xeac, 0x335, 0x0, 0x3, 0x9, 0x401, 0x1000, 0xd28, 0x1, 0xd83, 0x84f, 0x80000001, 0x2, 0x3, 0x80000001, 0xd8, 0x8, 0x40, 0x80, 0x1, 0x3, 0x400, 0x0, 0x4, 0x101, 0x5, 0x10000, 0x1ff, 0x6, 0x7fff, 0x18, 0x7fff, 0x4, 0x9, 0x4, 0x0, 0x8000, 0x406d, 0x0, 0xfff, 0xffffffff, 0x2, 0xffffffff, 0x0, 0x3, 0x8, 0x3f, 0xb64a, 0xaff, 0x7, 0xfffff3ab, 0x5, 0x80000001, 0x8000, 0xffff, 0x4, 0xfffffffa, 0x30, 0x7ed, 0x2, 0x9e1f, 0x70, 0x57, 0x200, 0x5, 0x3, 0x4, 0x1, 0x8c62, 0x8, 0x4, 0xfffffffc, 0x80000001, 0x400, 0x7f, 0x7, 0x40, 0x6, 0x7fffffff, 0x6, 0x3, 0xffffffff, 0x1, 0xff, 0x1, 0x3, 0xffffff05, 0x0, 0x8c, 0x5, 0x5, 0x3ff, 0xffffffc1, 0xff, 0x0, 0x1, 0x247, 0x2, 0x1, 0x80000001, 0x9677, 0x80, 0x4, 0x0, 0x2, 0x30000000, 0x8, 0x400, 0x8, 0x7, 0x2, 0x40d, 0x20, 0x7, 0x9, 0x4, 0x88, 0x0, 0x200, 0xffff, 0x9, 0x4, 0x5, 0x6, 0xfffffffd, 0x3, 0xb1, 0x81, 0x1800000, 0x1000, 0x6, 0x1000, 0x8, 0xfff, 0x3e, 0xa9, 0x7, 0x3, 0x1, 0x851a, 0x2, 0x2, 0x3, 0x101, 0x8001, 0x9, 0x5, 0x7f, 0x4, 0x1f, 0x2, 0x8, 0x40, 0x5, 0x1f5, 0xffff, 0x0, 0x8001, 0x6, 0x9, 0x56, 0x1, 0x0, 0x401, 0xfff, 0x6, 0x6, 0x2, 0x0, 0x4, 0x8000, 0xd0f3, 0x10001, 0x100, 0x1, 0x1, 0x943, 0x5, 0xa38, 0x1, 0x2, 0x1, 0x7, 0x8, 0x200, 0xeb3, 0x7fffffff, 0xc5ef, 0x7, 0x7, 0x3a29, 0x1ff, 0x4, 0x6, 0x100, 0x3, 0x1f, 0x62cd, 0x400, 0x1000, 0x7ff, 0x8000, 0x3, 0x1, 0x3ff, 0x4, 0x7, 0x5, 0x8, 0xcc2b, 0x6, 0x1, 0x8, 0xe6, 0x6, 0x1, 0x8000, 0xfff, 0x1, 0x0, 0x1000, 0xffff, 0x557, 0x2289, 0x1, 0x4, 0xfffffffa, 0x1, 0x5e81, 0x9, 0x9, 0x5, 0x1, 0x50000000, 0x0, 0x401, 0x8000, 0x10001, 0x401, 0xd8, 0x2, 0x6, 0x81, 0x6, 0x7e, 0x0, 0x5e, 0x4, 0xfffffff9, 0x0, 0xd3, 0x7, 0x1ff, 0x77f4e0d2, 0x80, 0x1, 0x9, 0x6, 0x1, 0x0, 0x9, 0xfff, 0x100, 0x8, 0x6, 0x4, 0x7, 0x9, 0x1ff, 0x2a, 0x10000, 0x1, 0x62, 0x100, 0x0, 0x7, 0x7, 0x0, 0xed, 0x100, 0x2, 0x5, 0x5, 0x5, 0x7ff, 0x8, 0x3, 0x6, 0x5, 0xc74, 0x4f7, 0x7fff, 0xfffffff8, 0x7, 0xffff, 0x2, 0x8, 0xe88, 0x1ff, 0x0, 0x2, 0x5, 0x8, 0x0, 0xffff, 0x80000000, 0x4, 0x68c, 0xde320, 0xfe00f49, 0x80, 0x8, 0x2, 0x9, 0x0, 0x101, 0x0, 0xffffff33, 0x0, 0x8, 0x1, 0xfffffff7, 0x10001, 0x1, 0x8, 0x2, 0x7fffffff, 0x10000, 0x8001, 0x31fd, 0xa1ca, 0x0, 0x0, 0x75, 0x8, 0x5, 0x100, 0x1, 0x4, 0xd8c9, 0x4, 0x5, 0x1, 0x7, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x2d3b, 0x8, 0x3f, 0x3, 0x9, 0x5]}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) readahead(r6, 0x1, 0x3) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000100)="e2b53569d120aac495c3d311fc2b0df66df2517b803aa5e19b75d37b5c60d763e5c5ca69515621bc055a700c573163c0928ffdbb0ee1533987d9d4b3a014f463062a70943fdffa9373c77a01e20aec53f96b02b53bc3a581a0a7e9f00beb17ad82e3e6c17a7258c378c81060201deea9037ffb786ccefb2ca7f6b6504657e4da1ec43f883f392efa7a2b64816ef62400", 0x90) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:04 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:04 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x40, 0x101, 0x28, @private1={0xfc, 0x1, [], 0x1}, @mcast1, 0x8700, 0x40, 0x3f, 0x101}}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf5c9574e826292e3, 0xb, 0x1f, 0x0, 0x80, r4, 0x7b8f, [], r5, r6, 0x4, 0x3, 0x8}, 0x40) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 1: setpriority(0x1, 0x0, 0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x7f) 10:43:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:04 executing program 4: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = signalfd(r0, &(0x7f0000000080)={[0x2]}, 0x8) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x3f, 0xffff}, {0x98a, 0x80}, @const={0x0, {0x3b2, 0x80, 0x0, 0x6}}}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:05 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = signalfd(r0, &(0x7f0000000080)={[0x2]}, 0x8) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x3f, 0xffff}, {0x98a, 0x80}, @const={0x0, {0x3b2, 0x80, 0x0, 0x6}}}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 4: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:05 executing program 1: ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xe) setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000001000)={0x7ff, 0x8, 0x2, 0x20, 0x5, 0xf6, 0xfffffffffffffff9}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x100000000, &(0x7f0000000000)=""/4096) 10:43:05 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:05 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = dup3(r0, r1, 0x80000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000780)={{0x2, 0x100, 0x5, 0x200, 0x0, 0x7ff}, 0xbd, [0x5, 0x7, 0x1d19, 0x5, 0x10001, 0x1, 0xc21, 0x6, 0x1, 0x4, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x4, 0x20, 0x49d8, 0x7, 0x2, 0xfffffffa, 0x8001, 0x1000, 0x9b, 0x4, 0x0, 0x80000001, 0x9, 0x10001, 0x7fff, 0x1, 0x4, 0x5, 0x3, 0xd24a, 0x7ff, 0xffff, 0x3, 0x4, 0x5, 0xffff8000, 0x1, 0x80000000, 0x8, 0x7fffffff, 0x6, 0x10001, 0xbc88, 0xff, 0x4, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x3, 0x9b7, 0xff, 0x2, 0x2, 0x3c9, 0x80000001, 0x40, 0x20af, 0x8, 0x2, 0x4, 0x38, 0x7f, 0xfffffff8, 0x9, 0x1, 0x3f, 0x7fff, 0x6, 0xfffffffd, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0x10000, 0xa1eb, 0x200, 0x7, 0x4, 0x177, 0x5681, 0xf4c, 0x2, 0x589, 0x800, 0x9, 0x2, 0x9, 0x8, 0x2, 0x2, 0xffff0000, 0x7ff, 0x80, 0x6, 0x0, 0x0, 0x2, 0x0, 0x1aee, 0x2, 0x2, 0x1, 0xffffffff, 0x9, 0x1c18320d, 0x2fd, 0x5, 0x4, 0x8, 0x2, 0x4, 0xb9af, 0x4, 0x3, 0xfffff800, 0x6, 0x3f, 0x4, 0x3, 0x1, 0x3, 0x6, 0x4, 0x1f, 0x9d0e, 0x2, 0x9, 0xd34f, 0x4, 0x5, 0x6f, 0x1000, 0x2, 0xd1a4, 0x1, 0xa5, 0x9, 0x100, 0x7fffffff, 0x8, 0xe5f, 0x6b, 0x1, 0x9, 0x8, 0x0, 0xffffffff, 0x3, 0x2, 0xffff3422, 0x75b6, 0x24e, 0xda74, 0x1, 0x8001, 0x401, 0x9, 0x401, 0x3, 0x6, 0x9, 0x3ff, 0x3ff, 0x4, 0x91d, 0xda8, 0x1ff, 0x40, 0x8f, 0x7f, 0x1, 0x8, 0x0, 0x5, 0x140000, 0x6, 0xcb, 0x7f, 0x9, 0x5, 0x401, 0x4, 0x6, 0x9, 0x81, 0x1ffe00, 0x7, 0x3f, 0x2, 0xa63c, 0x7, 0xfffffffb, 0x80, 0x9, 0x4, 0x3f, 0x0, 0xc4, 0x1acb, 0x7d, 0xed43, 0x80000000, 0xaba, 0x4, 0x3, 0x71b0, 0x0, 0x29d92222, 0x3e, 0xffff, 0x0, 0x2, 0x70b, 0x3, 0x3, 0x10000, 0xfffffffd, 0xfffffff8, 0x3, 0x200, 0xfa0, 0x3, 0x2, 0x23f, 0x800, 0x1, 0x6, 0x18, 0x4, 0x5d, 0x4e6d, 0x2, 0xbb40, 0x1f, 0x10001, 0x7fff, 0x4, 0x3, 0x7, 0x2, 0x5, 0x73a1, 0x2, 0x5, 0x2, 0xa6, 0x0, 0x1, 0x4, 0x8, 0x400, 0x3f, 0x8, 0x1f, 0x4919, 0x1000, 0x80000001, 0x7fffffff, 0x8, 0xffffffc1, 0xdbf0, 0x7, 0x7, 0xffffff00, 0x6, 0x1, 0x2, 0x0, 0x1, 0x9, 0x1a, 0x80, 0xb7, 0x3, 0x8, 0xfffff034, 0x5, 0x16e, 0x401, 0xffffffff, 0x8, 0xffffffff, 0x0, 0x4, 0x6, 0x3ab, 0x0, 0x4, 0x0, 0x8, 0x9, 0x4, 0x1, 0xc6ad, 0x1, 0x6, 0x7, 0x4, 0x2e, 0xf, 0x1000, 0x4, 0xe7ea, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x4, 0x7, 0x100, 0x3, 0x8, 0xfffffffe, 0x0, 0x0, 0x5, 0x7, 0x5, 0x85c, 0xf9a8, 0x10000, 0xffffff80, 0xfffffff9, 0x9, 0x4, 0x800, 0xffffffff, 0x80, 0x800, 0x6, 0xc6c8, 0x7e899ea4, 0x6, 0x800, 0x400, 0x9, 0x100, 0x353, 0x5, 0x3, 0x4, 0x401, 0x40, 0xffff, 0x2, 0xfb2a, 0x8, 0x0, 0x637e592, 0x7, 0x13977883, 0xc8, 0xfffff4c0, 0x0, 0x80000001, 0x9, 0x5, 0xffffff7f, 0xfe, 0x88, 0x7, 0x0, 0x7fffffff, 0x7f, 0xffffff86, 0xff, 0x8000, 0x0, 0x6, 0x81, 0xffffffff, 0x8001, 0x4, 0x1000, 0x2, 0x80000001, 0x0, 0x7, 0x6, 0x9, 0x2, 0x10000, 0x2, 0xd9, 0x2, 0x3, 0x3, 0x4, 0x20, 0x80000001, 0x101, 0x2, 0x2, 0x86f7, 0x2, 0x0, 0x800, 0x3, 0x6, 0x3d, 0x8, 0x2, 0xdd15, 0x1, 0xdc3c, 0x1f, 0xfffff000, 0x9, 0x23, 0x1, 0x19f800, 0x4c65, 0xffff, 0x5, 0xd8, 0x0, 0x7f, 0x0, 0x7fffffff, 0xffff, 0xfffff801, 0x160, 0x3, 0xffffffff, 0x1, 0x81, 0x800, 0x7f, 0x1ab, 0x0, 0x1, 0x9, 0xfffffffa, 0x2, 0x401, 0x8, 0x3, 0x6b, 0x10001, 0x8000, 0x5, 0x8, 0x0, 0xe7, 0x7, 0xffff, 0x20, 0x6, 0x1f, 0x1, 0x56ca, 0xfff, 0x7, 0x5, 0x5897, 0x12027688, 0x7, 0x7, 0x5, 0x80000000, 0x0, 0x80, 0x0, 0x92d0, 0x1, 0x3, 0xffffffff, 0x4, 0x2, 0x9, 0x7fff, 0xfffffff9, 0x2, 0xffffff81, 0x3ff, 0x6, 0x0, 0x7fffffff, 0x9, 0xff, 0x1, 0xae5, 0x0, 0xb8, 0x2, 0x2, 0x40, 0x7a59, 0x0, 0x5, 0x8, 0x200, 0x0, 0x8, 0x1, 0x6, 0x3b97, 0x7f, 0x2, 0x654b02ee, 0x7f, 0x3, 0x2, 0x3, 0x6, 0x0, 0x3, 0x5, 0x97f, 0xea, 0xfffffff9, 0x10001, 0xe1df, 0x2, 0x7f, 0xffffffff, 0x8, 0x2, 0x4, 0x6, 0xfffff473, 0xffffffff, 0x40, 0x2, 0x4, 0x0, 0xce8, 0xff, 0x4, 0x3f, 0x5, 0x3f, 0x3, 0x81, 0xfff, 0x0, 0x10001, 0x800, 0x7fffffff, 0x3f, 0x401, 0x4, 0x20, 0x401, 0x8, 0x3ff, 0x3ff, 0x5, 0x5, 0xfffffffa, 0x3, 0x3ff, 0x9, 0x1, 0x7, 0x1, 0xfffffff8, 0xfff, 0x6, 0x7, 0x9acf, 0x0, 0x5e67, 0x1, 0xffffff30, 0x11, 0x4, 0x80000001, 0x68, 0x1, 0x10000, 0x3, 0x72f9, 0x7, 0x1, 0xb5, 0x8, 0x8, 0x5, 0x9, 0xfffffff8, 0x40, 0x2, 0xfff, 0x3f, 0x6fc, 0x5, 0x0, 0x1, 0x1, 0x10000, 0x8, 0x9, 0x9, 0x9c8, 0x6, 0xfffffffd, 0x8, 0x1, 0x3, 0x0, 0x7ff, 0x1, 0xfffffbff, 0x3, 0x8, 0x9, 0x9, 0x4, 0x1, 0x1, 0x1, 0x7, 0x0, 0x65, 0x1, 0x5, 0x8, 0x0, 0x5, 0x7fff, 0x8, 0x3, 0x8, 0x100, 0x5, 0x5, 0x7, 0x3, 0x0, 0x9, 0x7fff, 0x8, 0x3, 0x9, 0x26a, 0xffffffff, 0x1000, 0x1, 0x9, 0x2, 0x4, 0x8, 0x0, 0x4d, 0x57, 0x8, 0x3, 0x4a, 0x800, 0x200, 0x47, 0x80, 0x6, 0x4, 0x5, 0x1, 0x1f, 0x7fffffff, 0x4, 0x3f, 0xeac, 0x335, 0x0, 0x3, 0x9, 0x401, 0x1000, 0xd28, 0x1, 0xd83, 0x84f, 0x80000001, 0x2, 0x3, 0x80000001, 0xd8, 0x8, 0x40, 0x80, 0x1, 0x3, 0x400, 0x0, 0x4, 0x101, 0x5, 0x10000, 0x1ff, 0x6, 0x7fff, 0x18, 0x7fff, 0x4, 0x9, 0x4, 0x0, 0x8000, 0x406d, 0x0, 0xfff, 0xffffffff, 0x2, 0xffffffff, 0x0, 0x3, 0x8, 0x3f, 0xb64a, 0xaff, 0x7, 0xfffff3ab, 0x5, 0x80000001, 0x8000, 0xffff, 0x4, 0xfffffffa, 0x30, 0x7ed, 0x2, 0x9e1f, 0x70, 0x57, 0x200, 0x5, 0x3, 0x4, 0x1, 0x8c62, 0x8, 0x4, 0xfffffffc, 0x80000001, 0x400, 0x7f, 0x7, 0x40, 0x6, 0x7fffffff, 0x6, 0x3, 0xffffffff, 0x1, 0xff, 0x1, 0x3, 0xffffff05, 0x0, 0x8c, 0x5, 0x5, 0x3ff, 0xffffffc1, 0xff, 0x0, 0x1, 0x247, 0x2, 0x1, 0x80000001, 0x9677, 0x80, 0x4, 0x0, 0x2, 0x30000000, 0x8, 0x400, 0x8, 0x7, 0x2, 0x40d, 0x20, 0x7, 0x9, 0x4, 0x88, 0x0, 0x200, 0xffff, 0x9, 0x4, 0x5, 0x6, 0xfffffffd, 0x3, 0xb1, 0x81, 0x1800000, 0x1000, 0x6, 0x1000, 0x8, 0xfff, 0x3e, 0xa9, 0x7, 0x3, 0x1, 0x851a, 0x2, 0x2, 0x3, 0x101, 0x8001, 0x9, 0x5, 0x7f, 0x4, 0x1f, 0x2, 0x8, 0x40, 0x5, 0x1f5, 0xffff, 0x0, 0x8001, 0x6, 0x9, 0x56, 0x1, 0x0, 0x401, 0xfff, 0x6, 0x6, 0x2, 0x0, 0x4, 0x8000, 0xd0f3, 0x10001, 0x100, 0x1, 0x1, 0x943, 0x5, 0xa38, 0x1, 0x2, 0x1, 0x7, 0x8, 0x200, 0xeb3, 0x7fffffff, 0xc5ef, 0x7, 0x7, 0x3a29, 0x1ff, 0x4, 0x6, 0x100, 0x3, 0x1f, 0x62cd, 0x400, 0x1000, 0x7ff, 0x8000, 0x3, 0x1, 0x3ff, 0x4, 0x7, 0x5, 0x8, 0xcc2b, 0x6, 0x1, 0x8, 0xe6, 0x6, 0x1, 0x8000, 0xfff, 0x1, 0x0, 0x1000, 0xffff, 0x557, 0x2289, 0x1, 0x4, 0xfffffffa, 0x1, 0x5e81, 0x9, 0x9, 0x5, 0x1, 0x50000000, 0x0, 0x401, 0x8000, 0x10001, 0x401, 0xd8, 0x2, 0x6, 0x81, 0x6, 0x7e, 0x0, 0x5e, 0x4, 0xfffffff9, 0x0, 0xd3, 0x7, 0x1ff, 0x77f4e0d2, 0x80, 0x1, 0x9, 0x6, 0x1, 0x0, 0x9, 0xfff, 0x100, 0x8, 0x6, 0x4, 0x7, 0x9, 0x1ff, 0x2a, 0x10000, 0x1, 0x62, 0x100, 0x0, 0x7, 0x7, 0x0, 0xed, 0x100, 0x2, 0x5, 0x5, 0x5, 0x7ff, 0x8, 0x3, 0x6, 0x5, 0xc74, 0x4f7, 0x7fff, 0xfffffff8, 0x7, 0xffff, 0x2, 0x8, 0xe88, 0x1ff, 0x0, 0x2, 0x5, 0x8, 0x0, 0xffff, 0x80000000, 0x4, 0x68c, 0xde320, 0xfe00f49, 0x80, 0x8, 0x2, 0x9, 0x0, 0x101, 0x0, 0xffffff33, 0x0, 0x8, 0x1, 0xfffffff7, 0x10001, 0x1, 0x8, 0x2, 0x7fffffff, 0x10000, 0x8001, 0x31fd, 0xa1ca, 0x0, 0x0, 0x75, 0x8, 0x5, 0x100, 0x1, 0x4, 0xd8c9, 0x4, 0x5, 0x1, 0x7, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x2d3b, 0x8, 0x3f, 0x3, 0x9, 0x5]}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) readahead(r6, 0x1, 0x3) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000100)="e2b53569d120aac495c3d311fc2b0df66df2517b803aa5e19b75d37b5c60d763e5c5ca69515621bc055a700c573163c0928ffdbb0ee1533987d9d4b3a014f463062a70943fdffa9373c77a01e20aec53f96b02b53bc3a581a0a7e9f00beb17ad82e3e6c17a7258c378c81060201deea9037ffb786ccefb2ca7f6b6504657e4da1ec43f883f392efa7a2b64816ef62400", 0x90) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:05 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)=""/50) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 4: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:05 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:05 executing program 2: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setpriority(0x2, r0, 0x4) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x323a]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x912}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4080) 10:43:05 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:05 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:05 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x50d, 0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x6, @random="3bec9f368313"}, 0x30, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 'wg1\x00'}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000080)={0xfffffffffffffffe, 0x1}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="40100010000000009cf7a41fb8c295d5560000000000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:06 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:06 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:06 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0xf, 0xf0}, {0xc, 0x19, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 1: setpriority(0x2, 0x0, 0x80000000) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:06 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:06 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:06 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setpriority(0x2, r0, 0x4) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x323a]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x912}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4080) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:06 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:07 executing program 3: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x901) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) fstatfs(r2, &(0x7f0000000140)=""/63) socket(0x3, 0x1, 0xfffffffe) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x10) 10:43:07 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:07 executing program 1: setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r1) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080005000300000008000300", @ANYRES32=r7, @ANYBLOB="140004003a"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048010) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 10:43:07 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:07 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x15, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="bf00"/12], 0xfdef) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/98}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:07 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:07 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:07 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:07 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0400"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x52}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x305000, 0x0) r6 = getegid() sendmsg$unix(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="85e7b830ebaacfe25cfaecc3d57164a8759db057891ef45d8efeb9793c910c27e4a95dc65f66a4dadadcdf05e6a25e8ea194aa248e10452d5530e5a6750a8fe40b00aa331854e59983388cde67b6db6052a93febee87e62cdc34dfa06597bdb2557960c54e72ee1c273ea7e9dd8051680996c54320dac0a1e1cc82f6c7184a647e3e08e8524b9dacf2a97a58f40af44cf66db252cb1b7090edfeb45fd1d36d274fa0a83579c70e5343d9670bd6aca4e120b9e177692387702d322a38ac2a4addd856f5e833b62a1f160027479fa6b4532180db0cdaad80c871919ae7b7", 0xdd}, {&(0x7f0000000240)='nty', 0x3}, {&(0x7f0000000280)="9ed1f6a6e3ea9617fc7ecba10957e2ff2ab6469c425c8a1a8d67db693ec61180be46d8ea31164d7ad3535db0fdcc046a929f07600f240433d5710e1fc536c958ccea6a5bd732ec91698ebad3d30ce9a409eed2ab06cf5fc06199985320a0a15ff91d27f5d8d39d6090e8db51111ddd", 0x6f}, {&(0x7f0000000300)="815c1884051321f5881b832095717838e763ae5a68f5306f5d86cd9b27f34a1cf332c093cc46774ef09d6a0f2246f591f79675a4b1ce91b999884cb347445d8eb6", 0x41}, {&(0x7f0000000380)="48b7e3df2722cdedca67de5daa5922fe0a220dd14b3da3556f2eb418946ef7b80592cbb318d94bfc5ff62d79d4f7f0c123eeb79c44c44a92cf40790fffb5dd953b7143727054f7c785a370b39142", 0x4e}, {&(0x7f0000000400)="4bfac30552636ae3f78334725cdfe6132a89722080b1b81d19018c2e61a4c09a9e2133f3510bacd8f2e16ab1005257b8727ef91b6b2419d2f440b58498ed17e161bca5040333d2", 0x47}, {&(0x7f0000000480)="26459f065038fbb618a23f3ebd9156d9f058a780c8a47dcd21ace3d2efe16365cd17057f53b3f93d15d09481fcc8ac3d7c3b6e20edf56abb979239720d3f89cf0736a1ddebeb741c1519ba4c2d02ccce25f8d238a7352ad418e29ac2f81f67744bc1dd3debaf40b39cba43bc65072cdde0c64355e80423", 0x77}, {&(0x7f0000000500)="670ebb74b093ba9189fa8895c7d5634aab02f2c85e4bdb563b57d53957fbd54add1d6cd61f970e4557edb7da6e5235db4dad9cde6dec6cb97a0dd19f30bd39df22a6c3e3f6345db145a1d240b4724964ad87dd32f14bc60eda67b693b80caa2b02f71bdba48a2fbe599a50ebe47bf989e8393f620211f86ad947f2fd6cc5a079f778ffc753bcb147", 0x88}, {&(0x7f00000005c0)="0dde652a197e370a426da96ecc29899c68357a82b9ab9621bcbc0d1f8c9b030be232e4a98beba9e470a0a93eb8491ccdcd874d9ac5cd6085675a4b45dc4b932421cadccab658703c650b7439630ed3c97c5502d7e9edc635d20cbaa0d0ffa2976797c36c6c033b635819859b4099b0db4b3f288feecb6099c0276d5f3ddec75bfc2618a0510c87a42dede87a1e40e3627dc63732e918472ae5127b3e0e17ce241bb0a5ec", 0xa4}], 0x9, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r6}}}], 0x20, 0x440}, 0x4000000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:08 executing program 1: r0 = syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x420, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x200}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x36, 0x33, 0x61, 0x37, 0x36, 0x61], 0x2d, [0x30, 0x63, 0x63], 0x2d, [0x31, 0x38, 0x33, 0x34], 0x2d, [0x62, 0x61, 0x36, 0x36], 0x2d, [0x35, 0x34, 0x63, 0x36, 0x51, 0x65, 0x63, 0x62]}}}, {@subj_user={'subj_user', 0x3d, '$\\'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') setpriority(0x1, 0x0, 0x1) 10:43:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:08 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000280)={'syz1', "d02af059d9be3b0ab28bf67cd1e9d7f99fa8edf7ea8559f7461072a943cc5be8d9dff727ac6b1a28c9dae0a983f151bb877a7ac78f99b2aa30533b62a4d82ed60b81ebe368f6fc8794d34ade251ad056b5a821ba07786e350a0daa5ef211f00a84d7d3efc3d8eadb2c603b779bc2ec196c244aaa513a6424ee02ad3ab5ec09402b1d50fabc1e0e36b8921ae88c09f263c9be97ea428d5267ebf49de70cc3e5e09edd6df4d19dbe1d3277eb78c8c232c9d06fd2609404c701e3eff1af211396a165390329947175a1b410aec6360261771b077e3e1306a68b75a26d12e060ab6b276725a1240426c80e741c06f0d523e5918d07bd5d88d0"}, 0xfb) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = signalfd4(r2, &(0x7f0000000080), 0x8, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)={{}, {r4, r5/1000+10000}}) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) fchdir(r4) setsockopt$inet6_buf(r4, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x49009, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="4010001000000000000000000000000000000000000076550c1671a1c4b3da3ce50dd7eecd578d98ac3f1c9d7ca6b0a2443833fe17e61ee78a"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r6, 0x23f, 0x0, 0x0, {{}, {0x0, 0xf, 0xf0}, {0xc, 0x19, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:08 executing program 1: setpriority(0x2, 0x0, 0x1) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) 10:43:08 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:08 executing program 3: setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r1) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080005000300000008000300", @ANYRES32=r7, @ANYBLOB="140004003a"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048010) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 10:43:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:08 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:08 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed800"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:08 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 1: setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0xfff, 0x9}) 10:43:09 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:09 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:09 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:43:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00@\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003100000008000100550000000c0099000000000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="240028bd7000fedbdf2576000000080003006831063f9bcb3f2f63a9cbdd535441d47d7c78ee920c77d152816402342fe9d2341a82fc04d4a4c6311d9e87dc0542653f1f95b7ebe1404083df1ae4a902", @ANYRES32=0x0, @ANYBLOB='\f\x00X\x00^\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00#\x00\x00\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) getrusage(0x1, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:09 executing program 1: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) setpriority(0x1, 0x0, 0x1) 10:43:09 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:43:09 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:09 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:09 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:10 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/104, 0x68) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) write$cgroup_freezer_state(r0, &(0x7f0000000100)='FREEZING\x00', 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:10 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) setpriority(0x1, 0x0, 0x1) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000080)=0x54) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000180)=0x80000000, 0x4) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="401000104d54407c6f0000000000bc9a0000000000001731bb7a98153a8acb42d9ce80a47ec363761824d60d982c66fb3cecf7704cac491cc80dbc9355f27caebb71636a22b55da8291553"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f00000001c0)=0x8) 10:43:10 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "85c0f0c6c09973574b55d7ea4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fde35859c18f16222615ca09b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1baa4e16c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "35b9fc4df70b2c55f637a5557c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40804) setpriority(0x1, 0x0, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x20, 0x6, @random="587b3fbd00"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x4000000], []]}, 0x237) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, 0x0, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x40200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="00140000850000007f6f0d9710ae1b1085e91c403980582c182c2b54053eabdc719a07c03a33c31ab9ffb3f8bf709979343a38925dbf43f8453aca80cc29a0a92b64976f0b7d7ec38c0f22881c5236da3579e29d0262ac00fd4f8279e37af7611b7aae0f568d21f7781431327fd8c79a7ab4b882e1c7cd41e446b91d34344f2d2f610432b1333af6069218bd6cb85a2e82ce94eff925fe8220d588885169341f5f17137a08f693339b92f05c80d2d9762679edfa8ed23afa1d0e6698cd8fbe35891f44aa8d9f22da0ffec9773ebdb3596f6b27434b49a8418c80cdf86e979d1022e4", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080005000300000008000300", @ANYRES32=r4, @ANYRESOCT], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008814}, 0x40) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xb4]}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x2, 0xa2c2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)={0x180, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x63d048cf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x60}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x993aaa84}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8045}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000005c0)={r5, 0xfffffffffffffffc, 0x1, 0x50}) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000080)={0x2, 0xd50}) setpriority(0x2, 0x0, 0x7fff) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) r9 = syz_io_uring_complete(0x0) ioctl$PPPIOCGNPMODE(r9, 0xc008744c, &(0x7f00000000c0)={0x3d, 0x2}) r10 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) ioctl$KDGKBMETA(r10, 0x4b62, &(0x7f0000000100)) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) setpriority(0x1, 0x0, 0x1) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:10 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) close(0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000001000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 0: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x0, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8000000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 1: socketpair(0xb, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0x24, &(0x7f0000000040)="107efaca178351fa86039d98987212f8144764c4d463c0f7b3a872d2e159ef4965c582a5899d4bd0d6d07b4298863902472f96400c5459d9f7e9735125eb8e93a43c5762f1502354347019359132a152d5421da3650937f24b540b92501a8633d22a0282036d00448ef05eb02d9a2390b87b323638d7847b5efb438aafe1bec8a71f77b3d99d13e0a4945d46ec0e16287ee71f8544a9c6248e6b421eff244a3da1ae", 0xa2) setpriority(0x1, 0x0, 0x1) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:10 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) setpriority(0x1, 0x0, 0x1) 10:43:10 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2, 0x40000000}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:10 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:10 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 10:43:10 executing program 1: r0 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r0, 0x0, 0x0) setpriority(0x1, r0, 0x1) 10:43:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "85c0f0c6c09973574b55d7ea4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fde35859c18f16222615ca09b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1baa4e16c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "35b9fc4df70b2c55f637a5557c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40804) setpriority(0x1, 0x0, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x20, 0x6, @random="587b3fbd00"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) 10:43:10 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:11 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:11 executing program 1: setpriority(0x1, 0x0, 0x1) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x0, 0x4}, &(0x7f0000000040)=[{}, {}, {}, {}]) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:11 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:11 executing program 1: setpriority(0x1, 0x0, 0x1) pidfd_open(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2001, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fchown(0xffffffffffffffff, 0xee01, 0xee01) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0xffffffff, 0x1, 0x8, 0x6, 0xdd}, 0x14) 10:43:11 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:11 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x0, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:11 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 1: setpriority(0x1, 0xffffffffffffffff, 0x1) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) r2 = accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000b81ac3ba7de8310dc8dc578aef713baa1a6160ba374b46c1f986c3091c9c8e83dac14453902da3c4483d40ff99fb1381f913af18e593feac946b70dab18086a80c0d2438e8e00b752b8de817cdbf98d47e77acacfb5ffc", @ANYRES16=r1, @ANYBLOB="010000000000000000003100000008000100780000000c0099008000000002000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f40)={&(0x7f0000007ec0)=ANY=[@ANYBLOB="4db8918044dc3e0000", @ANYRES64, @ANYBLOB="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"], 0x3edc}, 0x1, 0x0, 0x0, 0x90}, 0x4) setpriority(0x1, 0x0, 0x1) ptrace(0x11, 0xffffffffffffffff) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000180)={0x3, 0x41, &(0x7f0000000040)="fd1cc5ae38c0d3041240afd9cae956700ea1f58e6ff9d3feb575ee0236a92ef5f6dcc2dc48079806f79d7265e7a576c2c0be8ea8592d4547a75d9a9f70b11f24db"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x22, 0x24, [{0x6, 0x1}, {0x6c}, {0x60}, {0x3}, {0x2}, {0x12, 0x1}, {0x30}, {0x5, 0x1}, {0x24, 0x1}, {0x60, 0x1}, {0x36}, {0xb}, {0x2}, {0x69}, {0xb}, {0x9, 0x1}, {0x3}, {0x60}, {0x65, 0x1}, {0x16, 0x1}, {0x30}, {0x1}, {0x5}, {0x12}, {0x12, 0x1}, {0x1b}, {0x36, 0x1}, {0x9, 0x1}, {0x12}, {0xf}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x1, 0x0, {0x100000001, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xffffffff, 0x3}}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x2, 0x0, {0x7, 0x2, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x5}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x0, 0x4, 0x0, {0x8, 0x5, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x3d9, 0x6}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x40}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008045}, 0x24000040) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket(0x1e, 0x4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:12 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 1: setpriority(0x0, 0xffffffffffffffff, 0x6) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) clock_gettime(0x7, &(0x7f00000023c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000002400)={{r2, r3+10000000}}, &(0x7f0000002440)) ptrace$peeksig(0x4209, r1, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r6) clone3(&(0x7f0000002300)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x30}, &(0x7f0000000140)=""/103, 0x67, &(0x7f00000001c0)=""/138, &(0x7f00000022c0)=[r1, 0xffffffffffffffff, r4, r0, r5], 0x5, {r6}}, 0x58) ptrace$peeksig(0x4209, r0, 0x0, 0x0) ptrace$getsig(0x4202, r0, 0xce0, &(0x7f0000000000)) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:12 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:12 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:12 executing program 1: setpriority(0x0, 0x0, 0x1) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:12 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:12 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:12 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:12 executing program 3: unshare(0x44000600) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:12 executing program 1: setpriority(0x1, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x1cc, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdd9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x81e}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0xe271}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x153}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7a}, {0x6, 0x16, 0xd83c}, {0x5, 0x12, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) r2 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r2, 0x0, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) fstatfs(r3, &(0x7f00000001c0)=""/41) r4 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xfc, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 10:43:12 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:12 executing program 3: unshare(0x44000600) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:12 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:12 executing program 3: unshare(0x44000600) 10:43:12 executing program 2: unshare(0x44000600) 10:43:13 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(0x0, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:13 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:13 executing program 3: unshare(0x0) 10:43:13 executing program 1: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = open(&(0x7f0000000300)='./bus\x00', 0x3411c0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x8000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000340)={0x0, 0x7f}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) setpriority(0x1, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x12) ioctl$RTC_PIE_ON(r1, 0x7005) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f0000000280)=0x1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="11002dbd7000fcdbdf25020000001400030000000000000000000000ffffffffffff140003000000000000000000000000000000000014000200ff010000000000000000000000020001080005206401010214000200fc02000000000000000000000000000114000300ff010000000000000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x4004c010}, 0x4000) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "24cefb26e0ed919e", "28eb3ad814213b991a7ad77a9abeba9e", "1981c03c", "526c3c91e00140c0"}, 0x28) 10:43:13 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:13 executing program 2: unshare(0x44000600) 10:43:13 executing program 3: unshare(0x0) 10:43:13 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:13 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:13 executing program 3: unshare(0x0) 10:43:13 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:13 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:13 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:13 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 10:43:13 executing program 2: unshare(0x44000600) 10:43:13 executing program 1: setpriority(0x1, 0x0, 0x100) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x28e0}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda}]}, 0x84}, 0x1, 0x0, 0x0, 0x4181}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:13 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:13 executing program 2: unshare(0x44000600) 10:43:13 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:13 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) 10:43:13 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:14 executing program 3: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = open(&(0x7f0000000300)='./bus\x00', 0x3411c0, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x8000) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000340)={0x0, 0x7f}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) setpriority(0x1, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x12) ioctl$RTC_PIE_ON(r1, 0x7005) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f0000000280)=0x1) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="11002dbd7000fcdbdf25020000001400030000000000000000000000ffffffffffff140003000000000000000000000000000000000014000200ff010000000000000000000000020001080005206401010214000200fc02000000000000000000000000000114000300ff010000000000000000000000000001"], 0x80}, 0x1, 0x0, 0x0, 0x4004c010}, 0x4000) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "24cefb26e0ed919e", "28eb3ad814213b991a7ad77a9abeba9e", "1981c03c", "526c3c91e00140c0"}, 0x28) 10:43:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:14 executing program 1: setpriority(0x0, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101000, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1947) socket$tipc(0x1e, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x3, 0x5b6, {0x56, 0xff, 0x0, {0x2}, {}, @ramp={0x1, 0x7fff, {0xccc8, 0x4, 0x6, 0x1}}}, {0x52, 0x1, 0x2, {0x1, 0x1}, {0x80, 0x28ee}, @rumble={0x2}}}) 10:43:14 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:14 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:14 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:14 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:15 executing program 1: setpriority(0x1, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x2}, @mss={0x2, 0x4}, @timestamp], 0x4) 10:43:15 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:15 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:15 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:15 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:15 executing program 3: setpriority(0x0, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101000, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1947) socket$tipc(0x1e, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x3, 0x5b6, {0x56, 0xff, 0x0, {0x2}, {}, @ramp={0x1, 0x7fff, {0xccc8, 0x4, 0x6, 0x1}}}, {0x52, 0x1, 0x2, {0x1, 0x1}, {0x80, 0x28ee}, @rumble={0x2}}}) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:15 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:15 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed8"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:15 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:15 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:15 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:15 executing program 1: setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) r1 = open_tree(r0, &(0x7f0000001080)='./bus\x00', 0x9000) r2 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r2, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0x7, 0x0, r2}}}, 0x28) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r3}, 0x0, 0x10, @inherit={0x68, &(0x7f00000010c0)={0x1, 0x4, 0x7fffffff, 0x1, {0x4, 0x4, 0x1, 0x5, 0xfff}, [0x9, 0x100000001, 0xfffffffffffffe01, 0xffffffff]}}, @name="2c335674890ed60cc1515e17f8fb0c401510dfb19b55e3ed64a1bb275a94d75c780a012babc526ea7ed0f8d210a14d3ca939a68880cf80309097372fa87ccdbe921a8b1aca41329475dbb44dde1d3ceaaacca903e8ba8846e81e665c3a2be3f97b0f2c70d991562de7a546894d6ae228336174adaac6fce4d1f122bfc882aac974be08b555f15da572361b4ddbe23156f8b8b859cf7a67d6b2282a9f26979fee7f354edd19f3e51b72c0dd8ad1aa1849b621cff98f800ac6548e2a3009a8e8d89c31012d004ecc4172c4110a8daae064ac178bb49a2a63b8a6fa3ec0a1021f16531567ce34310f9294cc200915d5463e93c65d38fb425b1257e98ed5afbaa788078101097770f1c3ba08ae20ff4699fc5edeeb603bd82bb15fdbea3437f5ef9f00bcfc2416055071b2540ddabc554fc5fe83d16e0ca6aae78471d772a1ea9bef05b6eb8453a1db30bbfa0cf64848d2d07a78858c5b670e28107c4169a3e57bb124dd2d13030fae3e92883c4c186dc547068d8af12ab620f064e5ccfcbfd21ad653c2821f069070d053115c7137ce9fc146c05ff3e1051d433cca3e15648971c22df0a2d71a05d6f8af8524422be00227c822583622347bc0427db3eff8bc59a725df4cc72fc8d6b667a19043d4f473a12d5e10e526f7f0e7897b943539eb8d5ffd4bda5beba039ee603a28190410dce8f7715a609fe861870c1fe539ca0c101aa6edcf9eb39c1b286bff72c9fab002ea32a996592f68f1710f664fdcebcc9201a07ef62d10443dac94fc3787cf428fe29c0fdcae95c8ecb0ae37f29ed5588170938558c1abb3afe258750f5f3963c49b61ea5b1551f823f65b602cf4622482fe03d0ec0e9a3174cf796f943964b02590c2038fc868e7fd12e04eb097e0f0c93e5108b835b751a09ec15cb7dc9d0c0fc40ff94b03ee86c100688a4004ee048d32dcd1db29351499921ff0171c33a1741c8ed7f38a92a24bbe1615e15f6d0ed97e36f59231c8786262668806015adbe48d099a8cf68e2bada7a8896059c67fbee85f351466d6839d631da5c870186a418517b6a5a9d65276ec178ada4fb1a4fe5b1d454e74548404d447eaa9b6e3e356c63c75e65e1ebd636fb696307c71e2899e1c34d696a7fbaa63362171dd86cc313f192c33905774fde4a6d2bcd989ef59e3f803de11e0a45b807ccf4007731c971437f1bd540407c507cce64abf1ae1ebcc1d63f4d38643bcddff09812b3afc20e0ddef3127e7c6e3d3ab64a4cb2f5450264dbf27a5cdb958af66ed286cec2fb6c8c12376c4dc6139240f98cf59c738fb147afb7e9fa5cab77cfb7481884dc0d408aa615e3691433caa0e615abb01ae5398fabceaf69a40e0de465361facc3356df0bc1e7bde8e869c6483384c5d375b137508cba9387fefc00b804fb9727664104a9bf28f56bf3c7d92e5bbb2df98a2c6f75ba8dbfaeac4b25713bcd052fb3cbc77d757c71a8d0454651fbdaa1723d8b7ca6883d1527f473ca1047d90571e584b6fc2d1afd8e97e234dfca56aac8142c2e8bf3881e3091635d1ecfecc0e965d7505552647df9412b679f61080b1484363e01068f70f11f2f30073eb0456f1ccc1d76b3bc233c77b4cc444fe56df8cdfec15fd31c416c247277d0e3ec730ebf36ec36296dbc6eba6907e7588bfec56e9f4a4d1ae522788c44929a1ff809bc8cd45dffd610cf97c8c112dd2768e4adcfbfd8d89670f9680513b619a39abf6c273f159b898452dd9852c12cf6ea41eb9671a8e7c4f79e0e89862b23ff0f21d2e239c1319b8fa91949fe658af909e99bb5981dd684e85d090586e6ca4578eece6ea7bb4669452061f96a613a529b3a14083102bc0fa744e90b32acce58fd347d56cb9416327fcb41d49c1b5471a09f852fcee3eb1094f1802cfb00d9a73b6e150a9943e5309d5e71a77d7ae8f91e9d65e7c1f496a4c7b802fd1573514818ecee6a4b73b4e865ae2d558ee6c738bb2228f8bbe8524d4a631ee7dbebedb62c6c39290c17ed936473b5690819498cbc756268a32ef0143a4d60c93be6d62860ff1a5c82d63b0a6fe9293d931078e5df12eaa759f1c0f3aa961353a5c01c5f53a3e0ceb09cc70abd57bf4bd9be1abd6eca13bc4e8cd4c32f520c3648b9ae5463d771a15e32cb5e89d30048ae96c4f259d75acef7b4bcaf3a3473d1c6f9d90c8256aa6fbd427f34bb7aa046b0954725017a9c2206a1783160e06042d8b1b49c4d686d6ae83dc3a3cc8f2c53d17bdf521ed0aa2f8e1b21d0c507ca3ed455204f08c805c63378a2140600e44705295b94d434f842790ffe73f04c0abdcdeeb6b5fe4d5030af3e6a121570894843676e2bea8a2979e6f1fbf1fe8ca3a1209f2da03d2d08acaeb7166c4ad8fb011bbab64461f5806558970b75b2950519c627e9364da5db3ab8f8815592348f8c31da48de337483519b84ddca7a6108586e9b4f292a4e2fb7c5cfa47c16e60ec820ea0f01cc4b71df8f1070e34b2a7c32c2a9a206317d8a4aa984b6427f9d0c763e2f113953284511ecab4cb080015f44da48b6bcfb16632e2bf68bcd7fd2fc34e3a42142f030266a4796d8ef2e237fb3fdc938e2e46da1dc37a22bfc833e78b30304a89fde38fedf13d001ba42db18b37ef47bef74f0b3e4f1c0b6b079df50c9a35f4e2939a47d9ee30afd8b710f056b2ed06fd382a3a39ffec07943935246751f084151ef135682336b4e1157fe7bbcf412bf6b6068e1f40efd237bbd40603fbd7410cd40c35cd6909ac8aa5ecb04f601f461f1b276ff1aa93dc8a8d4243c8293af2107d3b28d9c2e4f9c480e9432a5ff832360cb21dfcec44f6c4279a8b6973e35d30a4b5247ea9f181ceee035cde9b30da03c6e05747df77da3d4570193854c0c365f7c94e52d799998f18fe066485c145772396d85c8e827b6bb99a93ff355532d95cfe6bdbc20ece935639226a2f5000374e6d1fed6060ea09647ed6f59721787a7adf829ef690c655a4e9074c06cb2590b7650da5d11de2e8a8e4224c74a42e7d4c6cebeaa99ad70f0e5edb017c37d6bd180e4143ae0623eb8051256b50076f5714e1fc5aa4176f1d923f4941e27d3a48fba5d7e3ebff60f1ba184524d37d464dd3c0b976f0f2fcde982877e3594ddc419964689904f32aeceaa42130a205d893626abb8782aa8b0b8f5dfe109714a641f5524e33cdb9962b2b897dd760c6eaf0eeaf49bc6bfbf406ace1c4ad6376bd6113753fff6a2b68567c7db37e8a469510131ee6bcd1502f356695c1a5aad3543840458ce9e26fbee2a251e6c9722a4f38ae7bcbe204cc5f2311da202ad8ea47c57e4fe9d838bc469001b715a468d0501cfbf57b08ee777f2ecc0c4203202151eb8243743d3741f4ee5f85b06b3f07eecac34bb61c6085e8eae8bee87fe0f00fee2ea2afdeaa1247af0c2e22294bbe4c05b01a64e5bd0b9526cdc85c6537f3959d9dff0fbfd4c6c7275179ca79822d07382c7b83c910fc0b151f7ba38d041b2c4d8cef0ef8830c6e047c8d3512194e307fdbd13e46d9a4cbe20deb0ae41db8f310bdac94bb639a3ec430b3b550011b39c5333aba616a829abbab03453d288ccda0f76cbe9aac3e33bfeaa2f5b074a483917d4942a8f906a61e332cbd238dd055b04783108150adeabc77aa6dfae09ce3c163692f5fdeec244fdbf58c46c1b4604beacc68b826fb9086bd9d33a40e361afc8aa2be83d9ba8b24936e95b0e532d4170d534d5a70c8a4b49ed54496c3f39749b4c0a64bd6c0c10dec55ea363c848f02519b98349edbf1a2858cbe1dc523c96cdc9a8e61dd68b5ade82e8851794be59a62c007d556a704f9a5a4bde396b07e006d208e06409b2c7c1058c5d144a7bdbe9d2a1154e6f3d4b40941b81831328878ba78c9b8836a0b6c53578ea149fffb487e2d14dc4d0d905c3333466afb8d0017f2b9f738d2c2a7c0f38a0597cd4b64256b1b1ea650db8454c3e03818aa6edaa171b0e3bf9d991ccbd852964f0e40f61cf5d5d2479c23f390c2645d6f296663c81b030aa33bdbb97a0a65caf51f86ded923a1acfd0965074fd949cced0daca54efb3488d4b42b023d68724aa71acb973e71ba9228bf321107a256ed1ff77a52f735e4101ebaaffe1b5a608aff6a282bd79f31ba88ab85b3736fd31f6c608bbd3d7e1d7dad00fdff037cb5a787081ce947acc662c72e23f8c7550dd2e121c968e18fedd8e65cc5d5c105f7b7ee14e8ac0053d15db54845897bf1d0c3f4d9336270fa434671eadfeecd72e1b1a9184120b71b5a5763cacb19079a7570ca6f95f5bb62e302d1e7e2345e249f987e5e811aae06f269dc0f99f9f94acdf397b4c4738090fee42f926bf0a3c0777d3c23d6bc578080a976cbfb9d99591d64bf8d3eb0d1fe342cabfc6805f17bcd487b182c771164afbe6e3d6a9ffa2dbfb5cc10495c1213ee03078fa410a2531e76e579db5d9cbbb9cf2502e7daece06e32bf5bae5d0477c4639b2f554044246f7a7af05d2a9a7a567560cca55c75b5b85b7b9c5df98f40be818964dfc58f68fc19d110d0d7a7f9e6d5a4989174bca0b059b5cd231963fa6b5a3c71b9589c35fabeb82405e06634dd4849af018a64a65a9e8bd1ac3250d0fa2d2486095365d1ec16f0796845c41c9287e54ddc82745a210f86ccd1adfd41a9cc34dc8069013622c6ea165520588b6ac85988fcdbda02d2733f3edc9177de94f8ba673c160a52109f483f728300bab243db23771ff9e5889fae6ebc4f66d04a392cd0d767f0e0e7cebeaf88773eff131079a98cb44924c22833f8283469db6be88130e53b937433578317746eb73d229463d303f8e4928b272154447ccf4d9f796cce2fb3b34f76ad310041cb52ea4a1c0fbf22f612a881ce93d15425459d84f9a13c861f66db70bd6af27b271d30edbb9aee7c2faed935e9178db62fc2ec82bb89cf9adeed2eeb57747164518b2e9c84097e82b0fae3131ab63276fd264a44fc02f9ad1ce4d53149f8a3fd83c1928b82d8ba498cc338e158777c3695c3e18a3f88e34cd00f3a01b81793b6295ac3b460ea58c547ce0f1913f8b37f36b0465441152f5ecde1d1cab09827dadce5592c5a30fff0a807eb1605787ba1e38d5401243ebb124482eba721a7ef8f736ac127be03f7f9df027651b22e449543da21f1f4f85bddead8d8cd4086c502d64b5c3537e82b2ade765177cb0c578b050fa6215226cfd3a7c95c0fc75af810abfd4ff71635586bb91cc0b4363a6fc113b98706f60867b51461dfe0fce6c0487589e55be3371bdc704d26914cddb45e8d4afb43e53b3eff2e82bd502b52f2db52db7cbba7ce71aa87bf4b519aa322de78c95f9227b36eced6d55a5d8e0b136d11777ccfb5c8a85612c2ad20acd6469d8cc4802404f7a87fd8e5bf52c2795853ee9faab73ed82a57f970bf83b7753abd1a13b61de0e293a1617dc8cdc147fea3d57b8d8eadf016a9c3743c604692445a3badef7650d04a536689e3f2168ed0b165f01febe6720b3d969ea3fb3dee798d8cc5048d5c8a8460fb15253d4bc88374fdcf44ea5b7df527b7fdbb4c0c7f53568aa4d054ffaf1431353086f0bffa7eda9bbfb1f9fc75adefdd9d41ebae361747777c478923f70cb05c99f48f62d5c2e6f002dc9770af952bfe49340824e50f04b240f5dded241c476ff4707e2454422305ca6d8fa7c84f37d3b11dd4718fa76faaa07af61865ee355dc735f892aae4ee2"}) perf_event_open(&(0x7f0000001180)={0x3, 0x70, 0x20, 0x0, 0x7, 0x0, 0x0, 0x3, 0x10000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x5, @perf_bp={&(0x7f0000001140), 0x4}, 0x10, 0x7, 0x1, 0x2, 0x3b, 0x0, 0x8fb}, r2, 0xd, 0xffffffffffffffff, 0x2) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:15 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:15 executing program 0: unshare(0x44000600) 10:43:15 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:15 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:15 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:16 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:16 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:16 executing program 1: setpriority(0x1, 0x0, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x784]}, 0x8, 0x80c00) syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x0, 0x100}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x80000000}}, ["", "", "", "", "", ""]}, 0x24}}, 0x20000000) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:16 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:16 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:16 executing program 0: unshare(0x0) 10:43:16 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:16 executing program 2: setpriority(0x1, 0x0, 0x1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) r1 = open_tree(r0, &(0x7f0000001080)='./bus\x00', 0x9000) r2 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r2, 0x0, 0x0) write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0xfffffffffffffff5, 0x0, {{0x0, 0x7, 0x0, r2}}}, 0x28) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r3}, 0x0, 0x10, @inherit={0x68, &(0x7f00000010c0)={0x1, 0x4, 0x7fffffff, 0x1, {0x4, 0x4, 0x1, 0x5, 0xfff}, [0x9, 0x100000001, 0xfffffffffffffe01, 0xffffffff]}}, @name="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"}) perf_event_open(&(0x7f0000001180)={0x3, 0x70, 0x20, 0x0, 0x7, 0x0, 0x0, 0x3, 0x10000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x5, @perf_bp={&(0x7f0000001140), 0x4}, 0x10, 0x7, 0x1, 0x2, 0x3b, 0x0, 0x8fb}, r2, 0xd, 0xffffffffffffffff, 0x2) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:16 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:17 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:17 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:17 executing program 0: unshare(0x0) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:17 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:17 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:17 executing program 0: unshare(0x0) 10:43:17 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:17 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:17 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:17 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:17 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:17 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:17 executing program 0: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:43:17 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:17 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:18 executing program 2: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:18 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:18 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:18 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:18 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:18 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:18 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:19 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:19 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:19 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:19 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:19 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:19 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:19 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:19 executing program 1: setpriority(0x1, 0x0, 0x1) pidfd_open(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2001, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fchown(0xffffffffffffffff, 0xee01, 0xee01) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0xffffffff, 0x1, 0x8, 0x6, 0xdd}, 0x14) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:19 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:19 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:19 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:19 executing program 3: unshare(0x44000600) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ustat(0xcad, &(0x7f0000000100)) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:20 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2, 0x18000000}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:20 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "85c0f0c6c09973574b55d7ea4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fde35859c18f16222615ca09b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1baa4e16c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "35b9fc4df70b2c55f637a5557c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40804) setpriority(0x1, 0x0, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x20, 0x6, @random="587b3fbd00"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) 10:43:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "85c0f0c6c09973574b55d7ea4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fde35859c18f16222615ca09b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a1baa4e16c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "35b9fc4df70b2c55f637a5557c"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40804) setpriority(0x1, 0x0, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x20, 0x6, @random="587b3fbd00"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:20 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000001000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:20 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000100)="5ab505b1149a31e7755f9368d6ccd71d7940f9964a29ea8ac55c52ab26dc0116de0880e7cc06003221e3addeced71f2a2052696dacbf3014a7022f81bb5df53c59c5fb929375a9ca2c095425c39fe00f633b44a835c2599ae7d5aa84fcb716314dd8d7fff32d1da5042c1dfb6f19571766062c20642dc0d1f440d6076adfae779e2d81945928cfa55395bd", 0x8b, 0x4, 0x0, 0x2, r0}, &(0x7f0000000280)) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r5}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000080)={0x1, 0x8, 0xb79}) 10:43:20 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:20 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000001000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:20 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2, 0x18}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:20 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:20 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:21 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000100)="5ab505b1149a31e7755f9368d6ccd71d7940f9964a29ea8ac55c52ab26dc0116de0880e7cc06003221e3addeced71f2a2052696dacbf3014a7022f81bb5df53c59c5fb929375a9ca2c095425c39fe00f633b44a835c2599ae7d5aa84fcb716314dd8d7fff32d1da5042c1dfb6f19571766062c20642dc0d1f440d6076adfae779e2d81945928cfa55395bd", 0x8b, 0x4, 0x0, 0x2, r0}, &(0x7f0000000280)) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r5}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000080)={0x1, 0x8, 0xb79}) 10:43:21 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "1b27e1ed", {0x3, 0x105, 0x0, 0x8, 0xab3, 0x30, 0xfe}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:21 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x10, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x10, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x6, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:21 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000001000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x4, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[], []]}, 0x237) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:21 executing program 1: setpriority(0x2, 0x0, 0x1) 10:43:21 executing program 2 (fault-call:9 fault-nth:0): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:21 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x21c, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x40) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="40100010000100000000000000000005000000000000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:21 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x1, {0x8, 0x7fe0, 0x3, 0x0, 0x81}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="4010001000"/22], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:21 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000009afd48f848d6798aaf5ed80000001000"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:43:21 executing program 1: setpriority(0x2, 0x0, 0x1) 10:43:21 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) [ 791.811520][ T919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 791.823189][ T919] tipc: Enabling of bearer < [ 791.823189][ T919] > rejected, illegal name [ 791.844548][ T923] FAULT_INJECTION: forcing a failure. [ 791.844548][ T923] name failslab, interval 1, probability 0, space 0, times 0 [ 791.915693][ T923] CPU: 1 PID: 923 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 791.927193][ T923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.937239][ T923] Call Trace: [ 791.940521][ T923] dump_stack+0x1b0/0x21e [ 791.944840][ T923] ? devkmsg_release+0x11c/0x11c [ 791.949772][ T923] ? show_regs_print_info+0x12/0x12 [ 791.954958][ T923] ? avc_denied+0x1c0/0x1c0 [ 791.959474][ T923] should_fail+0x6fb/0x860 [ 791.963881][ T923] ? setup_fault_attr+0x2b0/0x2b0 [ 791.968892][ T923] ? avc_has_perm+0xbd/0x260 [ 791.973467][ T923] ? avc_has_perm+0x15f/0x260 [ 791.978139][ T923] ? alloc_pipe_info+0xa1/0x3a0 [ 791.982976][ T923] should_failslab+0x5/0x20 [ 791.987465][ T923] kmem_cache_alloc_trace+0x39/0x270 [ 791.992738][ T923] alloc_pipe_info+0xa1/0x3a0 [ 791.997411][ T923] splice_direct_to_actor+0x94e/0xb00 [ 792.002772][ T923] ? avc_has_perm+0xbd/0x260 [ 792.007349][ T923] ? match_file+0x120/0x120 [ 792.011843][ T923] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 792.017207][ T923] ? do_splice_direct+0x3d0/0x3d0 [ 792.022219][ T923] ? pipe_to_sendpage+0x300/0x300 [ 792.027236][ T923] ? security_file_permission+0x128/0x300 [ 792.032942][ T923] do_splice_direct+0x279/0x3d0 [ 792.037782][ T923] ? splice_direct_to_actor+0xb00/0xb00 [ 792.043314][ T923] ? selinux_file_permission+0x276/0x520 [ 792.048943][ T923] ? security_file_permission+0x128/0x300 [ 792.054652][ T923] do_sendfile+0x89d/0x1110 [ 792.059146][ T923] ? compat_writev+0x390/0x390 [ 792.063897][ T923] ? security_file_permission+0x128/0x300 [ 792.069605][ T923] ? vfs_write+0x427/0x4f0 [ 792.074006][ T923] ? fput_many+0x42/0x1a0 [ 792.078361][ T923] __x64_sys_sendfile64+0x1ae/0x220 [ 792.083554][ T923] ? __ia32_sys_sendfile+0x240/0x240 [ 792.088823][ T923] ? do_syscall_64+0x80/0x150 [ 792.093487][ T923] do_syscall_64+0xcb/0x150 [ 792.097982][ T923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.103862][ T923] RIP: 0033:0x45de59 [ 792.107742][ T923] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.127330][ T923] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.135726][ T923] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 792.143685][ T923] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 792.151818][ T923] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 10:43:22 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:22 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) [ 792.159781][ T923] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000000 [ 792.167739][ T923] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) epoll_create1(0x0) 10:43:22 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:22 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0) 10:43:22 executing program 2 (fault-call:9 fault-nth:1): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:22 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:22 executing program 1: setpriority(0x2, 0x0, 0x1) [ 792.354087][ T954] FAULT_INJECTION: forcing a failure. [ 792.354087][ T954] name failslab, interval 1, probability 0, space 0, times 0 [ 792.369471][ T954] CPU: 0 PID: 954 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 792.380842][ T954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.390887][ T954] Call Trace: [ 792.394190][ T954] dump_stack+0x1b0/0x21e [ 792.398519][ T954] ? devkmsg_release+0x11c/0x11c [ 792.403441][ T954] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 792.408798][ T954] ? show_regs_print_info+0x12/0x12 [ 792.413979][ T954] ? avc_denied+0x1c0/0x1c0 [ 792.418464][ T954] should_fail+0x6fb/0x860 [ 792.422864][ T954] ? setup_fault_attr+0x2b0/0x2b0 [ 792.427872][ T954] ? apic_timer_interrupt+0xa/0x20 [ 792.432974][ T954] ? apic_timer_interrupt+0xa/0x20 [ 792.438071][ T954] ? kcalloc+0x32/0x60 [ 792.442122][ T954] should_failslab+0x5/0x20 [ 792.446610][ T954] __kmalloc+0x5f/0x2c0 [ 792.450752][ T954] ? alloc_pipe_info+0xc3/0x3a0 [ 792.455586][ T954] ? alloc_pipe_info+0xf6/0x3a0 [ 792.460423][ T954] kcalloc+0x32/0x60 [ 792.464302][ T954] alloc_pipe_info+0x1b9/0x3a0 [ 792.469074][ T954] splice_direct_to_actor+0x94e/0xb00 [ 792.474432][ T954] ? avc_has_perm+0xbd/0x260 [ 792.479008][ T954] ? match_file+0x120/0x120 [ 792.483494][ T954] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 792.488859][ T954] ? do_splice_direct+0x3d0/0x3d0 [ 792.493877][ T954] ? pipe_to_sendpage+0x300/0x300 [ 792.498888][ T954] ? security_file_permission+0x128/0x300 [ 792.504585][ T954] do_splice_direct+0x279/0x3d0 [ 792.509410][ T954] ? splice_direct_to_actor+0xb00/0xb00 [ 792.514936][ T954] ? security_file_permission+0x128/0x300 [ 792.520746][ T954] do_sendfile+0x89d/0x1110 [ 792.525234][ T954] ? compat_writev+0x390/0x390 [ 792.529980][ T954] ? security_file_permission+0x128/0x300 [ 792.535700][ T954] ? vfs_write+0x427/0x4f0 [ 792.540101][ T954] ? fput_many+0x42/0x1a0 [ 792.544437][ T954] __x64_sys_sendfile64+0x1ae/0x220 [ 792.549625][ T954] ? apic_timer_interrupt+0xa/0x20 [ 792.554714][ T954] ? __ia32_sys_sendfile+0x240/0x240 [ 792.559983][ T954] ? do_syscall_64+0x10c/0x150 [ 792.564730][ T954] ? do_syscall_64+0x11a/0x150 [ 792.569470][ T954] do_syscall_64+0xcb/0x150 [ 792.573960][ T954] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.579829][ T954] RIP: 0033:0x45de59 [ 792.583704][ T954] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.603291][ T954] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.611687][ T954] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 792.619638][ T954] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 792.627593][ T954] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 792.635546][ T954] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000001 [ 792.643506][ T954] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:22 executing program 0: mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 10:43:22 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1}, 0x6e) 10:43:22 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:22 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}], 0x2}, 0x0) 10:43:22 executing program 2 (fault-call:9 fault-nth:2): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) 10:43:22 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1683, 0x0) 10:43:22 executing program 4: lsetxattr$security_capability(&(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000380), 0x0) 10:43:23 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1683, 0x0) 10:43:23 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:23 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f00000000c0)='.', 0x1, 0x100000000}, {&(0x7f0000000100)="86", 0x1}], 0x0, 0x0) 10:43:23 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 792.968985][ T965] FAULT_INJECTION: forcing a failure. [ 792.968985][ T965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.989023][ T965] CPU: 0 PID: 965 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 793.000406][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.010543][ T965] Call Trace: [ 793.013831][ T965] dump_stack+0x1b0/0x21e [ 793.018153][ T965] ? devkmsg_release+0x11c/0x11c [ 793.023088][ T965] ? show_regs_print_info+0x12/0x12 [ 793.028278][ T965] ? do_splice_direct+0x278/0x3d0 [ 793.033302][ T965] ? stack_trace_consume_entry+0x15c/0x230 [ 793.039103][ T965] should_fail+0x6fb/0x860 [ 793.043516][ T965] ? setup_fault_attr+0x2b0/0x2b0 [ 793.048541][ T965] __alloc_pages_nodemask+0x1ee/0x7c0 [ 793.053913][ T965] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 793.059457][ T965] ? xa_load+0x323/0x340 [ 793.063702][ T965] __do_page_cache_readahead+0x244/0x510 10:43:23 executing program 0: inotify_init1(0x0) select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000380)={0x8}, &(0x7f00000003c0)) 10:43:23 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x54880, 0x0) 10:43:23 executing program 3: sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)) [ 793.069329][ T965] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 793.075743][ T965] ? page_cache_sync_readahead+0xa3/0x3c0 [ 793.081482][ T965] generic_file_read_iter+0x626/0x20a0 [ 793.086944][ T965] ? find_get_pages_range_tag+0xae0/0xae0 [ 793.092654][ T965] generic_file_splice_read+0x491/0x780 [ 793.098185][ T965] ? splice_shrink_spd+0xb0/0xb0 [ 793.103101][ T965] ? security_file_permission+0x1e9/0x300 [ 793.108794][ T965] ? splice_shrink_spd+0xb0/0xb0 [ 793.113702][ T965] splice_direct_to_actor+0x3cf/0xb00 [ 793.119061][ T965] ? do_splice_direct+0x3d0/0x3d0 [ 793.124072][ T965] ? pipe_to_sendpage+0x300/0x300 [ 793.129067][ T965] ? security_file_permission+0x128/0x300 [ 793.134763][ T965] do_splice_direct+0x279/0x3d0 [ 793.139589][ T965] ? splice_direct_to_actor+0xb00/0xb00 [ 793.145109][ T965] ? selinux_file_permission+0x151/0x520 [ 793.150737][ T965] ? security_file_permission+0x128/0x300 [ 793.156436][ T965] do_sendfile+0x89d/0x1110 [ 793.160925][ T965] ? compat_writev+0x390/0x390 [ 793.165755][ T965] ? ksys_write+0x21e/0x2a0 [ 793.170231][ T965] ? fput_many+0x42/0x1a0 [ 793.174532][ T965] __x64_sys_sendfile64+0x1ae/0x220 [ 793.179702][ T965] ? apic_timer_interrupt+0xa/0x20 [ 793.184784][ T965] ? __ia32_sys_sendfile+0x240/0x240 [ 793.190053][ T965] ? do_syscall_64+0x80/0x150 [ 793.194701][ T965] do_syscall_64+0xcb/0x150 [ 793.199175][ T965] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.205049][ T965] RIP: 0033:0x45de59 [ 793.208926][ T965] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.228505][ T965] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.237121][ T965] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 793.245074][ T965] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 793.253035][ T965] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 793.261086][ T965] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000002 10:43:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000100)) [ 793.269030][ T965] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:23 executing program 2 (fault-call:9 fault-nth:3): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:23 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0xffffffff, 0x4) 10:43:23 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x240000, 0x0) 10:43:23 executing program 0: mknod(0x0, 0x0, 0x0) clone(0x24120000, &(0x7f0000000140), &(0x7f0000000000), 0x0, &(0x7f0000000200)="e5f41165a11fa3a5a13b5337f11cca1270d6dd7829686a3b600c2ced96442216dc373f0e6b5dee7e3e41b746dc0cd6862fe456dcdc0f322dd37bb916525a9df822bcf314fa6a63cfbb45c058fad14511bb1d8e9a576da1") 10:43:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000100)) 10:43:23 executing program 3: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 10:43:23 executing program 4: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) 10:43:23 executing program 4: select(0x40, &(0x7f0000000200)={0x2}, &(0x7f0000000100)={0x4}, 0x0, 0x0) 10:43:23 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:23 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000100)="86", 0x1}, {&(0x7f0000000340)="d1", 0x1, 0xdd3e}], 0x0, 0x0) 10:43:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)=0x5d) [ 793.527390][ T1018] FAULT_INJECTION: forcing a failure. [ 793.527390][ T1018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 793.540686][ T1018] CPU: 1 PID: 1018 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 793.552238][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.562275][ T1018] Call Trace: [ 793.565545][ T1018] dump_stack+0x1b0/0x21e [ 793.569852][ T1018] ? devkmsg_release+0x11c/0x11c [ 793.574789][ T1018] ? show_regs_print_info+0x12/0x12 [ 793.579957][ T1018] ? do_sendfile+0x89c/0x1110 [ 793.584605][ T1018] ? kasan_alloc_pages+0x4a/0x60 [ 793.589514][ T1018] should_fail+0x6fb/0x860 [ 793.593902][ T1018] ? setup_fault_attr+0x2b0/0x2b0 [ 793.598902][ T1018] __alloc_pages_nodemask+0x1ee/0x7c0 [ 793.604245][ T1018] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 793.609764][ T1018] ? xa_load+0x323/0x340 [ 793.613987][ T1018] __do_page_cache_readahead+0x244/0x510 [ 793.619604][ T1018] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 793.625991][ T1018] ? page_cache_sync_readahead+0xa3/0x3c0 [ 793.631679][ T1018] generic_file_read_iter+0x626/0x20a0 [ 793.637116][ T1018] ? find_get_pages_range_tag+0xae0/0xae0 [ 793.642806][ T1018] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 793.648151][ T1018] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.654190][ T1018] ? avc_denied+0x1c0/0x1c0 [ 793.658670][ T1018] generic_file_splice_read+0x491/0x780 [ 793.664186][ T1018] ? splice_shrink_spd+0xb0/0xb0 [ 793.669118][ T1018] ? security_file_permission+0x1e9/0x300 [ 793.674812][ T1018] ? splice_shrink_spd+0xb0/0xb0 [ 793.679728][ T1018] splice_direct_to_actor+0x3cf/0xb00 [ 793.685078][ T1018] ? do_splice_direct+0x3d0/0x3d0 [ 793.690086][ T1018] ? pipe_to_sendpage+0x300/0x300 [ 793.695088][ T1018] ? security_file_permission+0x128/0x300 [ 793.700785][ T1018] do_splice_direct+0x279/0x3d0 [ 793.705612][ T1018] ? splice_direct_to_actor+0xb00/0xb00 [ 793.711131][ T1018] ? security_file_permission+0x128/0x300 [ 793.716824][ T1018] do_sendfile+0x89d/0x1110 [ 793.721302][ T1018] ? compat_writev+0x390/0x390 [ 793.726054][ T1018] ? fput_many+0x42/0x1a0 [ 793.730353][ T1018] __x64_sys_sendfile64+0x1ae/0x220 [ 793.735522][ T1018] ? __ia32_sys_sendfile+0x240/0x240 [ 793.740776][ T1018] ? __x64_sys_write+0x19/0x80 [ 793.745515][ T1018] do_syscall_64+0xcb/0x150 [ 793.749989][ T1018] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 793.755868][ T1018] RIP: 0033:0x45de59 [ 793.759732][ T1018] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.779308][ T1018] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.787692][ T1018] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 793.795634][ T1018] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 793.803577][ T1018] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 793.811531][ T1018] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000003 [ 793.819475][ T1018] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:24 executing program 2 (fault-call:9 fault-nth:4): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') 10:43:24 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000003c0)='c', 0x1, 0xffff}, {&(0x7f0000000500)="e6", 0x1, 0xe663}], 0x0, 0x0) 10:43:24 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x0, 0x3}}, 0x14) rt_sigaction(0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:43:24 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:24 executing program 3: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) 10:43:24 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0) 10:43:24 executing program 4: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 10:43:24 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:24 executing program 4: r0 = epoll_create(0x955) write$binfmt_script(r0, 0x0, 0x0) 10:43:24 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)={0x10, 0x7, 0x0, {{0x3, '::}'}}}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 10:43:24 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) [ 794.059551][ T1048] FAULT_INJECTION: forcing a failure. [ 794.059551][ T1048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.075669][ T1048] CPU: 0 PID: 1048 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 794.087127][ T1048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.097169][ T1048] Call Trace: [ 794.100449][ T1048] dump_stack+0x1b0/0x21e [ 794.104748][ T1048] ? devkmsg_release+0x11c/0x11c [ 794.109653][ T1048] ? show_regs_print_info+0x12/0x12 [ 794.114817][ T1048] ? stack_trace_save+0x110/0x1e0 [ 794.119821][ T1048] ? kasan_alloc_pages+0x4a/0x60 [ 794.124724][ T1048] should_fail+0x6fb/0x860 [ 794.129119][ T1048] ? setup_fault_attr+0x2b0/0x2b0 [ 794.134147][ T1048] __alloc_pages_nodemask+0x1ee/0x7c0 [ 794.139493][ T1048] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 794.145020][ T1048] ? xa_load+0x323/0x340 [ 794.149248][ T1048] __do_page_cache_readahead+0x244/0x510 [ 794.154859][ T1048] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 794.161245][ T1048] ? page_cache_sync_readahead+0xa3/0x3c0 [ 794.166937][ T1048] generic_file_read_iter+0x626/0x20a0 [ 794.172385][ T1048] ? find_get_pages_range_tag+0xae0/0xae0 [ 794.178170][ T1048] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 794.183524][ T1048] ? apic_timer_interrupt+0xa/0x20 [ 794.188605][ T1048] ? splice_direct_to_actor+0xd4/0xb00 [ 794.194029][ T1048] ? should_fail+0x14d/0x860 [ 794.198592][ T1048] generic_file_splice_read+0x491/0x780 [ 794.204106][ T1048] ? splice_shrink_spd+0xb0/0xb0 [ 794.209031][ T1048] ? __sanitizer_cov_trace_pc+0x45/0x50 [ 794.214548][ T1048] ? security_file_permission+0x1e9/0x300 [ 794.220250][ T1048] ? splice_shrink_spd+0xb0/0xb0 [ 794.225157][ T1048] splice_direct_to_actor+0x3cf/0xb00 [ 794.230503][ T1048] ? do_splice_direct+0x3d0/0x3d0 [ 794.235509][ T1048] ? pipe_to_sendpage+0x300/0x300 [ 794.240501][ T1048] ? security_file_permission+0x128/0x300 [ 794.246185][ T1048] do_splice_direct+0x279/0x3d0 [ 794.251016][ T1048] ? splice_direct_to_actor+0xb00/0xb00 [ 794.256531][ T1048] ? security_file_permission+0x128/0x300 [ 794.262215][ T1048] do_sendfile+0x89d/0x1110 [ 794.266688][ T1048] ? compat_writev+0x390/0x390 [ 794.271420][ T1048] ? vfs_write+0x427/0x4f0 [ 794.275803][ T1048] ? fput_many+0x42/0x1a0 [ 794.280101][ T1048] __x64_sys_sendfile64+0x1ae/0x220 [ 794.285280][ T1048] ? __ia32_sys_sendfile+0x240/0x240 [ 794.290564][ T1048] ? do_syscall_64+0x80/0x150 [ 794.295263][ T1048] do_syscall_64+0xcb/0x150 [ 794.299744][ T1048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.305613][ T1048] RIP: 0033:0x45de59 [ 794.309481][ T1048] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.329187][ T1048] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 794.337588][ T1048] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 794.345532][ T1048] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 794.353479][ T1048] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 794.361425][ T1048] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000004 [ 794.369373][ T1048] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:24 executing program 2 (fault-call:9 fault-nth:5): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:24 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) io_destroy(r0) 10:43:24 executing program 0: wait4(0x0, 0x0, 0x8, 0x0) 10:43:24 executing program 1: r0 = inotify_init1(0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x46000023) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x10, 0x7, 0x0, {{0x3, '::}'}}}, 0x10) 10:43:24 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:24 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x4f1483, 0x0) 10:43:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000)='\f', 0x1}]) 10:43:24 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:24 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:43:24 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x34040, 0x0) 10:43:24 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000100)="86", 0x1}, {&(0x7f0000000340)="d1", 0x1}], 0x0, 0x0) [ 794.578082][ T1073] FAULT_INJECTION: forcing a failure. [ 794.578082][ T1073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.595803][ T1073] CPU: 0 PID: 1073 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 794.607262][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.617323][ T1073] Call Trace: [ 794.620614][ T1073] dump_stack+0x1b0/0x21e [ 794.624934][ T1073] ? devkmsg_release+0x11c/0x11c [ 794.629854][ T1073] ? show_regs_print_info+0x12/0x12 [ 794.635022][ T1073] ? clear_page_erms+0x7/0x10 [ 794.639669][ T1073] ? kasan_alloc_pages+0x4a/0x60 [ 794.644578][ T1073] should_fail+0x6fb/0x860 [ 794.648963][ T1073] ? setup_fault_attr+0x2b0/0x2b0 [ 794.653974][ T1073] __alloc_pages_nodemask+0x1ee/0x7c0 [ 794.659320][ T1073] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 794.664837][ T1073] ? xa_load+0x323/0x340 [ 794.669052][ T1073] __do_page_cache_readahead+0x244/0x510 [ 794.674656][ T1073] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 794.681039][ T1073] ? page_cache_sync_readahead+0xa3/0x3c0 [ 794.686727][ T1073] generic_file_read_iter+0x626/0x20a0 [ 794.692161][ T1073] ? find_get_pages_range_tag+0xae0/0xae0 [ 794.697850][ T1073] ? iov_iter_pipe+0x8e/0x310 [ 794.702499][ T1073] ? iov_iter_pipe+0x16d/0x310 [ 794.707236][ T1073] generic_file_splice_read+0x491/0x780 [ 794.712751][ T1073] ? splice_shrink_spd+0xb0/0xb0 [ 794.717660][ T1073] ? security_file_permission+0x1e9/0x300 [ 794.723348][ T1073] ? splice_shrink_spd+0xb0/0xb0 [ 794.728256][ T1073] splice_direct_to_actor+0x3cf/0xb00 [ 794.733597][ T1073] ? do_splice_direct+0x3d0/0x3d0 [ 794.738589][ T1073] ? pipe_to_sendpage+0x300/0x300 [ 794.743600][ T1073] ? security_file_permission+0x128/0x300 [ 794.749288][ T1073] do_splice_direct+0x279/0x3d0 [ 794.754108][ T1073] ? splice_direct_to_actor+0xb00/0xb00 [ 794.759628][ T1073] ? security_file_permission+0x128/0x300 [ 794.765316][ T1073] do_sendfile+0x89d/0x1110 [ 794.769817][ T1073] ? compat_writev+0x390/0x390 [ 794.774659][ T1073] ? vfs_write+0x427/0x4f0 [ 794.779150][ T1073] ? fput_many+0x42/0x1a0 [ 794.783450][ T1073] __x64_sys_sendfile64+0x1ae/0x220 [ 794.788618][ T1073] ? __ia32_sys_sendfile+0x240/0x240 [ 794.793888][ T1073] do_syscall_64+0xcb/0x150 [ 794.798365][ T1073] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.804226][ T1073] RIP: 0033:0x45de59 [ 794.808093][ T1073] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:43:24 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) [ 794.827681][ T1073] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 794.836060][ T1073] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 794.844003][ T1073] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 794.851944][ T1073] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 794.859884][ T1073] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000005 [ 794.867828][ T1073] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:25 executing program 2 (fault-call:9 fault-nth:6): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 795.051635][ T1103] FAULT_INJECTION: forcing a failure. [ 795.051635][ T1103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.065359][ T1103] CPU: 0 PID: 1103 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 795.076788][ T1103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.086832][ T1103] Call Trace: [ 795.090109][ T1103] dump_stack+0x1b0/0x21e [ 795.094431][ T1103] ? devkmsg_release+0x11c/0x11c [ 795.099362][ T1103] ? show_regs_print_info+0x12/0x12 [ 795.104543][ T1103] ? kasan_alloc_pages+0x4a/0x60 [ 795.109473][ T1103] should_fail+0x6fb/0x860 [ 795.113865][ T1103] ? setup_fault_attr+0x2b0/0x2b0 [ 795.118860][ T1103] ? xa_load+0x2df/0x340 [ 795.123080][ T1103] __alloc_pages_nodemask+0x1ee/0x7c0 [ 795.128427][ T1103] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 795.133947][ T1103] ? xa_load+0x323/0x340 [ 795.138164][ T1103] __do_page_cache_readahead+0x244/0x510 [ 795.143769][ T1103] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 795.150156][ T1103] ? unwind_next_frame+0x1c07/0x22b0 [ 795.155414][ T1103] ? page_cache_sync_readahead+0xa3/0x3c0 [ 795.161236][ T1103] generic_file_read_iter+0x626/0x20a0 [ 795.166701][ T1103] ? find_get_pages_range_tag+0xae0/0xae0 [ 795.172404][ T1103] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 795.177752][ T1103] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.183808][ T1103] ? avc_denied+0x1c0/0x1c0 [ 795.188294][ T1103] generic_file_splice_read+0x491/0x780 [ 795.193820][ T1103] ? splice_shrink_spd+0xb0/0xb0 [ 795.198739][ T1103] ? security_file_permission+0x1e9/0x300 [ 795.204456][ T1103] ? splice_shrink_spd+0xb0/0xb0 [ 795.209377][ T1103] splice_direct_to_actor+0x3cf/0xb00 [ 795.214743][ T1103] ? do_splice_direct+0x3d0/0x3d0 [ 795.219737][ T1103] ? pipe_to_sendpage+0x300/0x300 [ 795.224735][ T1103] ? security_file_permission+0x128/0x300 [ 795.230426][ T1103] do_splice_direct+0x279/0x3d0 [ 795.235262][ T1103] ? splice_direct_to_actor+0xb00/0xb00 [ 795.240798][ T1103] ? security_file_permission+0x128/0x300 [ 795.246500][ T1103] do_sendfile+0x89d/0x1110 [ 795.250987][ T1103] ? compat_writev+0x390/0x390 [ 795.255739][ T1103] ? security_file_permission+0x128/0x300 [ 795.261430][ T1103] ? vfs_write+0x427/0x4f0 [ 795.265831][ T1103] ? fput_many+0x42/0x1a0 [ 795.270131][ T1103] __x64_sys_sendfile64+0x1ae/0x220 [ 795.275300][ T1103] ? __ia32_sys_sendfile+0x240/0x240 [ 795.280556][ T1103] do_syscall_64+0xcb/0x150 [ 795.285033][ T1103] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.290894][ T1103] RIP: 0033:0x45de59 [ 795.294767][ T1103] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.314341][ T1103] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.322735][ T1103] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 795.330696][ T1103] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 795.338675][ T1103] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 10:43:25 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x43a881, 0x0) 10:43:25 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_rm_watch(r0, 0x0) 10:43:25 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) wait4(r1, 0x0, 0x0, &(0x7f0000000100)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ftruncate(r2, 0x20007ffefffc) 10:43:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'veth1_vlan\x00'}) 10:43:25 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) [ 795.346622][ T1103] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000006 [ 795.354662][ T1103] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:25 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f00000000c0)='.', 0x1, 0x100000000}, {0x0}], 0x0, 0x0) 10:43:25 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000001840)={&(0x7f0000000440)=@can, 0x80, 0x0}, 0x0) 10:43:25 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:25 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) 10:43:25 executing program 4: syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd6099729100700000fe8000000000000000000000000000bbfe800000000000000000000000000018000c0000000083", @ANYBLOB="01c5fbd2d957dbd9421c652bdc9eb1d0b23e9bcfef7acc0ccd9c814928ce63dca56f35ef0ba549783377ce995f264c5db1e2685fe5a37f0e265a7c9c3b339c0d6f1173a727606c11f7d2cdc0e58456580100000000000000a49a755d102e3288103a"], 0x0) 10:43:25 executing program 2 (fault-call:9 fault-nth:7): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000060c0)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=' ', 0x1}, {&(0x7f0000000100)='(', 0x1}, {&(0x7f0000000180)="83", 0x1}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x40) 10:43:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @multicast, 'macsec0\x00'}}, 0x80) 10:43:25 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005a00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000008c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000000000)='W', 0x1, 0x0, 0x0, 0x0) 10:43:25 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x3f) 10:43:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000001340)={@link_local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @private=0xa010100}}}}}, 0x0) 10:43:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005a00)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) 10:43:25 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) [ 795.627049][ T1143] FAULT_INJECTION: forcing a failure. [ 795.627049][ T1143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.665527][ T1143] CPU: 1 PID: 1143 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 795.677012][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.687044][ T1143] Call Trace: [ 795.690316][ T1143] dump_stack+0x1b0/0x21e [ 795.694616][ T1143] ? devkmsg_release+0x11c/0x11c [ 795.699523][ T1143] ? show_regs_print_info+0x12/0x12 [ 795.704691][ T1143] ? clear_page_erms+0x9/0x10 [ 795.709337][ T1143] should_fail+0x6fb/0x860 [ 795.713732][ T1143] ? setup_fault_attr+0x2b0/0x2b0 [ 795.718823][ T1143] __alloc_pages_nodemask+0x1ee/0x7c0 [ 795.724168][ T1143] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 795.729691][ T1143] ? find_get_entry+0x5da/0x670 [ 795.734513][ T1143] ? xa_load+0x323/0x340 [ 795.738727][ T1143] __do_page_cache_readahead+0x244/0x510 [ 795.744354][ T1143] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 795.750769][ T1143] ? page_cache_sync_readahead+0xa3/0x3c0 [ 795.756460][ T1143] generic_file_read_iter+0x626/0x20a0 [ 795.761894][ T1143] ? find_get_pages_range_tag+0xae0/0xae0 [ 795.767584][ T1143] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 795.772940][ T1143] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.778975][ T1143] ? avc_denied+0x1c0/0x1c0 [ 795.783453][ T1143] generic_file_splice_read+0x491/0x780 [ 795.788972][ T1143] ? splice_shrink_spd+0xb0/0xb0 [ 795.793883][ T1143] ? security_file_permission+0x1e9/0x300 [ 795.799571][ T1143] ? splice_shrink_spd+0xb0/0xb0 [ 795.804485][ T1143] splice_direct_to_actor+0x3cf/0xb00 [ 795.809829][ T1143] ? do_splice_direct+0x3d0/0x3d0 [ 795.814820][ T1143] ? pipe_to_sendpage+0x300/0x300 [ 795.819816][ T1143] ? security_file_permission+0x128/0x300 [ 795.825507][ T1143] do_splice_direct+0x279/0x3d0 [ 795.830330][ T1143] ? splice_direct_to_actor+0xb00/0xb00 [ 795.835858][ T1143] ? security_file_permission+0x128/0x300 [ 795.841547][ T1143] do_sendfile+0x89d/0x1110 [ 795.846036][ T1143] ? compat_writev+0x390/0x390 [ 795.850773][ T1143] ? ksys_write+0x21e/0x2a0 [ 795.855247][ T1143] ? fput_many+0x42/0x1a0 [ 795.859548][ T1143] __x64_sys_sendfile64+0x1ae/0x220 [ 795.864738][ T1143] ? __ia32_sys_sendfile+0x240/0x240 [ 795.869995][ T1143] do_syscall_64+0xcb/0x150 [ 795.874473][ T1143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 795.880337][ T1143] RIP: 0033:0x45de59 [ 795.884206][ T1143] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.903779][ T1143] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.912173][ T1143] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 795.920115][ T1143] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 10:43:26 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 10:43:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@fwd, @typedef, @ptr, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:43:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) [ 795.928056][ T1143] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 795.935998][ T1143] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000007 [ 795.943939][ T1143] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:26 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "997291", 0x30, 0x0, 0x0, @remote, @dev={0xfe, 0x80, [], 0x18}, {[@hopopts={0x0, 0x4, [], [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @mcast1}]}]}}}}}, 0x0) 10:43:26 executing program 2 (fault-call:9 fault-nth:8): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 10:43:26 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000024c0)=ANY=[], 0x150}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 10:43:26 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0, 0x1000000}}, 0x0) 10:43:26 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 10:43:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) 10:43:26 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x29, 0x13, 0x0, 0x0) 10:43:26 executing program 3: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 10:43:26 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={0x0}}, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={0x0}}, 0x0) [ 796.231464][ T1184] FAULT_INJECTION: forcing a failure. [ 796.231464][ T1184] name failslab, interval 1, probability 0, space 0, times 0 [ 796.247028][ T1184] CPU: 0 PID: 1184 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 796.258495][ T1184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.268522][ T1184] Call Trace: [ 796.271791][ T1184] dump_stack+0x1b0/0x21e [ 796.276100][ T1184] ? devkmsg_release+0x11c/0x11c [ 796.281017][ T1184] ? do_sendfile+0x89d/0x1110 [ 796.285669][ T1184] ? show_regs_print_info+0x12/0x12 [ 796.290872][ T1184] ? __x64_sys_sendfile64+0x1ae/0x220 [ 796.296244][ T1184] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.302300][ T1184] ? sock_no_sendpage+0x13f/0x1b0 [ 796.307298][ T1184] ? sock_sendpage+0xd0/0x120 [ 796.311951][ T1184] ? __splice_from_pipe+0x2d3/0x870 [ 796.317126][ T1184] ? generic_splice_sendpage+0x172/0x200 [ 796.322750][ T1184] ? splice_direct_to_actor+0x496/0xb00 [ 796.328288][ T1184] ? do_splice_direct+0x279/0x3d0 [ 796.333289][ T1184] should_fail+0x6fb/0x860 [ 796.337692][ T1184] ? setup_fault_attr+0x2b0/0x2b0 [ 796.342757][ T1184] ? should_fail+0x182/0x860 [ 796.347330][ T1184] ? __pskb_copy_fclone+0xa8/0xf70 [ 796.352414][ T1184] should_failslab+0x5/0x20 [ 796.356895][ T1184] __kmalloc_track_caller+0x5d/0x2b0 [ 796.362207][ T1184] ? kmem_cache_alloc+0x1d5/0x250 [ 796.367230][ T1184] ? __pskb_copy_fclone+0xa8/0xf70 [ 796.372313][ T1184] __alloc_skb+0xd1/0x4d0 [ 796.376616][ T1184] __pskb_copy_fclone+0xa8/0xf70 [ 796.381531][ T1184] ? tipc_dest_pop+0x1b6/0x240 [ 796.386279][ T1184] ? tipc_dest_pop+0x1b4/0x240 [ 796.391013][ T1184] tipc_sk_mcast_rcv+0x782/0x1140 [ 796.396026][ T1184] ? __tipc_node_link_up+0x720/0x720 [ 796.401277][ T1184] ? tipc_msg_reassemble+0x1c7/0x590 [ 796.406535][ T1184] ? tipc_mcast_xmit+0xf58/0x16c0 [ 796.411531][ T1184] tipc_mcast_xmit+0xfa8/0x16c0 [ 796.416351][ T1184] ? apic_timer_interrupt+0xa/0x20 [ 796.421433][ T1184] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 796.427557][ T1184] ? __check_object_size+0x2e5/0x3b0 [ 796.432814][ T1184] ? _local_bh_enable+0x30/0x30 [ 796.437635][ T1184] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 796.443754][ T1184] tipc_sendmcast+0xc00/0xeb0 [ 796.448400][ T1184] ? apic_timer_interrupt+0xa/0x20 [ 796.453480][ T1184] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 796.459094][ T1184] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 796.465134][ T1184] ? wait_woken+0x250/0x250 [ 796.469620][ T1184] __tipc_sendmsg+0x120d/0x2d30 [ 796.474441][ T1184] ? local_bh_enable+0x20/0x20 [ 796.479192][ T1184] ? ext4_chunk_trans_blocks+0x280/0x280 [ 796.484802][ T1184] ? _raw_spin_lock_bh+0xa4/0x180 [ 796.489796][ T1184] ? _local_bh_enable+0x30/0x30 [ 796.494617][ T1184] ? memset+0x1f/0x40 [ 796.498577][ T1184] ? selinux_socket_sendmsg+0x10b/0x320 [ 796.504095][ T1184] ? lock_sock_nested+0x25a/0x320 [ 796.509108][ T1184] ? __rcu_read_lock+0x50/0x50 [ 796.513863][ T1184] ? apic_timer_interrupt+0xa/0x20 [ 796.518948][ T1184] ? iov_iter_kvec+0x29/0x110 [ 796.523594][ T1184] ? tipc_recvmsg+0x17c0/0x17c0 [ 796.528412][ T1184] tipc_sendmsg+0x51/0x70 [ 796.532730][ T1184] kernel_sendmsg+0xe2/0x120 [ 796.537294][ T1184] sock_no_sendpage+0x13f/0x1b0 [ 796.542130][ T1184] ? __receive_sock+0xb0/0xb0 [ 796.546780][ T1184] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 796.552468][ T1184] ? __receive_sock+0xb0/0xb0 [ 796.557113][ T1184] sock_sendpage+0xd0/0x120 [ 796.561588][ T1184] pipe_to_sendpage+0x23b/0x300 [ 796.566410][ T1184] ? sock_fasync+0xf0/0xf0 [ 796.570795][ T1184] ? generic_splice_sendpage+0x200/0x200 [ 796.576505][ T1184] ? atime_needs_update+0x2cf/0x570 [ 796.581691][ T1184] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 796.587654][ T1184] __splice_from_pipe+0x2d3/0x870 [ 796.592656][ T1184] ? generic_splice_sendpage+0x200/0x200 [ 796.598256][ T1184] generic_splice_sendpage+0x172/0x200 [ 796.603698][ T1184] ? apic_timer_interrupt+0xa/0x20 [ 796.608776][ T1184] ? iter_file_splice_write+0xf20/0xf20 [ 796.614289][ T1184] ? direct_splice_actor+0xcb/0x120 [ 796.619453][ T1184] ? direct_splice_actor+0x25/0x120 [ 796.624640][ T1184] splice_direct_to_actor+0x496/0xb00 [ 796.629980][ T1184] ? do_splice_direct+0x3d0/0x3d0 [ 796.634971][ T1184] ? pipe_to_sendpage+0x300/0x300 [ 796.639975][ T1184] ? security_file_permission+0x128/0x300 [ 796.645702][ T1184] do_splice_direct+0x279/0x3d0 [ 796.650536][ T1184] ? splice_direct_to_actor+0xb00/0xb00 [ 796.656065][ T1184] ? security_file_permission+0x128/0x300 [ 796.661755][ T1184] do_sendfile+0x89d/0x1110 [ 796.666232][ T1184] ? compat_writev+0x390/0x390 [ 796.670967][ T1184] ? security_file_permission+0x128/0x300 [ 796.676655][ T1184] ? vfs_write+0x427/0x4f0 [ 796.681040][ T1184] ? fput_many+0x42/0x1a0 [ 796.685340][ T1184] __x64_sys_sendfile64+0x1ae/0x220 [ 796.690513][ T1184] ? apic_timer_interrupt+0xa/0x20 [ 796.695596][ T1184] ? __ia32_sys_sendfile+0x240/0x240 [ 796.700848][ T1184] ? do_syscall_64+0x10c/0x150 [ 796.705584][ T1184] ? do_syscall_64+0x11a/0x150 [ 796.710333][ T1184] do_syscall_64+0xcb/0x150 [ 796.714805][ T1184] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 796.720667][ T1184] RIP: 0033:0x45de59 [ 796.724528][ T1184] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.744207][ T1184] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 796.752608][ T1184] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 796.760555][ T1184] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 796.768524][ T1184] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 10:43:26 executing program 2 (fault-call:9 fault-nth:9): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 10:43:26 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:26 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'Sq5', 0x0, 0x62, 0x0, @remote, @local}}}}, 0x0) 10:43:26 executing program 1: r0 = add_key$user(&(0x7f0000001300)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="01735df02dd8842c28d80b12ff2254585f84556fb786041aba2c8ca8b99d63e639e11d22d9198fe21f32013d4427cb8970c4d2f894523883c26bb9d24dbaebf52334e968449febf2a71f101390742b4e7caa6cf80b8b60eda49791e1cbf1af10de002d68f349257174ad7564d30d26b4de94b23326ac9e9179ac2975154a3d5bfcbd6b4da6c5085713c498eaa703779988e23029886b2f8904f361b98890e1716a7097f2663ce1a4b22ab75b989f313fa3dc0b32a2484685d36b6f92cd1f4935", 0xc0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="d70d", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r0}, &(0x7f0000000200)=""/230, 0xe6, 0x0) 10:43:26 executing program 4: r0 = add_key$user(&(0x7f0000001300)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000000c0)='4', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='F', 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r0, r1}, 0x0, 0x0, 0x0) 10:43:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xf126, 0x4) 10:43:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0xfffffffffffffffe) [ 796.776464][ T1184] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000008 [ 796.784405][ T1184] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c [ 796.804846][ T1184] tipc: Failed to clone mcast rcv buffer 10:43:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:43:26 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) [ 796.875581][ T1213] FAULT_INJECTION: forcing a failure. [ 796.875581][ T1213] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 796.896419][ T1213] CPU: 1 PID: 1213 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 796.907888][ T1213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.917934][ T1213] Call Trace: [ 796.921221][ T1213] dump_stack+0x1b0/0x21e 10:43:26 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:43:26 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'Sq5', 0x0, 0x62, 0x0, @remote, @local}}}}, 0x0) [ 796.925562][ T1213] ? devkmsg_release+0x11c/0x11c [ 796.930499][ T1213] ? show_regs_print_info+0x12/0x12 [ 796.935690][ T1213] ? clear_page_erms+0x7/0x10 [ 796.940361][ T1213] ? kasan_alloc_pages+0x4a/0x60 [ 796.945295][ T1213] should_fail+0x6fb/0x860 [ 796.949710][ T1213] ? setup_fault_attr+0x2b0/0x2b0 [ 796.954731][ T1213] __alloc_pages_nodemask+0x1ee/0x7c0 [ 796.960214][ T1213] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 796.965757][ T1213] ? xa_load+0x323/0x340 [ 796.969996][ T1213] __do_page_cache_readahead+0x244/0x510 [ 796.975736][ T1213] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 796.982131][ T1213] ? page_cache_sync_readahead+0xa3/0x3c0 [ 796.987828][ T1213] generic_file_read_iter+0x626/0x20a0 [ 796.993290][ T1213] ? find_get_pages_range_tag+0xae0/0xae0 [ 796.998992][ T1213] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 797.004343][ T1213] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.010381][ T1213] ? apic_timer_interrupt+0xa/0x20 [ 797.015472][ T1213] generic_file_splice_read+0x491/0x780 [ 797.020991][ T1213] ? splice_shrink_spd+0xb0/0xb0 [ 797.025909][ T1213] ? security_file_permission+0x1e9/0x300 [ 797.031717][ T1213] ? splice_shrink_spd+0xb0/0xb0 [ 797.036630][ T1213] splice_direct_to_actor+0x3cf/0xb00 [ 797.041977][ T1213] ? do_splice_direct+0x3d0/0x3d0 [ 797.046987][ T1213] ? pipe_to_sendpage+0x300/0x300 [ 797.051986][ T1213] ? security_file_permission+0x128/0x300 [ 797.057677][ T1213] do_splice_direct+0x279/0x3d0 [ 797.062516][ T1213] ? apic_timer_interrupt+0xa/0x20 [ 797.067601][ T1213] ? splice_direct_to_actor+0xb00/0xb00 [ 797.073121][ T1213] ? security_file_permission+0x128/0x300 [ 797.078811][ T1213] do_sendfile+0x89d/0x1110 [ 797.083287][ T1213] ? compat_writev+0x390/0x390 [ 797.088037][ T1213] ? vfs_write+0x427/0x4f0 [ 797.092421][ T1213] ? fput_many+0x42/0x1a0 [ 797.096724][ T1213] __x64_sys_sendfile64+0x1ae/0x220 [ 797.101901][ T1213] ? __ia32_sys_sendfile+0x240/0x240 [ 797.107156][ T1213] do_syscall_64+0xcb/0x150 [ 797.111657][ T1213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.117534][ T1213] RIP: 0033:0x45de59 [ 797.121409][ T1213] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.140982][ T1213] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 797.149361][ T1213] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 797.157305][ T1213] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 797.165250][ T1213] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 797.173196][ T1213] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000009 [ 797.181151][ T1213] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:27 executing program 2 (fault-call:9 fault-nth:10): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x228}}, 0x1) 10:43:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9a", 0x1, 0xffffffffffffffff) 10:43:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0xd8, 0x0, 0xffffffff, 0x370, 0x2c8, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @multicast2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @dev, @private}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @broadcast, @rand_addr, @gre_key, @gre_key}}}}, {{@ip={@private, @private, 0x0, 0x0, 'ip6_vti0\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @multicast2, @gre_key}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 10:43:27 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:27 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) 10:43:27 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:27 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) [ 797.366973][ T1240] FAULT_INJECTION: forcing a failure. [ 797.366973][ T1240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.380671][ T22] audit: type=1326 audit(1602845007.426:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=1244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0xffff0000 [ 797.393241][ T1240] CPU: 1 PID: 1240 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 797.414413][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.424445][ T1240] Call Trace: [ 797.427714][ T1240] dump_stack+0x1b0/0x21e [ 797.432015][ T1240] ? devkmsg_release+0x11c/0x11c [ 797.436923][ T1240] ? show_regs_print_info+0x12/0x12 [ 797.442090][ T1240] ? clear_page_erms+0x7/0x10 [ 797.446739][ T1240] should_fail+0x6fb/0x860 [ 797.451124][ T1240] ? setup_fault_attr+0x2b0/0x2b0 [ 797.456122][ T1240] __alloc_pages_nodemask+0x1ee/0x7c0 [ 797.461465][ T1240] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 797.466979][ T1240] ? xa_load+0x323/0x340 [ 797.471191][ T1240] __do_page_cache_readahead+0x244/0x510 [ 797.476794][ T1240] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 797.483176][ T1240] ? unwind_next_frame+0x1c07/0x22b0 [ 797.488430][ T1240] ? page_cache_sync_readahead+0xa3/0x3c0 [ 797.494117][ T1240] generic_file_read_iter+0x626/0x20a0 [ 797.499562][ T1240] ? find_get_pages_range_tag+0xae0/0xae0 [ 797.505252][ T1240] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 797.510593][ T1240] ? apic_timer_interrupt+0xa/0x20 [ 797.515678][ T1240] ? fsnotify+0x18e/0x1460 [ 797.520063][ T1240] ? fsnotify+0x13a0/0x1460 [ 797.524538][ T1240] generic_file_splice_read+0x491/0x780 [ 797.530056][ T1240] ? splice_shrink_spd+0xb0/0xb0 [ 797.534968][ T1240] ? security_file_permission+0x1e9/0x300 [ 797.540672][ T1240] ? splice_shrink_spd+0xb0/0xb0 [ 797.545582][ T1240] splice_direct_to_actor+0x3cf/0xb00 [ 797.550940][ T1240] ? do_splice_direct+0x3d0/0x3d0 [ 797.555932][ T1240] ? pipe_to_sendpage+0x300/0x300 [ 797.560939][ T1240] ? security_file_permission+0x128/0x300 [ 797.566626][ T1240] do_splice_direct+0x279/0x3d0 [ 797.571447][ T1240] ? splice_direct_to_actor+0xb00/0xb00 [ 797.576963][ T1240] ? security_file_permission+0x128/0x300 [ 797.582649][ T1240] do_sendfile+0x89d/0x1110 [ 797.587123][ T1240] ? compat_writev+0x390/0x390 [ 797.591854][ T1240] ? security_file_permission+0x128/0x300 [ 797.597543][ T1240] ? vfs_write+0x427/0x4f0 [ 797.601928][ T1240] ? fput_many+0x42/0x1a0 [ 797.606253][ T1240] __x64_sys_sendfile64+0x1ae/0x220 [ 797.611423][ T1240] ? __ia32_sys_sendfile+0x240/0x240 [ 797.616676][ T1240] ? do_syscall_64+0x57/0x150 [ 797.621322][ T1240] ? do_syscall_64+0x73/0x150 [ 797.625981][ T1240] do_syscall_64+0xcb/0x150 [ 797.630457][ T1240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 797.636328][ T1240] RIP: 0033:0x45de59 [ 797.640203][ T1240] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.659782][ T1240] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 10:43:27 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:27 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x0) [ 797.668171][ T1240] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 797.676116][ T1240] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 797.684060][ T1240] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 797.692005][ T1240] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000a [ 797.699948][ T1240] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:27 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x400) 10:43:27 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:27 executing program 2 (fault-call:9 fault-nth:11): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:27 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x37) [ 797.930890][ T1273] FAULT_INJECTION: forcing a failure. [ 797.930890][ T1273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 797.944151][ T1273] CPU: 1 PID: 1273 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 797.955576][ T1273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.965605][ T1273] Call Trace: [ 797.968872][ T1273] dump_stack+0x1b0/0x21e [ 797.973186][ T1273] ? devkmsg_release+0x11c/0x11c [ 797.978103][ T1273] ? show_regs_print_info+0x12/0x12 [ 797.983280][ T1273] ? kasan_alloc_pages+0x4a/0x60 [ 797.988192][ T1273] should_fail+0x6fb/0x860 [ 797.992579][ T1273] ? setup_fault_attr+0x2b0/0x2b0 [ 797.997589][ T1273] __alloc_pages_nodemask+0x1ee/0x7c0 [ 798.002932][ T1273] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 798.008450][ T1273] ? xa_load+0x323/0x340 [ 798.012665][ T1273] __do_page_cache_readahead+0x244/0x510 [ 798.018274][ T1273] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 798.024674][ T1273] ? unwind_next_frame+0x1c07/0x22b0 [ 798.029932][ T1273] ? page_cache_sync_readahead+0xa3/0x3c0 [ 798.035621][ T1273] generic_file_read_iter+0x626/0x20a0 [ 798.041058][ T1273] ? find_get_pages_range_tag+0xae0/0xae0 [ 798.046761][ T1273] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 798.052103][ T1273] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.058143][ T1273] ? avc_denied+0x1c0/0x1c0 [ 798.062634][ T1273] generic_file_splice_read+0x491/0x780 [ 798.068153][ T1273] ? splice_shrink_spd+0xb0/0xb0 [ 798.073089][ T1273] ? security_file_permission+0x1e9/0x300 [ 798.078780][ T1273] ? splice_shrink_spd+0xb0/0xb0 [ 798.083687][ T1273] splice_direct_to_actor+0x3cf/0xb00 [ 798.089032][ T1273] ? do_splice_direct+0x3d0/0x3d0 [ 798.094042][ T1273] ? pipe_to_sendpage+0x300/0x300 [ 798.099299][ T1273] ? security_file_permission+0x128/0x300 [ 798.105249][ T1273] do_splice_direct+0x279/0x3d0 [ 798.110075][ T1273] ? splice_direct_to_actor+0xb00/0xb00 [ 798.115603][ T1273] ? security_file_permission+0x128/0x300 [ 798.121294][ T1273] do_sendfile+0x89d/0x1110 [ 798.125772][ T1273] ? compat_writev+0x390/0x390 [ 798.130505][ T1273] ? security_file_permission+0x128/0x300 [ 798.136212][ T1273] ? vfs_write+0x427/0x4f0 [ 798.140595][ T1273] ? fput_many+0x42/0x1a0 [ 798.144906][ T1273] __x64_sys_sendfile64+0x1ae/0x220 [ 798.150121][ T1273] ? __ia32_sys_sendfile+0x240/0x240 [ 798.155398][ T1273] do_syscall_64+0xcb/0x150 [ 798.159887][ T1273] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.165776][ T1273] RIP: 0033:0x45de59 [ 798.169645][ T1273] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.189225][ T1273] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.197620][ T1273] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 798.205596][ T1273] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 798.213547][ T1273] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 798.221493][ T1273] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000b [ 798.229452][ T1273] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:28 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 10:43:28 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:28 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x33) 10:43:28 executing program 4: mknod(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0) 10:43:28 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) [ 798.259103][ T22] audit: type=1326 audit(1602845008.306:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=1244 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0xffff0000 10:43:28 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) 10:43:28 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:28 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 10:43:28 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000013c0)='./file0\x00', 0x0) getpeername$unix(r0, 0x0, 0x0) ftruncate(r1, 0x7fffffff) 10:43:28 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:28 executing program 2 (fault-call:9 fault-nth:12): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:28 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:28 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:28 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:28 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:28 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) [ 798.535120][ T1307] FAULT_INJECTION: forcing a failure. [ 798.535120][ T1307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.554290][ T1307] CPU: 1 PID: 1307 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 798.565781][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.575829][ T1307] Call Trace: [ 798.579116][ T1307] dump_stack+0x1b0/0x21e [ 798.583436][ T1307] ? devkmsg_release+0x11c/0x11c [ 798.588371][ T1307] ? show_regs_print_info+0x12/0x12 [ 798.593569][ T1307] ? should_fail+0x6f/0x860 [ 798.598064][ T1307] ? kasan_alloc_pages+0x4a/0x60 [ 798.602988][ T1307] should_fail+0x6fb/0x860 [ 798.607378][ T1307] ? setup_fault_attr+0x2b0/0x2b0 [ 798.612373][ T1307] __alloc_pages_nodemask+0x1ee/0x7c0 [ 798.617759][ T1307] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 798.623292][ T1307] ? xa_load+0x323/0x340 [ 798.627504][ T1307] __do_page_cache_readahead+0x244/0x510 [ 798.633112][ T1307] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 798.639495][ T1307] ? page_cache_sync_readahead+0xa3/0x3c0 [ 798.645184][ T1307] generic_file_read_iter+0x626/0x20a0 [ 798.650618][ T1307] ? find_get_pages_range_tag+0xae0/0xae0 [ 798.656324][ T1307] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 798.661664][ T1307] ? apic_timer_interrupt+0xa/0x20 [ 798.666808][ T1307] ? generic_file_splice_read+0x233/0x780 [ 798.672503][ T1307] generic_file_splice_read+0x491/0x780 [ 798.678023][ T1307] ? splice_shrink_spd+0xb0/0xb0 [ 798.682937][ T1307] ? security_file_permission+0x1e9/0x300 [ 798.688630][ T1307] ? splice_shrink_spd+0xb0/0xb0 [ 798.693538][ T1307] splice_direct_to_actor+0x3cf/0xb00 [ 798.698901][ T1307] ? do_splice_direct+0x3d0/0x3d0 [ 798.703919][ T1307] ? pipe_to_sendpage+0x300/0x300 [ 798.708940][ T1307] ? security_file_permission+0x128/0x300 [ 798.714627][ T1307] do_splice_direct+0x279/0x3d0 [ 798.719447][ T1307] ? splice_direct_to_actor+0xb00/0xb00 [ 798.724964][ T1307] ? security_file_permission+0x128/0x300 [ 798.730652][ T1307] do_sendfile+0x89d/0x1110 [ 798.735137][ T1307] ? compat_writev+0x390/0x390 [ 798.739983][ T1307] ? security_file_permission+0x128/0x300 [ 798.745675][ T1307] ? vfs_write+0x427/0x4f0 [ 798.750086][ T1307] ? fput_many+0x42/0x1a0 [ 798.754385][ T1307] __x64_sys_sendfile64+0x1ae/0x220 [ 798.759553][ T1307] ? apic_timer_interrupt+0xa/0x20 [ 798.764640][ T1307] ? __ia32_sys_sendfile+0x240/0x240 [ 798.769892][ T1307] ? do_syscall_64+0x57/0x150 [ 798.774534][ T1307] ? do_syscall_64+0x73/0x150 [ 798.779190][ T1307] do_syscall_64+0xcb/0x150 [ 798.783670][ T1307] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 798.789552][ T1307] RIP: 0033:0x45de59 [ 798.793425][ T1307] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.813004][ T1307] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.821385][ T1307] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 798.829327][ T1307] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 798.837273][ T1307] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 798.845240][ T1307] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000c [ 798.853187][ T1307] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:29 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) 10:43:29 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:29 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:29 executing program 1 (fault-call:0 fault-nth:0): unshare(0x44000600) 10:43:29 executing program 0 (fault-call:0 fault-nth:0): unshare(0x44000600) 10:43:29 executing program 2 (fault-call:9 fault-nth:13): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:29 executing program 4 (fault-call:11 fault-nth:0): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 799.155033][ T1325] FAULT_INJECTION: forcing a failure. [ 799.155033][ T1325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.166767][ T1327] FAULT_INJECTION: forcing a failure. [ 799.166767][ T1327] name failslab, interval 1, probability 0, space 0, times 0 [ 799.176638][ T1325] CPU: 0 PID: 1325 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 799.192362][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.202399][ T1325] Call Trace: [ 799.205676][ T1325] dump_stack+0x1b0/0x21e [ 799.209980][ T1325] ? devkmsg_release+0x11c/0x11c [ 799.214892][ T1325] ? show_regs_print_info+0x12/0x12 [ 799.220084][ T1325] ? should_fail+0x3b3/0x860 [ 799.224652][ T1325] should_fail+0x6fb/0x860 [ 799.229045][ T1325] ? setup_fault_attr+0x2b0/0x2b0 [ 799.234047][ T1325] __alloc_pages_nodemask+0x1ee/0x7c0 [ 799.239397][ T1325] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 799.244917][ T1325] ? xa_load+0x323/0x340 [ 799.249140][ T1325] __do_page_cache_readahead+0x244/0x510 [ 799.254753][ T1325] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 799.261178][ T1325] ? page_cache_sync_readahead+0xa3/0x3c0 [ 799.266903][ T1325] generic_file_read_iter+0x626/0x20a0 [ 799.272350][ T1325] ? find_get_pages_range_tag+0xae0/0xae0 [ 799.277543][ T1329] FAULT_INJECTION: forcing a failure. [ 799.277543][ T1329] name failslab, interval 1, probability 0, space 0, times 0 [ 799.278051][ T1325] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 799.278065][ T1325] ? apic_timer_interrupt+0xa/0x20 [ 799.301254][ T1325] ? generic_file_splice_read+0x1e2/0x780 [ 799.306955][ T1325] ? generic_file_splice_read+0x1ec/0x780 [ 799.312679][ T1325] generic_file_splice_read+0x491/0x780 [ 799.318314][ T1325] ? splice_shrink_spd+0xb0/0xb0 [ 799.323241][ T1325] ? security_file_permission+0x1e9/0x300 [ 799.328946][ T1325] ? splice_shrink_spd+0xb0/0xb0 [ 799.333877][ T1325] splice_direct_to_actor+0x3cf/0xb00 [ 799.339357][ T1325] ? do_splice_direct+0x3d0/0x3d0 [ 799.344399][ T1325] ? pipe_to_sendpage+0x300/0x300 [ 799.349417][ T1325] ? security_file_permission+0x128/0x300 [ 799.355129][ T1325] do_splice_direct+0x279/0x3d0 [ 799.359958][ T1325] ? splice_direct_to_actor+0xb00/0xb00 [ 799.365475][ T1325] ? do_sendfile+0x77d/0x1110 [ 799.370126][ T1325] do_sendfile+0x89d/0x1110 [ 799.374612][ T1325] ? compat_writev+0x390/0x390 [ 799.379351][ T1325] ? vfs_write+0x427/0x4f0 [ 799.383741][ T1325] ? fput_many+0x42/0x1a0 [ 799.388048][ T1325] __x64_sys_sendfile64+0x1ae/0x220 [ 799.393220][ T1325] ? __ia32_sys_sendfile+0x240/0x240 [ 799.398479][ T1325] do_syscall_64+0xcb/0x150 [ 799.402956][ T1325] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.408823][ T1325] RIP: 0033:0x45de59 [ 799.412710][ T1325] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.432299][ T1325] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.440685][ T1325] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 799.448629][ T1325] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 799.456575][ T1325] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 799.464521][ T1325] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000d [ 799.472468][ T1325] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c [ 799.480426][ T1329] CPU: 1 PID: 1329 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 799.491871][ T1329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.501912][ T1329] Call Trace: [ 799.505197][ T1329] dump_stack+0x1b0/0x21e [ 799.509512][ T1329] ? devkmsg_release+0x11c/0x11c [ 799.514434][ T1329] ? show_regs_print_info+0x12/0x12 [ 799.519616][ T1329] ? avc_denied+0x1c0/0x1c0 [ 799.524103][ T1329] should_fail+0x6fb/0x860 [ 799.528504][ T1329] ? setup_fault_attr+0x2b0/0x2b0 [ 799.533518][ T1329] ? avc_has_perm+0xbd/0x260 [ 799.538092][ T1329] ? avc_has_perm+0x15f/0x260 [ 799.542756][ T1329] ? alloc_pipe_info+0xa1/0x3a0 [ 799.547593][ T1329] should_failslab+0x5/0x20 [ 799.552083][ T1329] kmem_cache_alloc_trace+0x39/0x270 [ 799.557356][ T1329] alloc_pipe_info+0xa1/0x3a0 [ 799.562020][ T1329] splice_direct_to_actor+0x94e/0xb00 [ 799.567378][ T1329] ? avc_has_perm+0xbd/0x260 [ 799.571952][ T1329] ? match_file+0x120/0x120 [ 799.576440][ T1329] ? avc_has_perm_noaudit+0x3f0/0x3f0 [ 799.581794][ T1329] ? do_splice_direct+0x3d0/0x3d0 [ 799.586804][ T1329] ? pipe_to_sendpage+0x300/0x300 [ 799.591818][ T1329] ? security_file_permission+0x128/0x300 [ 799.597522][ T1329] do_splice_direct+0x279/0x3d0 [ 799.602362][ T1329] ? splice_direct_to_actor+0xb00/0xb00 [ 799.607898][ T1329] ? security_file_permission+0x128/0x300 [ 799.613606][ T1329] do_sendfile+0x89d/0x1110 [ 799.618097][ T1329] ? compat_writev+0x390/0x390 [ 799.622850][ T1329] ? security_file_permission+0x128/0x300 [ 799.628560][ T1329] ? vfs_write+0x427/0x4f0 [ 799.632961][ T1329] ? fput_many+0x42/0x1a0 [ 799.637279][ T1329] __x64_sys_sendfile64+0x1ae/0x220 [ 799.642463][ T1329] ? __ia32_sys_sendfile+0x240/0x240 [ 799.647733][ T1329] do_syscall_64+0xcb/0x150 [ 799.652222][ T1329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.658098][ T1329] RIP: 0033:0x45de59 [ 799.661982][ T1329] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.681575][ T1329] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.689975][ T1329] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 799.697937][ T1329] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 799.705899][ T1329] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 799.713864][ T1329] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000000 [ 799.721859][ T1329] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:29 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) [ 799.749333][ T1327] CPU: 1 PID: 1327 Comm: syz-executor.1 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 799.760810][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.770865][ T1327] Call Trace: [ 799.774150][ T1327] dump_stack+0x1b0/0x21e [ 799.778465][ T1327] ? devkmsg_release+0x11c/0x11c [ 799.783391][ T1327] ? show_regs_print_info+0x12/0x12 [ 799.788581][ T1327] should_fail+0x6fb/0x860 [ 799.792992][ T1327] ? setup_fault_attr+0x2b0/0x2b0 10:43:29 executing program 2 (fault-call:9 fault-nth:14): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 799.798010][ T1327] ? __kernel_write+0x340/0x340 [ 799.798947][ T1337] FAULT_INJECTION: forcing a failure. [ 799.798947][ T1337] name failslab, interval 1, probability 0, space 0, times 0 [ 799.802850][ T1327] ? fsnotify+0x13a0/0x1460 [ 799.802862][ T1327] ? copy_fs_struct+0x48/0x230 [ 799.802869][ T1327] should_failslab+0x5/0x20 [ 799.802877][ T1327] kmem_cache_alloc+0x36/0x250 [ 799.802889][ T1327] copy_fs_struct+0x48/0x230 [ 799.832006][ T1339] FAULT_INJECTION: forcing a failure. [ 799.832006][ T1339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 799.834443][ T1327] ksys_unshare+0x494/0xa40 [ 799.834452][ T1327] ? __sb_end_write+0xa4/0xf0 [ 799.834461][ T1327] ? sighand_ctor+0x60/0x60 [ 799.834470][ T1327] ? ksys_write+0x237/0x2a0 [ 799.834482][ T1327] ? __ia32_sys_read+0x80/0x80 [ 799.875052][ T1327] __x64_sys_unshare+0x34/0x40 [ 799.879803][ T1327] do_syscall_64+0xcb/0x150 [ 799.884297][ T1327] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 799.890278][ T1327] RIP: 0033:0x45de59 [ 799.894154][ T1327] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.913740][ T1327] RSP: 002b:00007fac8d464c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 799.922132][ T1327] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 799.930088][ T1327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 799.938041][ T1327] RBP: 00007fac8d464ca0 R08: 0000000000000000 R09: 0000000000000000 10:43:30 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000300), 0x8) [ 799.945999][ T1327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.953969][ T1327] R13: 00007ffc66300e8f R14: 00007fac8d4659c0 R15: 000000000118bf2c [ 799.962557][ T1339] CPU: 0 PID: 1339 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 799.974010][ T1339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.984057][ T1339] Call Trace: [ 799.987340][ T1339] dump_stack+0x1b0/0x21e [ 799.991649][ T1339] ? devkmsg_release+0x11c/0x11c [ 799.996591][ T1339] ? show_regs_print_info+0x12/0x12 [ 800.001781][ T1339] should_fail+0x6fb/0x860 [ 800.006173][ T1339] ? setup_fault_attr+0x2b0/0x2b0 [ 800.011178][ T1339] __alloc_pages_nodemask+0x1ee/0x7c0 [ 800.016526][ T1339] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 800.022046][ T1339] ? xa_load+0x323/0x340 [ 800.026261][ T1339] __do_page_cache_readahead+0x244/0x510 [ 800.031868][ T1339] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 800.038262][ T1339] ? page_cache_sync_readahead+0xa3/0x3c0 [ 800.043960][ T1339] generic_file_read_iter+0x626/0x20a0 [ 800.049400][ T1339] ? find_get_pages_range_tag+0xae0/0xae0 [ 800.055093][ T1339] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 800.060435][ T1339] ? apic_timer_interrupt+0xa/0x20 [ 800.065530][ T1339] ? generic_file_splice_read+0x94/0x780 [ 800.071137][ T1339] generic_file_splice_read+0x491/0x780 [ 800.076665][ T1339] ? splice_shrink_spd+0xb0/0xb0 [ 800.081580][ T1339] ? security_file_permission+0x1e9/0x300 [ 800.087271][ T1339] ? splice_shrink_spd+0xb0/0xb0 [ 800.092181][ T1339] splice_direct_to_actor+0x3cf/0xb00 [ 800.097545][ T1339] ? do_splice_direct+0x3d0/0x3d0 [ 800.102676][ T1339] ? pipe_to_sendpage+0x300/0x300 [ 800.107686][ T1339] ? security_file_permission+0x128/0x300 [ 800.113386][ T1339] do_splice_direct+0x279/0x3d0 [ 800.118215][ T1339] ? splice_direct_to_actor+0xb00/0xb00 [ 800.123751][ T1339] ? selinux_file_permission+0x14a/0x520 [ 800.129378][ T1339] ? security_file_permission+0x128/0x300 [ 800.135072][ T1339] do_sendfile+0x89d/0x1110 [ 800.139576][ T1339] ? compat_writev+0x390/0x390 [ 800.144317][ T1339] ? vfs_write+0x427/0x4f0 [ 800.148706][ T1339] ? fput_many+0x42/0x1a0 [ 800.153009][ T1339] __x64_sys_sendfile64+0x1ae/0x220 [ 800.158199][ T1339] ? __ia32_sys_sendfile+0x240/0x240 [ 800.163457][ T1339] do_syscall_64+0xcb/0x150 [ 800.167950][ T1339] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.173828][ T1339] RIP: 0033:0x45de59 [ 800.177701][ T1339] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.197280][ T1339] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 800.205662][ T1339] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 800.213605][ T1339] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 800.221658][ T1339] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.229602][ T1339] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000e [ 800.237550][ T1339] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:30 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) [ 800.245525][ T1337] CPU: 1 PID: 1337 Comm: syz-executor.0 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 800.257072][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.267119][ T1337] Call Trace: [ 800.270404][ T1337] dump_stack+0x1b0/0x21e [ 800.274728][ T1337] ? devkmsg_release+0x11c/0x11c [ 800.279653][ T1337] ? show_regs_print_info+0x12/0x12 [ 800.284840][ T1337] ? __free_one_page+0x74f/0x930 [ 800.289767][ T1337] should_fail+0x6fb/0x860 [ 800.294169][ T1337] ? setup_fault_attr+0x2b0/0x2b0 [ 800.299181][ T1337] ? __kernel_write+0x340/0x340 [ 800.304017][ T1337] ? fsnotify+0x13a0/0x1460 [ 800.308508][ T1337] ? copy_fs_struct+0x48/0x230 [ 800.313257][ T1337] should_failslab+0x5/0x20 [ 800.317746][ T1337] kmem_cache_alloc+0x36/0x250 [ 800.322501][ T1337] copy_fs_struct+0x48/0x230 [ 800.327087][ T1337] ksys_unshare+0x494/0xa40 [ 800.331582][ T1337] ? __sb_end_write+0xa4/0xf0 [ 800.336361][ T1337] ? sighand_ctor+0x60/0x60 [ 800.340857][ T1337] ? ksys_write+0x237/0x2a0 [ 800.345354][ T1337] ? __ia32_sys_read+0x80/0x80 [ 800.350113][ T1337] __x64_sys_unshare+0x34/0x40 [ 800.354867][ T1337] do_syscall_64+0xcb/0x150 [ 800.359361][ T1337] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.365882][ T1337] RIP: 0033:0x45de59 [ 800.369764][ T1337] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.389357][ T1337] RSP: 002b:00007fb74f5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 10:43:30 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:30 executing program 1 (fault-call:0 fault-nth:1): unshare(0x44000600) 10:43:30 executing program 0 (fault-call:0 fault-nth:1): unshare(0x44000600) [ 800.397760][ T1337] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 800.405722][ T1337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 800.413680][ T1337] RBP: 00007fb74f5b4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.421639][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.429598][ T1337] R13: 00007ffdbf25ab5f R14: 00007fb74f5b59c0 R15: 000000000118bf2c [ 800.491710][ T1355] FAULT_INJECTION: forcing a failure. [ 800.491710][ T1355] name failslab, interval 1, probability 0, space 0, times 0 [ 800.504871][ T1355] CPU: 0 PID: 1355 Comm: syz-executor.1 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 800.516322][ T1355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.526370][ T1355] Call Trace: [ 800.529658][ T1355] dump_stack+0x1b0/0x21e [ 800.533972][ T1355] ? devkmsg_release+0x11c/0x11c [ 800.538917][ T1355] ? show_regs_print_info+0x12/0x12 [ 800.544125][ T1355] ? proc_fail_nth_write+0x166/0x200 [ 800.549395][ T1355] should_fail+0x6fb/0x860 [ 800.553797][ T1355] ? setup_fault_attr+0x2b0/0x2b0 [ 800.558807][ T1355] ? proc_fail_nth_read+0x1c0/0x1c0 [ 800.563986][ T1355] ? should_fail+0x182/0x860 [ 800.568561][ T1355] ? dup_fd+0x6b/0xb70 [ 800.572612][ T1355] should_failslab+0x5/0x20 [ 800.577098][ T1355] kmem_cache_alloc+0x36/0x250 [ 800.581848][ T1355] dup_fd+0x6b/0xb70 [ 800.585730][ T1355] ? copy_fs_struct+0x158/0x230 [ 800.590074][ T1357] FAULT_INJECTION: forcing a failure. [ 800.590074][ T1357] name failslab, interval 1, probability 0, space 0, times 0 [ 800.590567][ T1355] ? _raw_spin_unlock+0x5/0x20 [ 800.607903][ T1355] ksys_unshare+0x457/0xa40 [ 800.612421][ T1355] ? __sb_end_write+0xa4/0xf0 [ 800.617096][ T1355] ? sighand_ctor+0x60/0x60 [ 800.621574][ T1355] ? ksys_write+0x237/0x2a0 [ 800.626054][ T1355] ? __ia32_sys_read+0x80/0x80 [ 800.630791][ T1355] __x64_sys_unshare+0x34/0x40 [ 800.635527][ T1355] do_syscall_64+0xcb/0x150 [ 800.640001][ T1355] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.645863][ T1355] RIP: 0033:0x45de59 [ 800.649729][ T1355] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.669303][ T1355] RSP: 002b:00007fac8d464c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 800.677682][ T1355] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 800.685631][ T1355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 800.693573][ T1355] RBP: 00007fac8d464ca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.701516][ T1355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.709463][ T1355] R13: 00007ffc66300e8f R14: 00007fac8d4659c0 R15: 000000000118bf2c [ 800.717419][ T1357] CPU: 1 PID: 1357 Comm: syz-executor.0 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 800.728875][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.738909][ T1357] Call Trace: [ 800.742179][ T1357] dump_stack+0x1b0/0x21e [ 800.746508][ T1357] ? devkmsg_release+0x11c/0x11c [ 800.751415][ T1357] ? show_regs_print_info+0x12/0x12 [ 800.756585][ T1357] ? proc_fail_nth_write+0x166/0x200 [ 800.761839][ T1357] should_fail+0x6fb/0x860 [ 800.766225][ T1357] ? setup_fault_attr+0x2b0/0x2b0 [ 800.771220][ T1357] ? proc_fail_nth_read+0x1c0/0x1c0 [ 800.776399][ T1357] ? should_fail+0x182/0x860 [ 800.780957][ T1357] ? dup_fd+0x6b/0xb70 [ 800.785009][ T1357] should_failslab+0x5/0x20 [ 800.789491][ T1357] kmem_cache_alloc+0x36/0x250 [ 800.794243][ T1357] dup_fd+0x6b/0xb70 [ 800.798115][ T1357] ? copy_fs_struct+0x158/0x230 [ 800.802934][ T1357] ? _raw_spin_unlock+0x5/0x20 [ 800.807707][ T1357] ksys_unshare+0x457/0xa40 [ 800.812179][ T1357] ? __sb_end_write+0xa4/0xf0 [ 800.816841][ T1357] ? sighand_ctor+0x60/0x60 [ 800.821314][ T1357] ? ksys_write+0x237/0x2a0 [ 800.825787][ T1357] ? __ia32_sys_read+0x80/0x80 [ 800.830519][ T1357] __x64_sys_unshare+0x34/0x40 [ 800.835257][ T1357] do_syscall_64+0xcb/0x150 [ 800.839730][ T1357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 800.845592][ T1357] RIP: 0033:0x45de59 [ 800.849456][ T1357] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.869030][ T1357] RSP: 002b:00007fb74f5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 800.877408][ T1357] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 800.885350][ T1357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 10:43:30 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:30 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) 10:43:31 executing program 2 (fault-call:9 fault-nth:15): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 800.893293][ T1357] RBP: 00007fb74f5b4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.901236][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.909184][ T1357] R13: 00007ffdbf25ab5f R14: 00007fb74f5b59c0 R15: 000000000118bf2c 10:43:31 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) [ 800.988463][ T1365] FAULT_INJECTION: forcing a failure. [ 800.988463][ T1365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.002002][ T1365] CPU: 0 PID: 1365 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 801.013435][ T1365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.023466][ T1365] Call Trace: [ 801.026736][ T1365] dump_stack+0x1b0/0x21e [ 801.031038][ T1365] ? devkmsg_release+0x11c/0x11c [ 801.035975][ T1365] ? show_regs_print_info+0x12/0x12 [ 801.041166][ T1365] ? kasan_alloc_pages+0x4a/0x60 [ 801.046080][ T1365] should_fail+0x6fb/0x860 [ 801.050466][ T1365] ? setup_fault_attr+0x2b0/0x2b0 [ 801.055466][ T1365] __alloc_pages_nodemask+0x1ee/0x7c0 [ 801.060827][ T1365] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 801.066347][ T1365] ? __do_page_cache_readahead+0x1c4/0x510 [ 801.072126][ T1365] ? xa_load+0x323/0x340 [ 801.076340][ T1365] __do_page_cache_readahead+0x244/0x510 [ 801.081948][ T1365] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 801.088334][ T1365] ? unwind_next_frame+0x1c07/0x22b0 [ 801.093606][ T1365] ? page_cache_sync_readahead+0xa3/0x3c0 [ 801.099298][ T1365] generic_file_read_iter+0x626/0x20a0 [ 801.104755][ T1365] ? find_get_pages_range_tag+0xae0/0xae0 [ 801.110444][ T1365] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 801.115787][ T1365] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.121828][ T1365] ? avc_denied+0x1c0/0x1c0 [ 801.126307][ T1365] generic_file_splice_read+0x491/0x780 [ 801.131826][ T1365] ? splice_shrink_spd+0xb0/0xb0 [ 801.136835][ T1365] ? security_file_permission+0x1e9/0x300 [ 801.142524][ T1365] ? splice_shrink_spd+0xb0/0xb0 [ 801.147432][ T1365] splice_direct_to_actor+0x3cf/0xb00 [ 801.152778][ T1365] ? do_splice_direct+0x3d0/0x3d0 [ 801.157774][ T1365] ? pipe_to_sendpage+0x300/0x300 [ 801.162812][ T1365] ? security_file_permission+0x128/0x300 [ 801.168523][ T1365] do_splice_direct+0x279/0x3d0 [ 801.173352][ T1365] ? splice_direct_to_actor+0xb00/0xb00 [ 801.178873][ T1365] ? security_file_permission+0x128/0x300 [ 801.184564][ T1365] do_sendfile+0x89d/0x1110 [ 801.189048][ T1365] ? compat_writev+0x390/0x390 [ 801.193792][ T1365] ? security_file_permission+0x128/0x300 [ 801.199495][ T1365] ? vfs_write+0x427/0x4f0 [ 801.203902][ T1365] ? fput_many+0x42/0x1a0 [ 801.208215][ T1365] __x64_sys_sendfile64+0x1ae/0x220 [ 801.213390][ T1365] ? __ia32_sys_sendfile+0x240/0x240 [ 801.218663][ T1365] do_syscall_64+0xcb/0x150 [ 801.223146][ T1365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.229010][ T1365] RIP: 0033:0x45de59 [ 801.232878][ T1365] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.252452][ T1365] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 801.260847][ T1365] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 801.268795][ T1365] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 801.276840][ T1365] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 801.284790][ T1365] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000f [ 801.292735][ T1365] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c 10:43:31 executing program 4 (fault-call:11 fault-nth:1): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:31 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:31 executing program 3: read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) 10:43:31 executing program 0 (fault-call:0 fault-nth:2): unshare(0x44000600) 10:43:31 executing program 1 (fault-call:0 fault-nth:2): unshare(0x44000600) 10:43:31 executing program 2 (fault-call:9 fault-nth:16): perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:31 executing program 3: eventfd(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) [ 801.523976][ T1379] FAULT_INJECTION: forcing a failure. [ 801.523976][ T1379] name failslab, interval 1, probability 0, space 0, times 0 [ 801.531710][ T1376] FAULT_INJECTION: forcing a failure. [ 801.531710][ T1376] name failslab, interval 1, probability 0, space 0, times 0 [ 801.551528][ T1379] CPU: 0 PID: 1379 Comm: syz-executor.0 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 801.562988][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.565013][ T1375] FAULT_INJECTION: forcing a failure. [ 801.565013][ T1375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 801.573747][ T1379] Call Trace: [ 801.573766][ T1379] dump_stack+0x1b0/0x21e [ 801.573774][ T1379] ? devkmsg_release+0x11c/0x11c [ 801.573792][ T1379] ? do_syscall_64+0xcb/0x150 [ 801.604100][ T1379] ? show_regs_print_info+0x12/0x12 [ 801.609290][ T1379] ? do_sys_open+0x4a3/0x620 [ 801.613861][ T1379] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.619918][ T1379] ? do_sys_open+0x2fc/0x620 [ 801.624490][ T1379] should_fail+0x6fb/0x860 [ 801.628899][ T1379] ? setup_fault_attr+0x2b0/0x2b0 [ 801.633895][ T1379] ? should_fail+0x182/0x860 [ 801.638454][ T1379] ? setup_fault_attr+0x2b0/0x2b0 [ 801.643450][ T1379] ? alloc_fdtable+0x98/0x270 [ 801.648098][ T1379] should_failslab+0x5/0x20 [ 801.652578][ T1379] kmem_cache_alloc_trace+0x39/0x270 [ 801.657842][ T1379] ? _raw_spin_trylock_bh+0x190/0x190 [ 801.663193][ T1379] alloc_fdtable+0x98/0x270 [ 801.668260][ T1379] dup_fd+0x79a/0xb70 [ 801.672226][ T1379] ? _raw_spin_unlock+0x5/0x20 [ 801.676965][ T1379] ksys_unshare+0x457/0xa40 [ 801.681473][ T1379] ? __sb_end_write+0xa4/0xf0 [ 801.686132][ T1379] ? sighand_ctor+0x60/0x60 [ 801.690616][ T1379] ? ksys_write+0x237/0x2a0 [ 801.695096][ T1379] ? __ia32_sys_read+0x80/0x80 [ 801.699836][ T1379] __x64_sys_unshare+0x34/0x40 [ 801.704581][ T1379] do_syscall_64+0xcb/0x150 [ 801.709063][ T1379] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 801.714935][ T1379] RIP: 0033:0x45de59 [ 801.718807][ T1379] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.738389][ T1379] RSP: 002b:00007fb74f5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 801.746780][ T1379] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 801.754752][ T1379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 801.762703][ T1379] RBP: 00007fb74f5b4ca0 R08: 0000000000000000 R09: 0000000000000000 10:43:31 executing program 3: eventfd(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) [ 801.770653][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.778599][ T1379] R13: 00007ffdbf25ab5f R14: 00007fb74f5b59c0 R15: 000000000118bf2c [ 801.786569][ T1376] CPU: 1 PID: 1376 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 801.798015][ T1376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.808061][ T1376] Call Trace: [ 801.809373][ T1389] FAULT_INJECTION: forcing a failure. [ 801.809373][ T1389] name failslab, interval 1, probability 0, space 0, times 0 10:43:31 executing program 0 (fault-call:0 fault-nth:3): unshare(0x44000600) [ 801.811347][ T1376] dump_stack+0x1b0/0x21e [ 801.811361][ T1376] ? devkmsg_release+0x11c/0x11c [ 801.833145][ T1376] ? show_regs_print_info+0x12/0x12 [ 801.838336][ T1376] ? avc_denied+0x1c0/0x1c0 [ 801.842826][ T1376] should_fail+0x6fb/0x860 [ 801.845661][ T1392] FAULT_INJECTION: forcing a failure. [ 801.845661][ T1392] name failslab, interval 1, probability 0, space 0, times 0 [ 801.847227][ T1376] ? setup_fault_attr+0x2b0/0x2b0 [ 801.847233][ T1376] ? setup_fault_attr+0x2b0/0x2b0 [ 801.847246][ T1376] ? avc_has_perm+0xbd/0x260 [ 801.874380][ T1376] ? avc_has_perm+0x15f/0x260 [ 801.879055][ T1376] ? kcalloc+0x32/0x60 [ 801.883108][ T1376] should_failslab+0x5/0x20 [ 801.887600][ T1376] __kmalloc+0x5f/0x2c0 [ 801.891739][ T1376] ? kmem_cache_alloc_trace+0xc3/0x270 [ 801.897177][ T1376] kcalloc+0x32/0x60 [ 801.901055][ T1376] alloc_pipe_info+0x1b9/0x3a0 [ 801.905801][ T1376] splice_direct_to_actor+0x94e/0xb00 [ 801.911158][ T1376] ? avc_has_perm+0xbd/0x260 [ 801.915732][ T1376] ? match_file+0x120/0x120 [ 801.920218][ T1376] ? avc_has_perm_noaudit+0x3f0/0x3f0 10:43:31 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) [ 801.925575][ T1376] ? do_splice_direct+0x3d0/0x3d0 [ 801.930590][ T1376] ? pipe_to_sendpage+0x300/0x300 [ 801.935611][ T1376] ? security_file_permission+0x128/0x300 [ 801.941360][ T1376] do_splice_direct+0x279/0x3d0 [ 801.946203][ T1376] ? splice_direct_to_actor+0xb00/0xb00 [ 801.951745][ T1376] ? security_file_permission+0x128/0x300 [ 801.957454][ T1376] do_sendfile+0x89d/0x1110 [ 801.961949][ T1376] ? compat_writev+0x390/0x390 [ 801.966702][ T1376] ? security_file_permission+0x128/0x300 10:43:32 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) [ 801.972404][ T1376] ? vfs_write+0x427/0x4f0 [ 801.976806][ T1376] ? fput_many+0x42/0x1a0 [ 801.981121][ T1376] __x64_sys_sendfile64+0x1ae/0x220 [ 801.986306][ T1376] ? __ia32_sys_sendfile+0x240/0x240 [ 801.991571][ T1376] do_syscall_64+0xcb/0x150 [ 801.996060][ T1376] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.001949][ T1376] RIP: 0033:0x45de59 [ 802.005831][ T1376] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.025442][ T1376] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 802.033835][ T1376] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 802.041783][ T1376] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 802.049733][ T1376] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.057685][ T1376] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000001 [ 802.065634][ T1376] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 802.073612][ T1375] CPU: 0 PID: 1375 Comm: syz-executor.2 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 802.085052][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.095088][ T1375] Call Trace: [ 802.098364][ T1375] dump_stack+0x1b0/0x21e [ 802.102696][ T1375] ? devkmsg_release+0x11c/0x11c [ 802.107613][ T1375] ? show_regs_print_info+0x12/0x12 [ 802.112790][ T1375] should_fail+0x6fb/0x860 [ 802.117182][ T1375] ? setup_fault_attr+0x2b0/0x2b0 [ 802.122199][ T1375] __alloc_pages_nodemask+0x1ee/0x7c0 [ 802.127545][ T1375] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 802.133065][ T1375] ? xa_load+0x323/0x340 [ 802.137279][ T1375] __do_page_cache_readahead+0x244/0x510 [ 802.142885][ T1375] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 802.149289][ T1375] ? unwind_next_frame+0x1c07/0x22b0 [ 802.154551][ T1375] ? page_cache_sync_readahead+0xa3/0x3c0 [ 802.160245][ T1375] generic_file_read_iter+0x626/0x20a0 [ 802.165683][ T1375] ? find_get_pages_range_tag+0xae0/0xae0 [ 802.171376][ T1375] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 802.176724][ T1375] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.182760][ T1375] ? avc_denied+0x1c0/0x1c0 [ 802.187238][ T1375] generic_file_splice_read+0x491/0x780 [ 802.193018][ T1375] ? splice_shrink_spd+0xb0/0xb0 [ 802.197943][ T1375] ? security_file_permission+0x1e9/0x300 [ 802.203649][ T1375] ? splice_shrink_spd+0xb0/0xb0 [ 802.208569][ T1375] splice_direct_to_actor+0x3cf/0xb00 [ 802.213920][ T1375] ? do_splice_direct+0x3d0/0x3d0 [ 802.218919][ T1375] ? pipe_to_sendpage+0x300/0x300 [ 802.223929][ T1375] ? security_file_permission+0x128/0x300 [ 802.229628][ T1375] do_splice_direct+0x279/0x3d0 [ 802.234459][ T1375] ? splice_direct_to_actor+0xb00/0xb00 [ 802.239979][ T1375] ? security_file_permission+0x128/0x300 [ 802.245668][ T1375] do_sendfile+0x89d/0x1110 [ 802.251561][ T1375] ? compat_writev+0x390/0x390 [ 802.256302][ T1375] ? security_file_permission+0x128/0x300 [ 802.261991][ T1375] ? vfs_write+0x427/0x4f0 [ 802.266384][ T1375] ? fput_many+0x42/0x1a0 [ 802.270689][ T1375] __x64_sys_sendfile64+0x1ae/0x220 [ 802.275860][ T1375] ? __ia32_sys_sendfile+0x240/0x240 [ 802.281119][ T1375] do_syscall_64+0xcb/0x150 [ 802.285597][ T1375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.291481][ T1375] RIP: 0033:0x45de59 [ 802.295357][ T1375] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.314943][ T1375] RSP: 002b:00007f3f8cf5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 10:43:32 executing program 3: eventfd(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) [ 802.323452][ T1375] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 802.331613][ T1375] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 802.339577][ T1375] RBP: 00007f3f8cf5dca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.347542][ T1375] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000010 [ 802.355494][ T1375] R13: 00007ffd2204ba9f R14: 00007f3f8cf5e9c0 R15: 000000000118bf2c [ 802.377589][ T1392] CPU: 1 PID: 1392 Comm: syz-executor.0 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 802.389060][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.399109][ T1392] Call Trace: [ 802.402394][ T1392] dump_stack+0x1b0/0x21e [ 802.406712][ T1392] ? devkmsg_release+0x11c/0x11c [ 802.411650][ T1392] ? show_regs_print_info+0x12/0x12 [ 802.416838][ T1392] ? kmem_cache_alloc+0x1d5/0x250 [ 802.421848][ T1392] ? ksys_unshare+0x494/0xa40 [ 802.426511][ T1392] ? __x64_sys_unshare+0x34/0x40 [ 802.431435][ T1392] ? do_syscall_64+0xcb/0x150 [ 802.436099][ T1392] ? slab_free_freelist_hook+0xd0/0x150 [ 802.441635][ T1392] ? kmem_cache_free+0xac/0x5c0 [ 802.446481][ T1392] ? do_sys_open+0x4a3/0x620 [ 802.451059][ T1392] should_fail+0x6fb/0x860 [ 802.455460][ T1392] ? setup_fault_attr+0x2b0/0x2b0 [ 802.460455][ T1392] ? should_fail+0x182/0x860 [ 802.465023][ T1392] ? setup_fault_attr+0x2b0/0x2b0 [ 802.470035][ T1392] ? ___slab_alloc+0x9b/0x450 [ 802.474687][ T1392] ? kvmalloc_node+0xc2/0x120 [ 802.479334][ T1392] should_failslab+0x5/0x20 [ 802.483805][ T1392] __kmalloc+0x5f/0x2c0 [ 802.487932][ T1392] kvmalloc_node+0xc2/0x120 [ 802.492406][ T1392] alloc_fdtable+0xe4/0x270 [ 802.496885][ T1392] dup_fd+0x79a/0xb70 [ 802.500841][ T1392] ? _raw_spin_unlock+0x5/0x20 [ 802.505579][ T1392] ksys_unshare+0x457/0xa40 [ 802.510051][ T1392] ? __sb_end_write+0xa4/0xf0 [ 802.514699][ T1392] ? sighand_ctor+0x60/0x60 [ 802.519172][ T1392] ? ksys_write+0x237/0x2a0 [ 802.523651][ T1392] ? __ia32_sys_read+0x80/0x80 [ 802.528408][ T1392] __x64_sys_unshare+0x34/0x40 [ 802.533142][ T1392] do_syscall_64+0xcb/0x150 [ 802.537618][ T1392] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.543479][ T1392] RIP: 0033:0x45de59 [ 802.547347][ T1392] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.567413][ T1392] RSP: 002b:00007fb74f5b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 802.575803][ T1392] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 802.583753][ T1392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 802.591702][ T1392] RBP: 00007fb74f5b4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.599679][ T1392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.607625][ T1392] R13: 00007ffdbf25ab5f R14: 00007fb74f5b59c0 R15: 000000000118bf2c [ 802.615603][ T1389] CPU: 0 PID: 1389 Comm: syz-executor.1 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 802.627052][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.637108][ T1389] Call Trace: [ 802.640389][ T1389] dump_stack+0x1b0/0x21e [ 802.644712][ T1389] ? devkmsg_release+0x11c/0x11c [ 802.649625][ T1389] ? show_regs_print_info+0x12/0x12 [ 802.654824][ T1389] ? do_sys_open+0x4a3/0x620 [ 802.659405][ T1389] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.665441][ T1389] ? do_sys_open+0x2fc/0x620 [ 802.670003][ T1389] should_fail+0x6fb/0x860 [ 802.674416][ T1389] ? setup_fault_attr+0x2b0/0x2b0 [ 802.679410][ T1389] ? should_fail+0x182/0x860 [ 802.683972][ T1389] ? setup_fault_attr+0x2b0/0x2b0 [ 802.688965][ T1389] ? alloc_fdtable+0x98/0x270 [ 802.693611][ T1389] should_failslab+0x5/0x20 [ 802.698084][ T1389] kmem_cache_alloc_trace+0x39/0x270 [ 802.703340][ T1389] ? _raw_spin_trylock_bh+0x190/0x190 [ 802.708696][ T1389] alloc_fdtable+0x98/0x270 [ 802.713174][ T1389] dup_fd+0x79a/0xb70 [ 802.717128][ T1389] ? _raw_spin_unlock+0x5/0x20 [ 802.721862][ T1389] ksys_unshare+0x457/0xa40 [ 802.726346][ T1389] ? __sb_end_write+0xa4/0xf0 [ 802.730993][ T1389] ? sighand_ctor+0x60/0x60 [ 802.735465][ T1389] ? ksys_write+0x237/0x2a0 [ 802.739954][ T1389] ? __ia32_sys_read+0x80/0x80 [ 802.744692][ T1389] __x64_sys_unshare+0x34/0x40 [ 802.749424][ T1389] do_syscall_64+0xcb/0x150 [ 802.753898][ T1389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 802.759774][ T1389] RIP: 0033:0x45de59 [ 802.763642][ T1389] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.783217][ T1389] RSP: 002b:00007fac8d464c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 802.791610][ T1389] RAX: ffffffffffffffda RBX: 0000000000038180 RCX: 000000000045de59 [ 802.799551][ T1389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000044000600 [ 802.807492][ T1389] RBP: 00007fac8d464ca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.815450][ T1389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.823392][ T1389] R13: 00007ffc66300e8f R14: 00007fac8d4659c0 R15: 000000000118bf2c 10:43:33 executing program 4 (fault-call:11 fault-nth:2): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:33 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:33 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:33 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, 0x0, 0x0) 10:43:33 executing program 1: unshare(0x44000600) 10:43:33 executing program 0: unshare(0x44000600) 10:43:33 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, 0x0, 0x0) [ 803.349426][ T1408] FAULT_INJECTION: forcing a failure. [ 803.349426][ T1408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.364350][ T1408] CPU: 0 PID: 1408 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 803.376100][ T1408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.386149][ T1408] Call Trace: [ 803.389438][ T1408] dump_stack+0x1b0/0x21e [ 803.393773][ T1408] ? devkmsg_release+0x11c/0x11c 10:43:33 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, 0x0, 0x0) [ 803.398705][ T1408] ? show_regs_print_info+0x12/0x12 [ 803.403900][ T1408] ? unwind_get_return_address_ptr+0x130/0x130 [ 803.410048][ T1408] should_fail+0x6fb/0x860 [ 803.414467][ T1408] ? setup_fault_attr+0x2b0/0x2b0 [ 803.419493][ T1408] __alloc_pages_nodemask+0x1ee/0x7c0 [ 803.424860][ T1408] ? xas_load+0x46f/0x4c0 [ 803.429184][ T1408] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 803.434724][ T1408] ? find_get_entry+0x5da/0x670 [ 803.439562][ T1408] ? xa_load+0x323/0x340 [ 803.443796][ T1408] __do_page_cache_readahead+0x244/0x510 [ 803.449425][ T1408] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 803.455827][ T1408] ? unwind_next_frame+0x1c07/0x22b0 [ 803.461102][ T1408] ? page_cache_sync_readahead+0xa3/0x3c0 [ 803.466812][ T1408] generic_file_read_iter+0x626/0x20a0 [ 803.472269][ T1408] ? find_get_pages_range_tag+0xae0/0xae0 [ 803.477978][ T1408] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 803.483347][ T1408] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.489409][ T1408] ? avc_denied+0x1c0/0x1c0 [ 803.493908][ T1408] generic_file_splice_read+0x491/0x780 [ 803.499449][ T1408] ? splice_shrink_spd+0xb0/0xb0 [ 803.504385][ T1408] ? security_file_permission+0x1e9/0x300 [ 803.510103][ T1408] ? splice_shrink_spd+0xb0/0xb0 [ 803.515030][ T1408] splice_direct_to_actor+0x3cf/0xb00 [ 803.520399][ T1408] ? do_splice_direct+0x3d0/0x3d0 [ 803.525411][ T1408] ? pipe_to_sendpage+0x300/0x300 [ 803.530431][ T1408] ? security_file_permission+0x128/0x300 [ 803.536139][ T1408] do_splice_direct+0x279/0x3d0 [ 803.541011][ T1408] ? splice_direct_to_actor+0xb00/0xb00 [ 803.546639][ T1408] ? security_file_permission+0x128/0x300 [ 803.552350][ T1408] do_sendfile+0x89d/0x1110 [ 803.556850][ T1408] ? compat_writev+0x390/0x390 [ 803.561646][ T1408] ? security_file_permission+0x128/0x300 [ 803.567359][ T1408] ? vfs_write+0x427/0x4f0 [ 803.571763][ T1408] ? fput_many+0x42/0x1a0 [ 803.576087][ T1408] __x64_sys_sendfile64+0x1ae/0x220 [ 803.581284][ T1408] ? __ia32_sys_sendfile+0x240/0x240 [ 803.586560][ T1408] do_syscall_64+0xcb/0x150 [ 803.591063][ T1408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 803.596943][ T1408] RIP: 0033:0x45de59 [ 803.600830][ T1408] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.620427][ T1408] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 803.628852][ T1408] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 803.636817][ T1408] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:33 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) [ 803.644777][ T1408] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 803.652739][ T1408] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000002 [ 803.660705][ T1408] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:33 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:33 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:33 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:34 executing program 1: unshare(0x44000004) 10:43:34 executing program 4 (fault-call:11 fault-nth:3): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:34 executing program 0: unshare(0x44000004) 10:43:34 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:34 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x7ffff000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:34 executing program 1: unshare(0x44000300) 10:43:34 executing program 0: unshare(0x44000300) [ 804.348722][ T1449] FAULT_INJECTION: forcing a failure. [ 804.348722][ T1449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.363566][ T1449] CPU: 0 PID: 1449 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 804.375025][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.385073][ T1449] Call Trace: [ 804.388361][ T1449] dump_stack+0x1b0/0x21e [ 804.392683][ T1449] ? devkmsg_release+0x11c/0x11c [ 804.397615][ T1449] ? show_regs_print_info+0x12/0x12 [ 804.402800][ T1449] ? kasan_alloc_pages+0x4a/0x60 [ 804.407725][ T1449] should_fail+0x6fb/0x860 [ 804.412129][ T1449] ? setup_fault_attr+0x2b0/0x2b0 [ 804.417155][ T1449] __alloc_pages_nodemask+0x1ee/0x7c0 [ 804.422521][ T1449] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 804.428059][ T1449] ? find_get_entry+0x5da/0x670 [ 804.432901][ T1449] ? xa_load+0x323/0x340 [ 804.437137][ T1449] __do_page_cache_readahead+0x244/0x510 [ 804.442761][ T1449] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 804.449169][ T1449] ? unwind_next_frame+0x1c07/0x22b0 [ 804.454447][ T1449] ? page_cache_sync_readahead+0xa3/0x3c0 [ 804.460161][ T1449] generic_file_read_iter+0x626/0x20a0 [ 804.465621][ T1449] ? find_get_pages_range_tag+0xae0/0xae0 [ 804.471339][ T1449] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 804.476700][ T1449] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.482759][ T1449] ? avc_denied+0x1c0/0x1c0 [ 804.487255][ T1449] generic_file_splice_read+0x491/0x780 [ 804.492791][ T1449] ? splice_shrink_spd+0xb0/0xb0 [ 804.497727][ T1449] ? security_file_permission+0x1e9/0x300 [ 804.503434][ T1449] ? splice_shrink_spd+0xb0/0xb0 [ 804.508373][ T1449] splice_direct_to_actor+0x3cf/0xb00 [ 804.513736][ T1449] ? do_splice_direct+0x3d0/0x3d0 [ 804.518744][ T1449] ? pipe_to_sendpage+0x300/0x300 [ 804.523767][ T1449] ? security_file_permission+0x128/0x300 [ 804.529474][ T1449] do_splice_direct+0x279/0x3d0 [ 804.534314][ T1449] ? splice_direct_to_actor+0xb00/0xb00 [ 804.539852][ T1449] ? security_file_permission+0x128/0x300 [ 804.545568][ T1449] do_sendfile+0x89d/0x1110 [ 804.550064][ T1449] ? compat_writev+0x390/0x390 [ 804.554820][ T1449] ? security_file_permission+0x128/0x300 [ 804.560533][ T1449] ? vfs_write+0x427/0x4f0 [ 804.564937][ T1449] ? fput_many+0x42/0x1a0 [ 804.569254][ T1449] __x64_sys_sendfile64+0x1ae/0x220 [ 804.574454][ T1449] ? __ia32_sys_sendfile+0x240/0x240 [ 804.579732][ T1449] do_syscall_64+0xcb/0x150 [ 804.584318][ T1449] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.590200][ T1449] RIP: 0033:0x45de59 10:43:34 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:34 executing program 1: unshare(0x44000500) [ 804.594079][ T1449] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.613677][ T1449] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 804.622083][ T1449] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 804.630049][ T1449] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 804.638012][ T1449] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:34 executing program 0: unshare(0x44000500) 10:43:34 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) [ 804.645974][ T1449] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000003 [ 804.653937][ T1449] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:34 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:35 executing program 4 (fault-call:11 fault-nth:4): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:35 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:35 executing program 0: unshare(0x44000602) 10:43:35 executing program 1: unshare(0x44000602) 10:43:35 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffffffff000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 805.342414][ T1477] FAULT_INJECTION: forcing a failure. [ 805.342414][ T1477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.356626][ T1477] CPU: 1 PID: 1477 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 805.368202][ T1477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.378234][ T1477] Call Trace: [ 805.381520][ T1477] dump_stack+0x1b0/0x21e [ 805.385823][ T1477] ? devkmsg_release+0x11c/0x11c [ 805.390736][ T1477] ? show_regs_print_info+0x12/0x12 [ 805.395908][ T1477] ? kasan_alloc_pages+0x4a/0x60 [ 805.400824][ T1477] should_fail+0x6fb/0x860 [ 805.405224][ T1477] ? setup_fault_attr+0x2b0/0x2b0 [ 805.410221][ T1477] __alloc_pages_nodemask+0x1ee/0x7c0 [ 805.415565][ T1477] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 805.421082][ T1477] ? find_get_entry+0x5da/0x670 [ 805.425904][ T1477] ? xa_load+0x323/0x340 [ 805.430118][ T1477] __do_page_cache_readahead+0x244/0x510 [ 805.435723][ T1477] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 805.442107][ T1477] ? unwind_next_frame+0x1c07/0x22b0 [ 805.447367][ T1477] ? page_cache_sync_readahead+0xa3/0x3c0 [ 805.453057][ T1477] generic_file_read_iter+0x626/0x20a0 [ 805.458494][ T1477] ? find_get_pages_range_tag+0xae0/0xae0 [ 805.464185][ T1477] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 805.469528][ T1477] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.475565][ T1477] ? avc_denied+0x1c0/0x1c0 [ 805.480041][ T1477] generic_file_splice_read+0x491/0x780 [ 805.485561][ T1477] ? splice_shrink_spd+0xb0/0xb0 [ 805.490472][ T1477] ? security_file_permission+0x1e9/0x300 [ 805.496160][ T1477] ? splice_shrink_spd+0xb0/0xb0 [ 805.501066][ T1477] splice_direct_to_actor+0x3cf/0xb00 [ 805.506428][ T1477] ? do_splice_direct+0x3d0/0x3d0 [ 805.511424][ T1477] ? pipe_to_sendpage+0x300/0x300 [ 805.516424][ T1477] ? security_file_permission+0x128/0x300 [ 805.522116][ T1477] do_splice_direct+0x279/0x3d0 [ 805.526941][ T1477] ? splice_direct_to_actor+0xb00/0xb00 [ 805.532461][ T1477] ? security_file_permission+0x128/0x300 [ 805.538150][ T1477] do_sendfile+0x89d/0x1110 [ 805.542627][ T1477] ? compat_writev+0x390/0x390 [ 805.547360][ T1477] ? security_file_permission+0x128/0x300 [ 805.553051][ T1477] ? vfs_write+0x427/0x4f0 [ 805.557438][ T1477] ? fput_many+0x42/0x1a0 [ 805.561754][ T1477] __x64_sys_sendfile64+0x1ae/0x220 [ 805.566939][ T1477] ? __ia32_sys_sendfile+0x240/0x240 [ 805.572196][ T1477] do_syscall_64+0xcb/0x150 [ 805.576671][ T1477] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 805.582534][ T1477] RIP: 0033:0x45de59 [ 805.586410][ T1477] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.606006][ T1477] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 805.614386][ T1477] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 805.622332][ T1477] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 805.630274][ T1477] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:35 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:35 executing program 0: unshare(0x44000603) [ 805.638239][ T1477] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000004 [ 805.646209][ T1477] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:35 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:35 executing program 0: unshare(0x44000604) 10:43:35 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:35 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:35 executing program 1: unshare(0x44000603) 10:43:36 executing program 4 (fault-call:11 fault-nth:5): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:36 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:36 executing program 0: unshare(0x44000605) 10:43:36 executing program 1: unshare(0x44000604) 10:43:36 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) setsockopt$inet6_buf(r3, 0x29, 0xd2, &(0x7f0000000080)="1be9596126b5794d95bc86204c0f91599b228af61bc4b3354e416431cd56d7e8b3d2b308fcc59a301b6c7b844b7e4338745ada241e963ae62355423f1c53d0f0ca5e63f449d73f2817e41906f3150a9672318742e750eec4afd70caa3e67eebb2b95949e3e0e3ce51dacfabe06f2d5602124dc50604ec9a9910298304545c8321faca6a1e3d8a8e774c713a042ca636e247a943012cb473769e141dc35fce891f5ac7c595e6b1b30a27040523079c1eb813a3c9d8c2a4d6834bfbb381f2568ab6d523d0f3737fbf35c6fce8ca50e6e6b444ed61454d6af892476b8b315fb5335ea8d5a148299c4b5", 0xe8) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x0, 0x78bd27, 0x25dfdbfe, {{}, {@val={0x5}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:36 executing program 0: unshare(0x44000606) [ 806.411371][ T1511] FAULT_INJECTION: forcing a failure. [ 806.411371][ T1511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.426213][ T1511] CPU: 1 PID: 1511 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 806.437667][ T1511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.447712][ T1511] Call Trace: [ 806.451002][ T1511] dump_stack+0x1b0/0x21e [ 806.455328][ T1511] ? devkmsg_release+0x11c/0x11c [ 806.460274][ T1511] ? show_regs_print_info+0x12/0x12 [ 806.465454][ T1511] ? kasan_alloc_pages+0x4a/0x60 [ 806.470365][ T1511] should_fail+0x6fb/0x860 [ 806.474754][ T1511] ? setup_fault_attr+0x2b0/0x2b0 [ 806.479856][ T1511] __alloc_pages_nodemask+0x1ee/0x7c0 [ 806.485204][ T1511] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 806.490720][ T1511] ? find_get_entry+0x5da/0x670 [ 806.495541][ T1511] ? xa_load+0x323/0x340 [ 806.499754][ T1511] __do_page_cache_readahead+0x244/0x510 [ 806.505357][ T1511] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 806.511762][ T1511] ? unwind_next_frame+0x1c07/0x22b0 [ 806.517019][ T1511] ? page_cache_sync_readahead+0xa3/0x3c0 [ 806.522722][ T1511] generic_file_read_iter+0x626/0x20a0 [ 806.528158][ T1511] ? find_get_pages_range_tag+0xae0/0xae0 [ 806.533862][ T1511] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 806.539205][ T1511] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.545242][ T1511] ? avc_denied+0x1c0/0x1c0 [ 806.549718][ T1511] generic_file_splice_read+0x491/0x780 [ 806.555234][ T1511] ? splice_shrink_spd+0xb0/0xb0 [ 806.560144][ T1511] ? security_file_permission+0x1e9/0x300 [ 806.565842][ T1511] ? splice_shrink_spd+0xb0/0xb0 [ 806.570749][ T1511] splice_direct_to_actor+0x3cf/0xb00 [ 806.576092][ T1511] ? do_splice_direct+0x3d0/0x3d0 [ 806.581083][ T1511] ? pipe_to_sendpage+0x300/0x300 [ 806.586077][ T1511] ? security_file_permission+0x128/0x300 [ 806.591763][ T1511] do_splice_direct+0x279/0x3d0 [ 806.596585][ T1511] ? splice_direct_to_actor+0xb00/0xb00 [ 806.602101][ T1511] ? security_file_permission+0x128/0x300 [ 806.607788][ T1511] do_sendfile+0x89d/0x1110 [ 806.612265][ T1511] ? compat_writev+0x390/0x390 [ 806.617013][ T1511] ? security_file_permission+0x128/0x300 [ 806.622702][ T1511] ? vfs_write+0x427/0x4f0 [ 806.627087][ T1511] ? fput_many+0x42/0x1a0 [ 806.631387][ T1511] __x64_sys_sendfile64+0x1ae/0x220 [ 806.636554][ T1511] ? __ia32_sys_sendfile+0x240/0x240 [ 806.641814][ T1511] do_syscall_64+0xcb/0x150 [ 806.646300][ T1511] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.652164][ T1511] RIP: 0033:0x45de59 [ 806.656032][ T1511] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.675606][ T1511] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.683986][ T1511] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 806.691929][ T1511] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 806.699878][ T1511] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:36 executing program 1: unshare(0x44000605) 10:43:36 executing program 0: unshare(0x44000607) 10:43:36 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) [ 806.707820][ T1511] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000005 [ 806.715774][ T1511] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:36 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:36 executing program 1: unshare(0x44000606) 10:43:36 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:37 executing program 4 (fault-call:11 fault-nth:6): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:37 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:37 executing program 0: unshare(0x44000608) 10:43:37 executing program 1: unshare(0x44000607) 10:43:37 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) readahead(r1, 0x40000000000000, 0x400) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9740}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7120}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4008810) [ 807.394743][ T1548] FAULT_INJECTION: forcing a failure. [ 807.394743][ T1548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.408647][ T1548] CPU: 0 PID: 1548 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 807.420101][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.430160][ T1548] Call Trace: [ 807.433448][ T1548] dump_stack+0x1b0/0x21e [ 807.437782][ T1548] ? devkmsg_release+0x11c/0x11c [ 807.442723][ T1548] ? show_regs_print_info+0x12/0x12 [ 807.447920][ T1548] ? kasan_alloc_pages+0x4a/0x60 [ 807.452846][ T1548] should_fail+0x6fb/0x860 [ 807.457257][ T1548] ? setup_fault_attr+0x2b0/0x2b0 [ 807.462285][ T1548] __alloc_pages_nodemask+0x1ee/0x7c0 [ 807.467657][ T1548] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 807.473195][ T1548] ? find_get_entry+0x5da/0x670 [ 807.478036][ T1548] ? xa_load+0x323/0x340 [ 807.482267][ T1548] __do_page_cache_readahead+0x244/0x510 [ 807.487908][ T1548] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 807.494423][ T1548] ? unwind_next_frame+0x1c07/0x22b0 [ 807.499703][ T1548] ? page_cache_sync_readahead+0xa3/0x3c0 [ 807.505428][ T1548] generic_file_read_iter+0x626/0x20a0 [ 807.510897][ T1548] ? find_get_pages_range_tag+0xae0/0xae0 [ 807.516607][ T1548] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 807.521973][ T1548] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.528039][ T1548] ? avc_denied+0x1c0/0x1c0 [ 807.532535][ T1548] generic_file_splice_read+0x491/0x780 [ 807.538073][ T1548] ? splice_shrink_spd+0xb0/0xb0 10:43:37 executing program 1: unshare(0x44000608) [ 807.543010][ T1548] ? security_file_permission+0x1e9/0x300 [ 807.548727][ T1548] ? splice_shrink_spd+0xb0/0xb0 [ 807.553657][ T1548] splice_direct_to_actor+0x3cf/0xb00 [ 807.559026][ T1548] ? do_splice_direct+0x3d0/0x3d0 [ 807.564143][ T1548] ? pipe_to_sendpage+0x300/0x300 [ 807.569165][ T1548] ? security_file_permission+0x128/0x300 [ 807.574873][ T1548] do_splice_direct+0x279/0x3d0 [ 807.579725][ T1548] ? splice_direct_to_actor+0xb00/0xb00 [ 807.585267][ T1548] ? security_file_permission+0x128/0x300 [ 807.590976][ T1548] do_sendfile+0x89d/0x1110 [ 807.595481][ T1548] ? compat_writev+0x390/0x390 [ 807.600237][ T1548] ? security_file_permission+0x128/0x300 [ 807.605952][ T1548] ? vfs_write+0x427/0x4f0 [ 807.610370][ T1548] ? fput_many+0x42/0x1a0 [ 807.614690][ T1548] __x64_sys_sendfile64+0x1ae/0x220 [ 807.619881][ T1548] ? __ia32_sys_sendfile+0x240/0x240 [ 807.625166][ T1548] do_syscall_64+0xcb/0x150 [ 807.629662][ T1548] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 807.635550][ T1548] RIP: 0033:0x45de59 [ 807.639469][ T1548] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.659074][ T1548] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.667484][ T1548] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 807.675448][ T1548] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 807.683411][ T1548] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:37 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:37 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}) [ 807.691377][ T1548] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000006 [ 807.699368][ T1548] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:37 executing program 1: unshare(0x44000609) 10:43:37 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:37 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:37 executing program 0: unshare(0x44000609) 10:43:38 executing program 4 (fault-call:11 fault-nth:7): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:38 executing program 1: unshare(0x4400060a) 10:43:38 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:38 executing program 0: unshare(0x4400060a) 10:43:38 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000080)="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", &(0x7f0000000300)=""/145, &(0x7f0000000780)="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", &(0x7f0000000240)="fbfe4f82033ad919562ae6287ed4f22a5bddeae794300425545651949e73b0f7adc0c1b9967e19362c0c23600672a4ea72a500636e277b1c781fd91568db58d1e7ca9ec74d2611e274a7b0", 0x1, r0}, 0x38) close(r1) r2 = socket(0x8, 0xa, 0xfff) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:38 executing program 0: unshare(0x4400060b) [ 808.394367][ T1586] FAULT_INJECTION: forcing a failure. [ 808.394367][ T1586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 808.411303][ T1586] CPU: 1 PID: 1586 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 808.422765][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.432813][ T1586] Call Trace: [ 808.436107][ T1586] dump_stack+0x1b0/0x21e [ 808.440425][ T1586] ? devkmsg_release+0x11c/0x11c [ 808.445351][ T1586] ? show_regs_print_info+0x12/0x12 [ 808.450522][ T1586] ? kasan_alloc_pages+0x4a/0x60 [ 808.455432][ T1586] should_fail+0x6fb/0x860 [ 808.459824][ T1586] ? setup_fault_attr+0x2b0/0x2b0 [ 808.464847][ T1586] __alloc_pages_nodemask+0x1ee/0x7c0 [ 808.470195][ T1586] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 808.475710][ T1586] ? find_get_entry+0x5da/0x670 [ 808.480531][ T1586] ? xa_load+0x323/0x340 [ 808.484745][ T1586] __do_page_cache_readahead+0x244/0x510 [ 808.490368][ T1586] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 808.496754][ T1586] ? unwind_next_frame+0x1c07/0x22b0 [ 808.502008][ T1586] ? page_cache_sync_readahead+0xa3/0x3c0 [ 808.507717][ T1586] generic_file_read_iter+0x626/0x20a0 [ 808.513157][ T1586] ? find_get_pages_range_tag+0xae0/0xae0 [ 808.518862][ T1586] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 808.524204][ T1586] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.530241][ T1586] ? avc_denied+0x1c0/0x1c0 [ 808.534716][ T1586] generic_file_splice_read+0x491/0x780 [ 808.540232][ T1586] ? splice_shrink_spd+0xb0/0xb0 [ 808.545161][ T1586] ? security_file_permission+0x1e9/0x300 [ 808.550849][ T1586] ? splice_shrink_spd+0xb0/0xb0 [ 808.555767][ T1586] splice_direct_to_actor+0x3cf/0xb00 [ 808.561198][ T1586] ? do_splice_direct+0x3d0/0x3d0 [ 808.566206][ T1586] ? pipe_to_sendpage+0x300/0x300 [ 808.571201][ T1586] ? security_file_permission+0x128/0x300 [ 808.576903][ T1586] do_splice_direct+0x279/0x3d0 [ 808.581724][ T1586] ? splice_direct_to_actor+0xb00/0xb00 [ 808.587258][ T1586] ? security_file_permission+0x128/0x300 [ 808.592965][ T1586] do_sendfile+0x89d/0x1110 [ 808.597454][ T1586] ? compat_writev+0x390/0x390 [ 808.602188][ T1586] ? security_file_permission+0x128/0x300 [ 808.608142][ T1586] ? vfs_write+0x427/0x4f0 [ 808.612529][ T1586] ? fput_many+0x42/0x1a0 [ 808.616830][ T1586] __x64_sys_sendfile64+0x1ae/0x220 [ 808.621999][ T1586] ? __ia32_sys_sendfile+0x240/0x240 [ 808.627254][ T1586] do_syscall_64+0xcb/0x150 [ 808.631745][ T1586] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 808.637610][ T1586] RIP: 0033:0x45de59 [ 808.641493][ T1586] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.661086][ T1586] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.669486][ T1586] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 808.677446][ T1586] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 808.685390][ T1586] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:38 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:38 executing program 0: unshare(0x4400060c) 10:43:38 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:38 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:38 executing program 1: unshare(0x4400060b) 10:43:38 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) [ 808.693353][ T1586] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000007 [ 808.701306][ T1586] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:39 executing program 4 (fault-call:11 fault-nth:8): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:39 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:39 executing program 0: unshare(0x4400060d) 10:43:39 executing program 1: unshare(0x4400060c) 10:43:39 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_CREATE(r4, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/64, 0x40, 0xddf, 0x4, 0x4, 0x0, 0x40}}, 0x120) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:39 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:39 executing program 1: unshare(0x4400060d) 10:43:39 executing program 1: unshare(0x4400060e) 10:43:39 executing program 0: unshare(0x4400060e) 10:43:39 executing program 1: unshare(0x4400060f) [ 809.409232][ T1623] FAULT_INJECTION: forcing a failure. [ 809.409232][ T1623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.426243][ T1623] CPU: 1 PID: 1623 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 809.437704][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.447757][ T1623] Call Trace: [ 809.451044][ T1623] dump_stack+0x1b0/0x21e [ 809.455362][ T1623] ? devkmsg_release+0x11c/0x11c [ 809.460275][ T1623] ? show_regs_print_info+0x12/0x12 [ 809.465447][ T1623] ? kasan_alloc_pages+0x4a/0x60 [ 809.470356][ T1623] should_fail+0x6fb/0x860 [ 809.474756][ T1623] ? setup_fault_attr+0x2b0/0x2b0 [ 809.479771][ T1623] __alloc_pages_nodemask+0x1ee/0x7c0 [ 809.485132][ T1623] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 809.490649][ T1623] ? find_get_entry+0x5da/0x670 [ 809.495472][ T1623] ? xa_load+0x323/0x340 [ 809.499685][ T1623] __do_page_cache_readahead+0x244/0x510 [ 809.505309][ T1623] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 809.511694][ T1623] ? unwind_next_frame+0x1c07/0x22b0 [ 809.516950][ T1623] ? page_cache_sync_readahead+0xa3/0x3c0 [ 809.522638][ T1623] generic_file_read_iter+0x626/0x20a0 [ 809.528094][ T1623] ? find_get_pages_range_tag+0xae0/0xae0 [ 809.533783][ T1623] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 809.539127][ T1623] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.545177][ T1623] ? avc_denied+0x1c0/0x1c0 [ 809.549652][ T1623] generic_file_splice_read+0x491/0x780 [ 809.555169][ T1623] ? splice_shrink_spd+0xb0/0xb0 [ 809.560081][ T1623] ? security_file_permission+0x1e9/0x300 [ 809.565769][ T1623] ? splice_shrink_spd+0xb0/0xb0 [ 809.570675][ T1623] splice_direct_to_actor+0x3cf/0xb00 [ 809.576019][ T1623] ? do_splice_direct+0x3d0/0x3d0 [ 809.581020][ T1623] ? pipe_to_sendpage+0x300/0x300 [ 809.586029][ T1623] ? security_file_permission+0x128/0x300 [ 809.591762][ T1623] do_splice_direct+0x279/0x3d0 [ 809.596584][ T1623] ? splice_direct_to_actor+0xb00/0xb00 [ 809.602099][ T1623] ? security_file_permission+0x128/0x300 [ 809.607788][ T1623] do_sendfile+0x89d/0x1110 [ 809.612266][ T1623] ? compat_writev+0x390/0x390 [ 809.616998][ T1623] ? security_file_permission+0x128/0x300 [ 809.622689][ T1623] ? vfs_write+0x427/0x4f0 [ 809.627075][ T1623] ? fput_many+0x42/0x1a0 [ 809.631373][ T1623] __x64_sys_sendfile64+0x1ae/0x220 [ 809.636541][ T1623] ? __ia32_sys_sendfile+0x240/0x240 [ 809.641800][ T1623] do_syscall_64+0xcb/0x150 [ 809.646274][ T1623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 809.652136][ T1623] RIP: 0033:0x45de59 [ 809.656002][ T1623] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.675576][ T1623] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 809.683955][ T1623] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 809.691911][ T1623] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 809.699854][ T1623] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:39 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:39 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) [ 809.707810][ T1623] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000008 [ 809.715772][ T1623] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:40 executing program 4 (fault-call:11 fault-nth:9): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:40 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:40 executing program 0: unshare(0x4400060f) 10:43:40 executing program 1: unshare(0x44000610) 10:43:40 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r4, 0x100, 0x70bd2b, 0x48, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xb0}}, 0x800) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x1) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r6, r5, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) 10:43:40 executing program 1: unshare(0x44000611) 10:43:40 executing program 0: unshare(0x44000610) [ 810.430273][ T1655] FAULT_INJECTION: forcing a failure. [ 810.430273][ T1655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.445789][ T1655] CPU: 1 PID: 1655 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 810.457249][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.467295][ T1655] Call Trace: [ 810.470583][ T1655] dump_stack+0x1b0/0x21e [ 810.474906][ T1655] ? devkmsg_release+0x11c/0x11c [ 810.479831][ T1655] ? show_regs_print_info+0x12/0x12 [ 810.485026][ T1655] ? kasan_alloc_pages+0x4a/0x60 [ 810.489952][ T1655] should_fail+0x6fb/0x860 [ 810.494357][ T1655] ? setup_fault_attr+0x2b0/0x2b0 [ 810.499373][ T1655] __alloc_pages_nodemask+0x1ee/0x7c0 [ 810.504777][ T1655] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 810.510319][ T1655] ? find_get_entry+0x5da/0x670 [ 810.515158][ T1655] ? xa_load+0x323/0x340 [ 810.519386][ T1655] __do_page_cache_readahead+0x244/0x510 [ 810.525014][ T1655] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 810.531415][ T1655] ? unwind_next_frame+0x1c07/0x22b0 [ 810.536693][ T1655] ? page_cache_sync_readahead+0xa3/0x3c0 [ 810.542400][ T1655] generic_file_read_iter+0x626/0x20a0 [ 810.547858][ T1655] ? find_get_pages_range_tag+0xae0/0xae0 [ 810.553573][ T1655] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 810.558941][ T1655] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.564997][ T1655] ? avc_denied+0x1c0/0x1c0 [ 810.569493][ T1655] generic_file_splice_read+0x491/0x780 [ 810.575031][ T1655] ? splice_shrink_spd+0xb0/0xb0 [ 810.579961][ T1655] ? security_file_permission+0x1e9/0x300 [ 810.585667][ T1655] ? splice_shrink_spd+0xb0/0xb0 [ 810.590594][ T1655] splice_direct_to_actor+0x3cf/0xb00 [ 810.595956][ T1655] ? do_splice_direct+0x3d0/0x3d0 [ 810.600966][ T1655] ? pipe_to_sendpage+0x300/0x300 [ 810.605981][ T1655] ? security_file_permission+0x128/0x300 [ 810.611686][ T1655] do_splice_direct+0x279/0x3d0 [ 810.616526][ T1655] ? splice_direct_to_actor+0xb00/0xb00 [ 810.622062][ T1655] ? security_file_permission+0x128/0x300 [ 810.627768][ T1655] do_sendfile+0x89d/0x1110 [ 810.632262][ T1655] ? compat_writev+0x390/0x390 [ 810.637011][ T1655] ? security_file_permission+0x128/0x300 [ 810.642717][ T1655] ? vfs_write+0x427/0x4f0 [ 810.647121][ T1655] ? fput_many+0x42/0x1a0 [ 810.651454][ T1655] __x64_sys_sendfile64+0x1ae/0x220 [ 810.656639][ T1655] ? __ia32_sys_sendfile+0x240/0x240 [ 810.661913][ T1655] do_syscall_64+0xcb/0x150 [ 810.666405][ T1655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 810.672283][ T1655] RIP: 0033:0x45de59 [ 810.676171][ T1655] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.695891][ T1655] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 810.704334][ T1655] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 810.712298][ T1655] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 810.720262][ T1655] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:40 executing program 1: unshare(0x44000612) 10:43:40 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000000c0)={0x8000, 0x18, [], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 810.728229][ T1655] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000009 [ 810.736191][ T1655] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:40 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:40 executing program 0: unshare(0x44000611) 10:43:40 executing program 1: unshare(0x44000616) 10:43:41 executing program 0: unshare(0x44000612) 10:43:41 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x10414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:41 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:41 executing program 1: unshare(0x4400062f) 10:43:41 executing program 4 (fault-call:11 fault-nth:10): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 811.379437][ T1687] FAULT_INJECTION: forcing a failure. [ 811.379437][ T1687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.393377][ T1687] CPU: 0 PID: 1687 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 811.404828][ T1687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.414876][ T1687] Call Trace: [ 811.418161][ T1687] dump_stack+0x1b0/0x21e [ 811.422476][ T1687] ? devkmsg_release+0x11c/0x11c [ 811.427403][ T1687] ? show_regs_print_info+0x12/0x12 [ 811.432599][ T1687] ? kasan_alloc_pages+0x4a/0x60 [ 811.437529][ T1687] should_fail+0x6fb/0x860 [ 811.441934][ T1687] ? setup_fault_attr+0x2b0/0x2b0 [ 811.446953][ T1687] __alloc_pages_nodemask+0x1ee/0x7c0 [ 811.452322][ T1687] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 811.457856][ T1687] ? find_get_entry+0x5da/0x670 [ 811.462698][ T1687] ? xa_load+0x323/0x340 [ 811.466936][ T1687] __do_page_cache_readahead+0x244/0x510 [ 811.472562][ T1687] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 811.478970][ T1687] ? unwind_next_frame+0x1c07/0x22b0 [ 811.484244][ T1687] ? page_cache_sync_readahead+0xa3/0x3c0 [ 811.489956][ T1687] generic_file_read_iter+0x626/0x20a0 [ 811.495414][ T1687] ? find_get_pages_range_tag+0xae0/0xae0 [ 811.501121][ T1687] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 811.506486][ T1687] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.512547][ T1687] ? avc_denied+0x1c0/0x1c0 [ 811.517045][ T1687] generic_file_splice_read+0x491/0x780 [ 811.522669][ T1687] ? splice_shrink_spd+0xb0/0xb0 [ 811.527601][ T1687] ? security_file_permission+0x1e9/0x300 [ 811.533314][ T1687] ? splice_shrink_spd+0xb0/0xb0 [ 811.538242][ T1687] splice_direct_to_actor+0x3cf/0xb00 [ 811.543608][ T1687] ? do_splice_direct+0x3d0/0x3d0 [ 811.548622][ T1687] ? pipe_to_sendpage+0x300/0x300 [ 811.553644][ T1687] ? security_file_permission+0x128/0x300 [ 811.559353][ T1687] do_splice_direct+0x279/0x3d0 [ 811.564200][ T1687] ? splice_direct_to_actor+0xb00/0xb00 [ 811.569744][ T1687] ? security_file_permission+0x128/0x300 [ 811.575457][ T1687] do_sendfile+0x89d/0x1110 10:43:41 executing program 0: unshare(0x44000616) [ 811.579957][ T1687] ? compat_writev+0x390/0x390 [ 811.584712][ T1687] ? security_file_permission+0x128/0x300 [ 811.590424][ T1687] ? vfs_write+0x427/0x4f0 [ 811.594839][ T1687] ? fput_many+0x42/0x1a0 [ 811.599170][ T1687] __x64_sys_sendfile64+0x1ae/0x220 [ 811.604368][ T1687] ? __ia32_sys_sendfile+0x240/0x240 [ 811.609645][ T1687] do_syscall_64+0xcb/0x150 [ 811.614142][ T1687] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 811.620021][ T1687] RIP: 0033:0x45de59 [ 811.623910][ T1687] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.643781][ T1687] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 811.652186][ T1687] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 811.660149][ T1687] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 811.668111][ T1687] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:41 executing program 1: unshare(0x44000632) 10:43:41 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) [ 811.676069][ T1687] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000a [ 811.684028][ T1687] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:41 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:41 executing program 0: unshare(0x4400062f) 10:43:41 executing program 1: unshare(0x44000638) 10:43:41 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000080)={0x1, 0xffffffff, 0x0, 0x1, 0x200, 0x80, 0x6, 0x4, 0x101, 0x4ce2, 0x401, 0x5d, 0x8}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:42 executing program 4 (fault-call:11 fault-nth:11): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:42 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:42 executing program 0: unshare(0x44000638) 10:43:42 executing program 1: unshare(0x4400063a) 10:43:42 executing program 2: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x30) lseek(r0, 0x800002, 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2], 0x8a) r3 = socket$inet6(0xa, 0x80000, 0x8) close(r3) r4 = socket(0x1e, 0x3, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x10000, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x1, 0x1}, 0x10) 10:43:42 executing program 1: unshare(0x44000648) [ 812.371914][ T1719] FAULT_INJECTION: forcing a failure. [ 812.371914][ T1719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.385523][ T1719] CPU: 1 PID: 1719 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 812.396978][ T1719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.407035][ T1719] Call Trace: [ 812.410327][ T1719] dump_stack+0x1b0/0x21e [ 812.414649][ T1719] ? devkmsg_release+0x11c/0x11c 10:43:42 executing program 0: unshare(0x4400063a) 10:43:42 executing program 1: unshare(0x4400064a) 10:43:42 executing program 0: unshare(0x44000648) 10:43:42 executing program 1: unshare(0x4400064c) 10:43:42 executing program 0: unshare(0x4400064a) 10:43:42 executing program 1: unshare(0x44000668) [ 812.419597][ T1719] ? show_regs_print_info+0x12/0x12 [ 812.424792][ T1719] ? kasan_alloc_pages+0x4a/0x60 [ 812.429727][ T1719] should_fail+0x6fb/0x860 [ 812.434139][ T1719] ? setup_fault_attr+0x2b0/0x2b0 [ 812.439164][ T1719] __alloc_pages_nodemask+0x1ee/0x7c0 [ 812.444532][ T1719] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 812.450075][ T1719] ? find_get_entry+0x5da/0x670 [ 812.454920][ T1719] ? xa_load+0x323/0x340 [ 812.459160][ T1719] __do_page_cache_readahead+0x244/0x510 [ 812.464794][ T1719] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 812.471204][ T1719] ? unwind_next_frame+0x1c07/0x22b0 [ 812.476477][ T1719] ? page_cache_sync_readahead+0xa3/0x3c0 [ 812.482173][ T1719] generic_file_read_iter+0x626/0x20a0 [ 812.487640][ T1719] ? find_get_pages_range_tag+0xae0/0xae0 [ 812.493332][ T1719] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 812.498673][ T1719] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 812.504714][ T1719] ? avc_denied+0x1c0/0x1c0 [ 812.509190][ T1719] generic_file_splice_read+0x491/0x780 [ 812.514721][ T1719] ? splice_shrink_spd+0xb0/0xb0 [ 812.519650][ T1719] ? security_file_permission+0x1e9/0x300 [ 812.525441][ T1719] ? splice_shrink_spd+0xb0/0xb0 [ 812.530373][ T1719] splice_direct_to_actor+0x3cf/0xb00 [ 812.535718][ T1719] ? do_splice_direct+0x3d0/0x3d0 [ 812.540719][ T1719] ? pipe_to_sendpage+0x300/0x300 [ 812.545717][ T1719] ? security_file_permission+0x128/0x300 [ 812.551421][ T1719] do_splice_direct+0x279/0x3d0 [ 812.556242][ T1719] ? splice_direct_to_actor+0xb00/0xb00 [ 812.561778][ T1719] ? security_file_permission+0x128/0x300 [ 812.567467][ T1719] do_sendfile+0x89d/0x1110 [ 812.571943][ T1719] ? compat_writev+0x390/0x390 [ 812.576681][ T1719] ? security_file_permission+0x128/0x300 [ 812.582377][ T1719] ? vfs_write+0x427/0x4f0 [ 812.586758][ T1719] ? fput_many+0x42/0x1a0 [ 812.591056][ T1719] __x64_sys_sendfile64+0x1ae/0x220 [ 812.596226][ T1719] ? __ia32_sys_sendfile+0x240/0x240 [ 812.601486][ T1719] do_syscall_64+0xcb/0x150 [ 812.605963][ T1719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 812.611832][ T1719] RIP: 0033:0x45de59 [ 812.615701][ T1719] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.635291][ T1719] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 812.643698][ T1719] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 812.651664][ T1719] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 812.659636][ T1719] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 812.667582][ T1719] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000b [ 812.675528][ T1719] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:43 executing program 4 (fault-call:11 fault-nth:12): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:43 executing program 0: unshare(0x4400064c) 10:43:43 executing program 1: unshare(0x4400066c) 10:43:43 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:43 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYRESDEC, @ANYRES32=r0, @ANYRESDEC=0x0], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18) r4 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl(r3, 0x8936, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r4, 0x29, 0x11, &(0x7f0000000300)={0x3f00, {{0xa, 0x0, 0xdd, @empty, 0xffffffff}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r8 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r8, 0x0, 0x200fc0) 10:43:43 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB], 0x12) r1 = socket$inet6(0xa, 0x3, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') ioctl$BLKPG(r3, 0x1269, &(0x7f0000000340)={0xfffff800, 0x4, 0x5c, &(0x7f00000002c0)="4c438025fdfaf6ee3c8510a0f13953110e202cd4ef5e80eb364d33c61f880d4335e49efbf1da24f34f18f64ce53534e6e00b18dc4a11f4963f71f8cac3d87b03365e6428f9c1d55d25fdc764ee9e3c2b2677b9d4958a8dcaf1ef2b19"}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1401006f", @ANYRES16=r6, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4811}, 0x8800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:43 executing program 1: unshare(0x44000674) [ 813.297850][ T1750] FAULT_INJECTION: forcing a failure. [ 813.297850][ T1750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 813.311281][ T1750] CPU: 1 PID: 1750 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 813.322732][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.332899][ T1750] Call Trace: [ 813.336206][ T1750] dump_stack+0x1b0/0x21e [ 813.340550][ T1750] ? devkmsg_release+0x11c/0x11c 10:43:43 executing program 0: unshare(0x44000668) 10:43:43 executing program 1: unshare(0x4400067a) 10:43:43 executing program 0: unshare(0x4400066a) 10:43:43 executing program 1: unshare(0x440006c2) [ 813.346015][ T1750] ? show_regs_print_info+0x12/0x12 [ 813.351212][ T1750] ? kasan_alloc_pages+0x4a/0x60 [ 813.356284][ T1750] should_fail+0x6fb/0x860 [ 813.360699][ T1750] ? setup_fault_attr+0x2b0/0x2b0 [ 813.365720][ T1750] __alloc_pages_nodemask+0x1ee/0x7c0 [ 813.371093][ T1750] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 813.376642][ T1750] ? find_get_entry+0x5da/0x670 [ 813.381495][ T1750] ? xa_load+0x323/0x340 [ 813.385736][ T1750] __do_page_cache_readahead+0x244/0x510 [ 813.391372][ T1750] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 10:43:43 executing program 0: unshare(0x4400066c) [ 813.397783][ T1750] ? unwind_next_frame+0x1c07/0x22b0 [ 813.403099][ T1750] ? page_cache_sync_readahead+0xa3/0x3c0 [ 813.408817][ T1750] generic_file_read_iter+0x626/0x20a0 [ 813.414280][ T1750] ? find_get_pages_range_tag+0xae0/0xae0 [ 813.419990][ T1750] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 813.425358][ T1750] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.431417][ T1750] ? _raw_spin_lock+0xa1/0x170 [ 813.436180][ T1750] generic_file_splice_read+0x491/0x780 [ 813.441723][ T1750] ? splice_shrink_spd+0xb0/0xb0 [ 813.446651][ T1750] ? security_file_permission+0x1e9/0x300 [ 813.452356][ T1750] ? splice_shrink_spd+0xb0/0xb0 [ 813.457291][ T1750] splice_direct_to_actor+0x3cf/0xb00 [ 813.462666][ T1750] ? do_splice_direct+0x3d0/0x3d0 [ 813.467685][ T1750] ? pipe_to_sendpage+0x300/0x300 [ 813.472711][ T1750] ? security_file_permission+0x128/0x300 [ 813.478516][ T1750] do_splice_direct+0x279/0x3d0 [ 813.483368][ T1750] ? splice_direct_to_actor+0xb00/0xb00 [ 813.488918][ T1750] ? security_file_permission+0x128/0x300 [ 813.494636][ T1750] do_sendfile+0x89d/0x1110 [ 813.499152][ T1750] ? compat_writev+0x390/0x390 [ 813.503916][ T1750] ? security_file_permission+0x128/0x300 [ 813.509639][ T1750] ? vfs_write+0x427/0x4f0 [ 813.514060][ T1750] ? fput_many+0x42/0x1a0 [ 813.518388][ T1750] __x64_sys_sendfile64+0x1ae/0x220 [ 813.523607][ T1750] ? __ia32_sys_sendfile+0x240/0x240 [ 813.528890][ T1750] do_syscall_64+0xcb/0x150 [ 813.533390][ T1750] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 813.539273][ T1750] RIP: 0033:0x45de59 [ 813.543160][ T1750] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.562756][ T1750] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 813.571159][ T1750] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 813.579133][ T1750] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 813.587112][ T1750] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 813.595514][ T1750] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000c [ 813.603482][ T1750] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:44 executing program 4 (fault-call:11 fault-nth:13): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:44 executing program 1: unshare(0x440006f0) 10:43:44 executing program 0: unshare(0x44000674) 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) [ 814.323259][ T1784] FAULT_INJECTION: forcing a failure. [ 814.323259][ T1784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 814.348864][ T1784] CPU: 0 PID: 1784 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 814.360531][ T1784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.370583][ T1784] Call Trace: [ 814.373855][ T1784] dump_stack+0x1b0/0x21e [ 814.378173][ T1784] ? devkmsg_release+0x11c/0x11c [ 814.383105][ T1784] ? show_regs_print_info+0x12/0x12 [ 814.388273][ T1784] ? kasan_alloc_pages+0x4a/0x60 [ 814.393185][ T1784] should_fail+0x6fb/0x860 [ 814.397573][ T1784] ? setup_fault_attr+0x2b0/0x2b0 [ 814.402573][ T1784] __alloc_pages_nodemask+0x1ee/0x7c0 [ 814.407924][ T1784] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 814.413445][ T1784] ? find_get_entry+0x5da/0x670 [ 814.418269][ T1784] ? xa_load+0x323/0x340 [ 814.422483][ T1784] __do_page_cache_readahead+0x244/0x510 [ 814.428088][ T1784] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 814.434476][ T1784] ? unwind_next_frame+0x1c07/0x22b0 [ 814.439759][ T1784] ? page_cache_sync_readahead+0xa3/0x3c0 [ 814.445471][ T1784] generic_file_read_iter+0x626/0x20a0 [ 814.450910][ T1784] ? find_get_pages_range_tag+0xae0/0xae0 [ 814.456616][ T1784] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 814.461978][ T1784] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.468018][ T1784] ? avc_denied+0x1c0/0x1c0 [ 814.472496][ T1784] generic_file_splice_read+0x491/0x780 [ 814.478033][ T1784] ? splice_shrink_spd+0xb0/0xb0 [ 814.482961][ T1784] ? security_file_permission+0x1e9/0x300 [ 814.488664][ T1784] ? splice_shrink_spd+0xb0/0xb0 [ 814.493573][ T1784] splice_direct_to_actor+0x3cf/0xb00 [ 814.498917][ T1784] ? do_splice_direct+0x3d0/0x3d0 [ 814.504021][ T1784] ? pipe_to_sendpage+0x300/0x300 [ 814.509017][ T1784] ? security_file_permission+0x128/0x300 [ 814.514705][ T1784] do_splice_direct+0x279/0x3d0 [ 814.519530][ T1784] ? splice_direct_to_actor+0xb00/0xb00 [ 814.525064][ T1784] ? security_file_permission+0x128/0x300 [ 814.530752][ T1784] do_sendfile+0x89d/0x1110 [ 814.535228][ T1784] ? compat_writev+0x390/0x390 [ 814.539963][ T1784] ? security_file_permission+0x128/0x300 [ 814.545667][ T1784] ? vfs_write+0x427/0x4f0 [ 814.550066][ T1784] ? fput_many+0x42/0x1a0 [ 814.554365][ T1784] __x64_sys_sendfile64+0x1ae/0x220 [ 814.559541][ T1784] ? __ia32_sys_sendfile+0x240/0x240 [ 814.564797][ T1784] do_syscall_64+0xcb/0x150 [ 814.569272][ T1784] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 814.575133][ T1784] RIP: 0033:0x45de59 [ 814.578999][ T1784] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.598574][ T1784] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 814.606954][ T1784] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 814.614896][ T1784] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:44 executing program 0: unshare(0x4400067a) [ 814.622836][ T1784] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 814.630778][ T1784] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000d [ 814.638828][ T1784] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:44 executing program 1: unshare(0x440006fc) 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:44 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:44 executing program 1: unshare(0x44000700) 10:43:45 executing program 4 (fault-call:11 fault-nth:14): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:45 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:45 executing program 0: unshare(0x440006da) 10:43:45 executing program 1: unshare(0x44000c00) [ 815.405401][ T1818] FAULT_INJECTION: forcing a failure. [ 815.405401][ T1818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.418669][ T1818] CPU: 0 PID: 1818 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 815.430109][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.440157][ T1818] Call Trace: [ 815.443451][ T1818] dump_stack+0x1b0/0x21e [ 815.447815][ T1818] ? devkmsg_release+0x11c/0x11c [ 815.452752][ T1818] ? show_regs_print_info+0x12/0x12 [ 815.457946][ T1818] ? kasan_alloc_pages+0x4a/0x60 [ 815.462884][ T1818] should_fail+0x6fb/0x860 [ 815.467303][ T1818] ? setup_fault_attr+0x2b0/0x2b0 [ 815.472353][ T1818] __alloc_pages_nodemask+0x1ee/0x7c0 [ 815.477727][ T1818] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 815.483269][ T1818] ? find_get_entry+0x5da/0x670 [ 815.488113][ T1818] ? xa_load+0x323/0x340 [ 815.492346][ T1818] __do_page_cache_readahead+0x244/0x510 [ 815.497975][ T1818] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 815.504384][ T1818] ? unwind_next_frame+0x1c07/0x22b0 [ 815.509661][ T1818] ? page_cache_sync_readahead+0xa3/0x3c0 [ 815.515375][ T1818] generic_file_read_iter+0x626/0x20a0 [ 815.520839][ T1818] ? find_get_pages_range_tag+0xae0/0xae0 [ 815.526562][ T1818] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 815.531939][ T1818] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.538085][ T1818] ? avc_denied+0x1c0/0x1c0 [ 815.542589][ T1818] generic_file_splice_read+0x491/0x780 [ 815.548241][ T1818] ? splice_shrink_spd+0xb0/0xb0 [ 815.553179][ T1818] ? security_file_permission+0x1e9/0x300 [ 815.558892][ T1818] ? splice_shrink_spd+0xb0/0xb0 [ 815.563827][ T1818] splice_direct_to_actor+0x3cf/0xb00 [ 815.569202][ T1818] ? do_splice_direct+0x3d0/0x3d0 [ 815.574220][ T1818] ? pipe_to_sendpage+0x300/0x300 [ 815.579247][ T1818] ? security_file_permission+0x128/0x300 [ 815.584964][ T1818] do_splice_direct+0x279/0x3d0 [ 815.589816][ T1818] ? splice_direct_to_actor+0xb00/0xb00 [ 815.595372][ T1818] ? security_file_permission+0x128/0x300 [ 815.601087][ T1818] do_sendfile+0x89d/0x1110 [ 815.605589][ T1818] ? compat_writev+0x390/0x390 [ 815.610359][ T1818] ? security_file_permission+0x128/0x300 [ 815.616074][ T1818] ? vfs_write+0x427/0x4f0 [ 815.620486][ T1818] ? fput_many+0x42/0x1a0 [ 815.624816][ T1818] __x64_sys_sendfile64+0x1ae/0x220 [ 815.630015][ T1818] ? __ia32_sys_sendfile+0x240/0x240 [ 815.635297][ T1818] do_syscall_64+0xcb/0x150 [ 815.639800][ T1818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 815.645684][ T1818] RIP: 0033:0x45de59 10:43:45 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000001c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x24048040) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:45 executing program 0: unshare(0x440006f0) 10:43:45 executing program 1: unshare(0x44000d00) 10:43:45 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:45 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:45 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:45 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:45 executing program 3: socket(0x25, 0x3, 0x0) [ 815.649574][ T1818] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.669169][ T1818] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 815.677578][ T1818] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 815.685570][ T1818] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 815.693535][ T1818] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 815.701503][ T1818] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000e [ 815.709474][ T1818] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:46 executing program 4 (fault-call:11 fault-nth:15): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:46 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10020) 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:46 executing program 1: unshare(0x44000f00) 10:43:46 executing program 0: unshare(0x440006f4) 10:43:46 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FIONCLEX(r2, 0x5450) close(r1) r3 = socket(0x1e, 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:46 executing program 3: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) [ 816.410403][ T1859] FAULT_INJECTION: forcing a failure. [ 816.410403][ T1859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.427196][ T1859] CPU: 0 PID: 1859 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 816.438656][ T1859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.448703][ T1859] Call Trace: [ 816.451991][ T1859] dump_stack+0x1b0/0x21e 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) [ 816.456309][ T1859] ? devkmsg_release+0x11c/0x11c [ 816.461245][ T1859] ? show_regs_print_info+0x12/0x12 [ 816.466433][ T1859] ? kasan_alloc_pages+0x4a/0x60 [ 816.471360][ T1859] should_fail+0x6fb/0x860 [ 816.475769][ T1859] ? setup_fault_attr+0x2b0/0x2b0 [ 816.480787][ T1859] __alloc_pages_nodemask+0x1ee/0x7c0 [ 816.486154][ T1859] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 816.491688][ T1859] ? find_get_entry+0x5da/0x670 [ 816.496527][ T1859] ? xa_load+0x323/0x340 [ 816.500764][ T1859] __do_page_cache_readahead+0x244/0x510 10:43:46 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) [ 816.506394][ T1859] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 816.512803][ T1859] ? unwind_next_frame+0x1c07/0x22b0 [ 816.518081][ T1859] ? page_cache_sync_readahead+0xa3/0x3c0 [ 816.523793][ T1859] generic_file_read_iter+0x626/0x20a0 [ 816.529256][ T1859] ? find_get_pages_range_tag+0xae0/0xae0 [ 816.534970][ T1859] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 816.540338][ T1859] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 816.546398][ T1859] ? avc_denied+0x1c0/0x1c0 [ 816.550901][ T1859] generic_file_splice_read+0x491/0x780 [ 816.556442][ T1859] ? splice_shrink_spd+0xb0/0xb0 [ 816.561375][ T1859] ? security_file_permission+0x1e9/0x300 [ 816.567085][ T1859] ? splice_shrink_spd+0xb0/0xb0 [ 816.572013][ T1859] splice_direct_to_actor+0x3cf/0xb00 [ 816.577382][ T1859] ? do_splice_direct+0x3d0/0x3d0 [ 816.582399][ T1859] ? pipe_to_sendpage+0x300/0x300 [ 816.587419][ T1859] ? security_file_permission+0x128/0x300 [ 816.593130][ T1859] do_splice_direct+0x279/0x3d0 [ 816.597974][ T1859] ? splice_direct_to_actor+0xb00/0xb00 [ 816.603513][ T1859] ? security_file_permission+0x128/0x300 [ 816.609220][ T1859] do_sendfile+0x89d/0x1110 [ 816.613719][ T1859] ? compat_writev+0x390/0x390 [ 816.618472][ T1859] ? security_file_permission+0x128/0x300 [ 816.624182][ T1859] ? vfs_write+0x427/0x4f0 [ 816.628586][ T1859] ? fput_many+0x42/0x1a0 [ 816.632903][ T1859] __x64_sys_sendfile64+0x1ae/0x220 [ 816.638096][ T1859] ? __ia32_sys_sendfile+0x240/0x240 [ 816.643379][ T1859] do_syscall_64+0xcb/0x150 [ 816.647876][ T1859] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 816.653756][ T1859] RIP: 0033:0x45de59 [ 816.657640][ T1859] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 816.677233][ T1859] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 816.685638][ T1859] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 816.693598][ T1859] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 816.701561][ T1859] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 816.709524][ T1859] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000000f [ 816.717487][ T1859] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:47 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:43:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], 0x2a0}}, 0x200008a4) 10:43:47 executing program 0: unshare(0x440006fa) 10:43:47 executing program 1: unshare(0x44001100) 10:43:47 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x28a900, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) readahead(r4, 0x80000000, 0x615f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000000c0)) time(&(0x7f00000001c0)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:47 executing program 4 (fault-call:11 fault-nth:16): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:47 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:47 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10:43:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa23fe22e) r1 = gettid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 10:43:47 executing program 1: unshare(0x44001200) [ 817.379083][ T1900] FAULT_INJECTION: forcing a failure. [ 817.379083][ T1900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 817.399868][ T1900] CPU: 0 PID: 1900 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 817.411431][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.421488][ T1900] Call Trace: [ 817.424777][ T1900] dump_stack+0x1b0/0x21e [ 817.429111][ T1900] ? devkmsg_release+0x11c/0x11c [ 817.434039][ T1900] ? show_regs_print_info+0x12/0x12 [ 817.439217][ T1900] ? kasan_alloc_pages+0x4a/0x60 [ 817.444148][ T1900] should_fail+0x6fb/0x860 [ 817.448538][ T1900] ? setup_fault_attr+0x2b0/0x2b0 [ 817.453556][ T1900] __alloc_pages_nodemask+0x1ee/0x7c0 [ 817.458903][ T1900] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 817.464435][ T1900] ? find_get_entry+0x5da/0x670 [ 817.469273][ T1900] ? xa_load+0x323/0x340 [ 817.473491][ T1900] __do_page_cache_readahead+0x244/0x510 [ 817.479096][ T1900] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 817.485496][ T1900] ? unwind_next_frame+0x1c07/0x22b0 [ 817.490773][ T1900] ? page_cache_sync_readahead+0xa3/0x3c0 [ 817.496481][ T1900] generic_file_read_iter+0x626/0x20a0 [ 817.501922][ T1900] ? find_get_pages_range_tag+0xae0/0xae0 [ 817.507612][ T1900] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 817.512957][ T1900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 817.519003][ T1900] ? avc_denied+0x1c0/0x1c0 [ 817.523541][ T1900] generic_file_splice_read+0x491/0x780 [ 817.529061][ T1900] ? splice_shrink_spd+0xb0/0xb0 [ 817.533975][ T1900] ? security_file_permission+0x1e9/0x300 [ 817.539666][ T1900] ? splice_shrink_spd+0xb0/0xb0 [ 817.544576][ T1900] splice_direct_to_actor+0x3cf/0xb00 [ 817.549921][ T1900] ? do_splice_direct+0x3d0/0x3d0 [ 817.554917][ T1900] ? pipe_to_sendpage+0x300/0x300 [ 817.559915][ T1900] ? security_file_permission+0x128/0x300 [ 817.565609][ T1900] do_splice_direct+0x279/0x3d0 [ 817.570434][ T1900] ? splice_direct_to_actor+0xb00/0xb00 [ 817.575961][ T1900] ? security_file_permission+0x128/0x300 [ 817.581657][ T1900] do_sendfile+0x89d/0x1110 [ 817.586412][ T1900] ? compat_writev+0x390/0x390 [ 817.591147][ T1900] ? security_file_permission+0x128/0x300 [ 817.596841][ T1900] ? vfs_write+0x427/0x4f0 [ 817.601230][ T1900] ? fput_many+0x42/0x1a0 [ 817.605533][ T1900] __x64_sys_sendfile64+0x1ae/0x220 [ 817.610705][ T1900] ? __ia32_sys_sendfile+0x240/0x240 [ 817.615962][ T1900] do_syscall_64+0xcb/0x150 [ 817.620438][ T1900] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 817.626568][ T1900] RIP: 0033:0x45de59 [ 817.630437][ T1900] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.650016][ T1900] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.658403][ T1900] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 817.666365][ T1900] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:47 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r2, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x46}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x136}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:47 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) [ 817.674315][ T1900] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 817.682257][ T1900] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000010 [ 817.690237][ T1900] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:48 executing program 4 (fault-call:11 fault-nth:17): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:48 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:48 executing program 0: unshare(0x440006fc) 10:43:48 executing program 1: unshare(0x44001400) 10:43:48 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000030}, 0x20000000) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa23fe22e) r1 = gettid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 10:43:48 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:48 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) [ 818.454640][ T1936] FAULT_INJECTION: forcing a failure. [ 818.454640][ T1936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 818.480995][ T1936] CPU: 0 PID: 1936 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 818.492469][ T1936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.502516][ T1936] Call Trace: [ 818.505789][ T1936] dump_stack+0x1b0/0x21e [ 818.510108][ T1936] ? devkmsg_release+0x11c/0x11c [ 818.515018][ T1936] ? show_regs_print_info+0x12/0x12 [ 818.520186][ T1936] ? kasan_alloc_pages+0x4a/0x60 [ 818.525110][ T1936] should_fail+0x6fb/0x860 [ 818.529511][ T1936] ? setup_fault_attr+0x2b0/0x2b0 [ 818.534506][ T1936] __alloc_pages_nodemask+0x1ee/0x7c0 [ 818.539859][ T1936] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 818.545387][ T1936] ? find_get_entry+0x5da/0x670 [ 818.550210][ T1936] ? xa_load+0x323/0x340 [ 818.554437][ T1936] __do_page_cache_readahead+0x244/0x510 [ 818.560053][ T1936] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 818.566435][ T1936] ? unwind_next_frame+0x1c07/0x22b0 [ 818.571691][ T1936] ? page_cache_sync_readahead+0xa3/0x3c0 [ 818.577390][ T1936] generic_file_read_iter+0x626/0x20a0 [ 818.582828][ T1936] ? find_get_pages_range_tag+0xae0/0xae0 [ 818.588516][ T1936] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 818.593877][ T1936] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.599912][ T1936] ? avc_denied+0x1c0/0x1c0 [ 818.604392][ T1936] generic_file_splice_read+0x491/0x780 [ 818.609906][ T1936] ? splice_shrink_spd+0xb0/0xb0 [ 818.614824][ T1936] ? security_file_permission+0x1e9/0x300 [ 818.620512][ T1936] ? splice_shrink_spd+0xb0/0xb0 [ 818.625420][ T1936] splice_direct_to_actor+0x3cf/0xb00 [ 818.630772][ T1936] ? do_splice_direct+0x3d0/0x3d0 [ 818.635764][ T1936] ? pipe_to_sendpage+0x300/0x300 [ 818.640755][ T1936] ? security_file_permission+0x128/0x300 [ 818.646442][ T1936] do_splice_direct+0x279/0x3d0 [ 818.651280][ T1936] ? splice_direct_to_actor+0xb00/0xb00 [ 818.656806][ T1936] ? security_file_permission+0x128/0x300 [ 818.662501][ T1936] do_sendfile+0x89d/0x1110 [ 818.666976][ T1936] ? compat_writev+0x390/0x390 [ 818.671720][ T1936] ? security_file_permission+0x128/0x300 [ 818.677408][ T1936] ? vfs_write+0x427/0x4f0 [ 818.681806][ T1936] ? fput_many+0x42/0x1a0 [ 818.686104][ T1936] __x64_sys_sendfile64+0x1ae/0x220 [ 818.691271][ T1936] ? __ia32_sys_sendfile+0x240/0x240 [ 818.696525][ T1936] do_syscall_64+0xcb/0x150 [ 818.700997][ T1936] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 818.706857][ T1936] RIP: 0033:0x45de59 [ 818.710732][ T1936] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.730318][ T1936] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 818.738697][ T1936] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 818.746641][ T1936] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:48 executing program 1: unshare(0x44001600) 10:43:48 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:48 executing program 0: unshare(0x44000700) [ 818.754580][ T1936] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 818.763213][ T1936] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000011 [ 818.771155][ T1936] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:48 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:49 executing program 4 (fault-call:11 fault-nth:18): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:49 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="10002cbd24864537df254682d7cb5c00ec007063690011000200303030303a30303a31302e300000000008008e00010000000c008f003f000000000000000c0090000500000000000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f00000000ff000000000c00900009000000000000004063a53c3232939f368432eb4ce057210c6f921036c8dc32b5d6142a95f6fca6805fb0db436faa452e8b9f7125bb4070bb16a6c59baa9fcdee2c36268b80f8660afd343d064babfc297c37bf4e7adb2dc0371e1c48415c6ff1574d58f3c0ed5054421eead858d354ae892318c7878303768a27dab489081dff1c6d6d84a86ba9e22e1b88e3a0041cbc0563e144a8cbf0b69ffd32dae4adf8783d38b001274ff9725e383b41d9d7fc187f9328b68d4552e577f6cc802c60354c8bb9c99be677f856147e8be27c45e901d473e7a2ba06c692c0fffffffffffff98d5c8566cec5bc9ee236d7b7be6ff8ea576516843ac6174e87fc72a7d1e1ea94e7aff7436ed25e169919fd2f14ccc30053e8a652135f3b8b6240fbe8a45edcc6118d522e28446b51f1b72b836009ccf5e07dc899191c8d0353bb7ff02982658ec7549dbee677654a01e5275d2b0a17ed"], 0x8c}, 0x1, 0x0, 0x0, 0x4040801}, 0x40055) fcntl$getown(r1, 0x9) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x24, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x5, 0x5, './bus', './bus'}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000200)={0x1ff, 0x5}) 10:43:49 executing program 1: unshare(0x44001800) 10:43:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:49 executing program 0: unshare(0x44000a00) 10:43:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa23fe22e) r1 = gettid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 10:43:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) [ 819.471167][ T1980] FAULT_INJECTION: forcing a failure. [ 819.471167][ T1980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.489738][ T1980] CPU: 0 PID: 1980 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 819.501199][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.511257][ T1980] Call Trace: [ 819.514539][ T1980] dump_stack+0x1b0/0x21e [ 819.518856][ T1980] ? devkmsg_release+0x11c/0x11c [ 819.523788][ T1980] ? show_regs_print_info+0x12/0x12 [ 819.528976][ T1980] ? kasan_alloc_pages+0x4a/0x60 [ 819.533899][ T1980] should_fail+0x6fb/0x860 [ 819.538303][ T1980] ? setup_fault_attr+0x2b0/0x2b0 [ 819.543321][ T1980] __alloc_pages_nodemask+0x1ee/0x7c0 [ 819.548684][ T1980] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 819.554227][ T1980] ? find_get_entry+0x5da/0x670 [ 819.559064][ T1980] ? xa_load+0x323/0x340 [ 819.563299][ T1980] __do_page_cache_readahead+0x244/0x510 [ 819.568926][ T1980] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 819.575326][ T1980] ? unwind_next_frame+0x1c07/0x22b0 [ 819.580600][ T1980] ? page_cache_sync_readahead+0xa3/0x3c0 [ 819.586307][ T1980] generic_file_read_iter+0x626/0x20a0 [ 819.591760][ T1980] ? find_get_pages_range_tag+0xae0/0xae0 [ 819.597467][ T1980] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 819.602825][ T1980] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 819.608881][ T1980] ? avc_denied+0x1c0/0x1c0 [ 819.613376][ T1980] generic_file_splice_read+0x491/0x780 [ 819.618909][ T1980] ? splice_shrink_spd+0xb0/0xb0 [ 819.623840][ T1980] ? security_file_permission+0x1e9/0x300 [ 819.629543][ T1980] ? splice_shrink_spd+0xb0/0xb0 [ 819.634469][ T1980] splice_direct_to_actor+0x3cf/0xb00 [ 819.639830][ T1980] ? do_splice_direct+0x3d0/0x3d0 [ 819.644841][ T1980] ? pipe_to_sendpage+0x300/0x300 [ 819.649856][ T1980] ? security_file_permission+0x128/0x300 [ 819.655559][ T1980] do_splice_direct+0x279/0x3d0 [ 819.660430][ T1980] ? splice_direct_to_actor+0xb00/0xb00 [ 819.665969][ T1980] ? security_file_permission+0x128/0x300 [ 819.671675][ T1980] do_sendfile+0x89d/0x1110 [ 819.676170][ T1980] ? compat_writev+0x390/0x390 [ 819.680921][ T1980] ? security_file_permission+0x128/0x300 [ 819.686633][ T1980] ? vfs_write+0x427/0x4f0 [ 819.691034][ T1980] ? fput_many+0x42/0x1a0 [ 819.695353][ T1980] __x64_sys_sendfile64+0x1ae/0x220 [ 819.700538][ T1980] ? __ia32_sys_sendfile+0x240/0x240 [ 819.705810][ T1980] do_syscall_64+0xcb/0x150 [ 819.710315][ T1980] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 819.716191][ T1980] RIP: 0033:0x45de59 [ 819.720068][ T1980] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 819.739666][ T1980] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 819.748071][ T1980] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 819.756033][ T1980] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 819.763994][ T1980] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 819.771951][ T1980] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000012 [ 819.779915][ T1980] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa23fe22e) r1 = gettid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) timer_create(0x0, &(0x7f0000000540)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 10:43:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:50 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:50 executing program 4 (fault-call:11 fault-nth:19): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:50 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:50 executing program 0: unshare(0x44000c00) 10:43:50 executing program 1: unshare(0x44001c01) 10:43:50 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x26, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) 10:43:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000004c0), 0x4) 10:43:50 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7001f1", 0x20, 0x3a, 0x0, @private0, @mcast2, {[@hopopts], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) 10:43:50 executing program 1: unshare(0x44001f00) 10:43:50 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:50 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) [ 820.514024][ T2027] FAULT_INJECTION: forcing a failure. [ 820.514024][ T2027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.536138][ T2027] CPU: 0 PID: 2027 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 820.547604][ T2027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.557651][ T2027] Call Trace: [ 820.560944][ T2027] dump_stack+0x1b0/0x21e [ 820.565260][ T2027] ? devkmsg_release+0x11c/0x11c [ 820.570170][ T2027] ? show_regs_print_info+0x12/0x12 [ 820.575337][ T2027] ? kasan_alloc_pages+0x4a/0x60 [ 820.580245][ T2027] should_fail+0x6fb/0x860 [ 820.584632][ T2027] ? setup_fault_attr+0x2b0/0x2b0 [ 820.589652][ T2027] __alloc_pages_nodemask+0x1ee/0x7c0 [ 820.595001][ T2027] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 820.600526][ T2027] ? find_get_entry+0x5da/0x670 [ 820.605353][ T2027] ? xa_load+0x323/0x340 [ 820.609566][ T2027] __do_page_cache_readahead+0x244/0x510 [ 820.615170][ T2027] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 820.622512][ T2027] ? unwind_next_frame+0x1c07/0x22b0 [ 820.628374][ T2027] ? page_cache_sync_readahead+0xa3/0x3c0 [ 820.634152][ T2027] generic_file_read_iter+0x626/0x20a0 [ 820.639587][ T2027] ? find_get_pages_range_tag+0xae0/0xae0 [ 820.645288][ T2027] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 820.650631][ T2027] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.656681][ T2027] ? avc_denied+0x1c0/0x1c0 [ 820.661158][ T2027] generic_file_splice_read+0x491/0x780 [ 820.666675][ T2027] ? splice_shrink_spd+0xb0/0xb0 [ 820.671585][ T2027] ? security_file_permission+0x1e9/0x300 [ 820.677272][ T2027] ? splice_shrink_spd+0xb0/0xb0 [ 820.682181][ T2027] splice_direct_to_actor+0x3cf/0xb00 [ 820.687536][ T2027] ? do_splice_direct+0x3d0/0x3d0 [ 820.692530][ T2027] ? pipe_to_sendpage+0x300/0x300 [ 820.699959][ T2027] ? security_file_permission+0x128/0x300 [ 820.705646][ T2027] do_splice_direct+0x279/0x3d0 [ 820.710469][ T2027] ? splice_direct_to_actor+0xb00/0xb00 [ 820.715986][ T2027] ? security_file_permission+0x128/0x300 [ 820.721683][ T2027] do_sendfile+0x89d/0x1110 [ 820.726166][ T2027] ? compat_writev+0x390/0x390 [ 820.730896][ T2027] ? security_file_permission+0x128/0x300 [ 820.736601][ T2027] ? vfs_write+0x427/0x4f0 [ 820.740987][ T2027] ? fput_many+0x42/0x1a0 [ 820.745287][ T2027] __x64_sys_sendfile64+0x1ae/0x220 [ 820.750456][ T2027] ? __ia32_sys_sendfile+0x240/0x240 [ 820.755713][ T2027] do_syscall_64+0xcb/0x150 [ 820.760187][ T2027] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.766049][ T2027] RIP: 0033:0x45de59 [ 820.769924][ T2027] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.789508][ T2027] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 820.797893][ T2027] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 820.805837][ T2027] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:50 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={0x0}}, 0x0) [ 820.813779][ T2027] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 820.821731][ T2027] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000013 [ 820.829691][ T2027] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:51 executing program 4 (fault-call:11 fault-nth:20): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20040005, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xffff}, 0x80) 10:43:51 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:43:51 executing program 0: unshare(0x44000d00) 10:43:51 executing program 1: unshare(0x44002000) 10:43:51 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000000c0)=0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000080)) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000100)=""/125, 0x7d) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:51 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x12, 0x319}, 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 10:43:51 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x28040, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80241, 0x0) [ 821.610413][ T2058] FAULT_INJECTION: forcing a failure. [ 821.610413][ T2058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 821.639492][ T2058] CPU: 0 PID: 2058 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 821.650978][ T2058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.661008][ T2058] Call Trace: [ 821.664275][ T2058] dump_stack+0x1b0/0x21e [ 821.668574][ T2058] ? devkmsg_release+0x11c/0x11c [ 821.673485][ T2058] ? show_regs_print_info+0x12/0x12 [ 821.678663][ T2058] ? kasan_alloc_pages+0x4a/0x60 [ 821.683570][ T2058] should_fail+0x6fb/0x860 [ 821.687956][ T2058] ? setup_fault_attr+0x2b0/0x2b0 [ 821.692965][ T2058] __alloc_pages_nodemask+0x1ee/0x7c0 [ 821.698333][ T2058] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 821.703877][ T2058] ? find_get_entry+0x5da/0x670 [ 821.708703][ T2058] ? xa_load+0x323/0x340 [ 821.712931][ T2058] __do_page_cache_readahead+0x244/0x510 [ 821.718548][ T2058] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 821.724944][ T2058] ? unwind_next_frame+0x1c07/0x22b0 [ 821.730200][ T2058] ? page_cache_sync_readahead+0xa3/0x3c0 [ 821.735889][ T2058] generic_file_read_iter+0x626/0x20a0 [ 821.741349][ T2058] ? find_get_pages_range_tag+0xae0/0xae0 [ 821.747046][ T2058] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 821.752749][ T2058] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.758784][ T2058] ? avc_denied+0x1c0/0x1c0 [ 821.763259][ T2058] generic_file_splice_read+0x491/0x780 [ 821.768784][ T2058] ? splice_shrink_spd+0xb0/0xb0 [ 821.773695][ T2058] ? security_file_permission+0x1e9/0x300 [ 821.779382][ T2058] ? splice_shrink_spd+0xb0/0xb0 [ 821.784299][ T2058] splice_direct_to_actor+0x3cf/0xb00 [ 821.789641][ T2058] ? do_splice_direct+0x3d0/0x3d0 [ 821.794633][ T2058] ? pipe_to_sendpage+0x300/0x300 [ 821.799626][ T2058] ? security_file_permission+0x128/0x300 [ 821.805312][ T2058] do_splice_direct+0x279/0x3d0 [ 821.810135][ T2058] ? splice_direct_to_actor+0xb00/0xb00 [ 821.815650][ T2058] ? security_file_permission+0x128/0x300 [ 821.821339][ T2058] do_sendfile+0x89d/0x1110 [ 821.825817][ T2058] ? compat_writev+0x390/0x390 [ 821.830552][ T2058] ? security_file_permission+0x128/0x300 [ 821.836238][ T2058] ? vfs_write+0x427/0x4f0 [ 821.840620][ T2058] ? fput_many+0x42/0x1a0 [ 821.844930][ T2058] __x64_sys_sendfile64+0x1ae/0x220 [ 821.850109][ T2058] ? __ia32_sys_sendfile+0x240/0x240 [ 821.855375][ T2058] do_syscall_64+0xcb/0x150 [ 821.859861][ T2058] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.865723][ T2058] RIP: 0033:0x45de59 [ 821.869601][ T2058] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.889188][ T2058] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 821.897578][ T2058] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 10:43:52 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 10:43:52 executing program 1: unshare(0x44002100) 10:43:52 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000120019"], 0x4c}}, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001a40), 0x9, 0x0, 0x37}}], 0x1, 0x0, 0x0) [ 821.905530][ T2058] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 821.913496][ T2058] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 821.921448][ T2058] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000014 [ 821.929389][ T2058] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:52 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2a0c2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'memory'}]}, 0x8) 10:43:52 executing program 4 (fault-call:11 fault-nth:21): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:52 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000280)={@empty, @link_local, @void, {@ipv4={0x800, @gre={{0x17, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev, {[@ssrr={0x89, 0x3}, @rr={0x7, 0x7, 0x0, [@dev]}, @rr={0x7, 0x17, 0x0, [@remote, @broadcast, @rand_addr, @multicast2, @broadcast]}, @lsrr={0x83, 0x23, 0x0, [@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @broadcast, @broadcast, @broadcast, @broadcast]}, @generic={0x0, 0x2}]}}}}}}, 0x0) 10:43:52 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:43:52 executing program 0: unshare(0x44000f00) 10:43:52 executing program 1: unshare(0x44002200) 10:43:52 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x442, 0x40) r6 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\n', @ANYRES16, @ANYBLOB="05020000000000010000050000000800030028f965a0f240b67098964a614af3d0f1c762b473d87c0ed24488974c1caf35a5b239479401003d0a42c3a449ea38f4dbaa1f823101b91f9e650b7d3c025bdb1c7edaa6c14e441de379cd15e5ef897fdaf1d7660e58ea81b6cba498dd149cc5b0f264ccd3dd14a24ca35719dd3c702399ddeb67aea755f94a366f782480f7537330b016087cc87ea8eb2118e8", @ANYRES32=0x0, @ANYBLOB="98ebc17462d2411d4469e8ceed8593f8d320a7b3de0817ed58705849caa1b2b86de317f400"/52], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000001c0)='vxcan1\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0d00002ed420d0832b1ca443b33b83179b98b99ccd924438ebc7de563362d4d64653dde4a5add9bd43c7704c94d322", @ANYRES16=r6, @ANYBLOB="020026bd7000fcdbdf250600000008000b0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004890}, 0x2000c850) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:52 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="6801000015005b"], 0x168}}, 0x0) 10:43:52 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="6801000015005b"], 0x168}}, 0x0) 10:43:52 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) [ 822.687604][ T2095] FAULT_INJECTION: forcing a failure. [ 822.687604][ T2095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.707817][ T2095] CPU: 0 PID: 2095 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 822.719286][ T2095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.729336][ T2095] Call Trace: [ 822.732628][ T2095] dump_stack+0x1b0/0x21e [ 822.736951][ T2095] ? devkmsg_release+0x11c/0x11c [ 822.741880][ T2095] ? show_regs_print_info+0x12/0x12 [ 822.747052][ T2095] ? kasan_alloc_pages+0x4a/0x60 [ 822.751966][ T2095] should_fail+0x6fb/0x860 [ 822.756537][ T2095] ? setup_fault_attr+0x2b0/0x2b0 [ 822.761539][ T2095] __alloc_pages_nodemask+0x1ee/0x7c0 [ 822.766882][ T2095] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 822.772585][ T2095] ? find_get_entry+0x5da/0x670 [ 822.777408][ T2095] ? xa_load+0x323/0x340 [ 822.781621][ T2095] __do_page_cache_readahead+0x244/0x510 [ 822.787249][ T2095] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 822.793633][ T2095] ? unwind_next_frame+0x1c07/0x22b0 [ 822.798889][ T2095] ? page_cache_sync_readahead+0xa3/0x3c0 [ 822.804577][ T2095] generic_file_read_iter+0x626/0x20a0 [ 822.810023][ T2095] ? find_get_pages_range_tag+0xae0/0xae0 [ 822.815719][ T2095] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 822.821062][ T2095] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.827109][ T2095] ? avc_denied+0x1c0/0x1c0 [ 822.831607][ T2095] generic_file_splice_read+0x491/0x780 [ 822.837298][ T2095] ? splice_shrink_spd+0xb0/0xb0 [ 822.842206][ T2095] ? security_file_permission+0x1e9/0x300 [ 822.847903][ T2095] ? splice_shrink_spd+0xb0/0xb0 [ 822.852821][ T2095] splice_direct_to_actor+0x3cf/0xb00 [ 822.858182][ T2095] ? do_splice_direct+0x3d0/0x3d0 [ 822.863186][ T2095] ? pipe_to_sendpage+0x300/0x300 [ 822.868187][ T2095] ? security_file_permission+0x128/0x300 [ 822.875359][ T2095] do_splice_direct+0x279/0x3d0 [ 822.880186][ T2095] ? splice_direct_to_actor+0xb00/0xb00 [ 822.885716][ T2095] ? security_file_permission+0x128/0x300 [ 822.891415][ T2095] do_sendfile+0x89d/0x1110 [ 822.895892][ T2095] ? compat_writev+0x390/0x390 [ 822.900626][ T2095] ? security_file_permission+0x128/0x300 [ 822.906314][ T2095] ? vfs_write+0x427/0x4f0 [ 822.910708][ T2095] ? fput_many+0x42/0x1a0 [ 822.915879][ T2095] __x64_sys_sendfile64+0x1ae/0x220 [ 822.921065][ T2095] ? __ia32_sys_sendfile+0x240/0x240 [ 822.926322][ T2095] do_syscall_64+0xcb/0x150 [ 822.930798][ T2095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.936659][ T2095] RIP: 0033:0x45de59 [ 822.940525][ T2095] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.960115][ T2095] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 822.968494][ T2095] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 822.976443][ T2095] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20040005, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80) 10:43:53 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) [ 822.984383][ T2095] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 822.992322][ T2095] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000015 [ 823.000269][ T2095] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000040), 0x4a, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) 10:43:53 executing program 4 (fault-call:11 fault-nth:22): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:53 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:43:53 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, 0x0}}, {{&(0x7f0000000580)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x2, 0x0) 10:43:53 executing program 0: unshare(0x44001100) 10:43:53 executing program 1: unshare(0x44002700) 10:43:53 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0xa, 0x20, 0x8, 0x34, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x10, 0x8, 0xe2}}) 10:43:53 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000200)=""/4096, &(0x7f0000000000)=0x1000) 10:43:53 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 823.749341][ T2134] FAULT_INJECTION: forcing a failure. [ 823.749341][ T2134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.773938][ T2134] CPU: 1 PID: 2134 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 823.785406][ T2134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.795459][ T2134] Call Trace: [ 823.798759][ T2134] dump_stack+0x1b0/0x21e [ 823.803090][ T2134] ? devkmsg_release+0x11c/0x11c [ 823.808025][ T2134] ? show_regs_print_info+0x12/0x12 [ 823.813211][ T2134] ? kasan_alloc_pages+0x4a/0x60 [ 823.818141][ T2134] should_fail+0x6fb/0x860 [ 823.822555][ T2134] ? setup_fault_attr+0x2b0/0x2b0 [ 823.827578][ T2134] __alloc_pages_nodemask+0x1ee/0x7c0 [ 823.832946][ T2134] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 823.838499][ T2134] ? find_get_entry+0x5da/0x670 [ 823.843353][ T2134] ? xa_load+0x323/0x340 [ 823.847588][ T2134] __do_page_cache_readahead+0x244/0x510 [ 823.853214][ T2134] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 823.859621][ T2134] ? unwind_next_frame+0x1c07/0x22b0 [ 823.864898][ T2134] ? page_cache_sync_readahead+0xa3/0x3c0 [ 823.870611][ T2134] generic_file_read_iter+0x626/0x20a0 [ 823.876068][ T2134] ? find_get_pages_range_tag+0xae0/0xae0 [ 823.881778][ T2134] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 823.887144][ T2134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.893203][ T2134] ? _raw_spin_lock+0xa1/0x170 [ 823.897970][ T2134] generic_file_splice_read+0x491/0x780 [ 823.903509][ T2134] ? splice_shrink_spd+0xb0/0xb0 [ 823.908449][ T2134] ? security_file_permission+0x1e9/0x300 [ 823.914161][ T2134] ? splice_shrink_spd+0xb0/0xb0 [ 823.919129][ T2134] splice_direct_to_actor+0x3cf/0xb00 [ 823.924498][ T2134] ? do_splice_direct+0x3d0/0x3d0 [ 823.929506][ T2134] ? pipe_to_sendpage+0x300/0x300 [ 823.934524][ T2134] ? security_file_permission+0x128/0x300 [ 823.940270][ T2134] do_splice_direct+0x279/0x3d0 [ 823.945122][ T2134] ? splice_direct_to_actor+0xb00/0xb00 [ 823.950689][ T2134] ? security_file_permission+0x128/0x300 [ 823.956402][ T2134] do_sendfile+0x89d/0x1110 [ 823.960916][ T2134] ? compat_writev+0x390/0x390 [ 823.965678][ T2134] ? security_file_permission+0x128/0x300 [ 823.971491][ T2134] ? vfs_write+0x427/0x4f0 [ 823.975916][ T2134] ? fput_many+0x42/0x1a0 [ 823.980257][ T2134] __x64_sys_sendfile64+0x1ae/0x220 [ 823.985452][ T2134] ? __ia32_sys_sendfile+0x240/0x240 [ 823.990819][ T2134] do_syscall_64+0xcb/0x150 [ 823.995311][ T2134] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.001192][ T2134] RIP: 0033:0x45de59 [ 824.005080][ T2134] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.024705][ T2134] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 824.033116][ T2134] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 824.041602][ T2134] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:54 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:54 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:43:54 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@empty, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb6ea", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 824.050266][ T2134] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 824.058230][ T2134] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000016 [ 824.066210][ T2134] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:54 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x2a0c2, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 10:43:54 executing program 4 (fault-call:11 fault-nth:23): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:54 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:43:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000040), 0x4a, 0x0) pselect6(0x28, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x9}, 0x0, 0x0) 10:43:54 executing program 0: unshare(0x44001200) 10:43:54 executing program 1: unshare(0x44003800) 10:43:54 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r5}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000780)={{r5}, "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"}) 10:43:54 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:43:54 executing program 1: unshare(0x44003a00) 10:43:54 executing program 0: unshare(0x44001400) [ 824.794711][ T2169] FAULT_INJECTION: forcing a failure. [ 824.794711][ T2169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.813917][ T2169] CPU: 0 PID: 2169 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 824.825376][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.835423][ T2169] Call Trace: [ 824.838714][ T2169] dump_stack+0x1b0/0x21e [ 824.843033][ T2169] ? devkmsg_release+0x11c/0x11c [ 824.847948][ T2169] ? show_regs_print_info+0x12/0x12 [ 824.853121][ T2169] ? kasan_alloc_pages+0x4a/0x60 [ 824.858030][ T2169] should_fail+0x6fb/0x860 [ 824.862417][ T2169] ? setup_fault_attr+0x2b0/0x2b0 [ 824.867428][ T2169] __alloc_pages_nodemask+0x1ee/0x7c0 [ 824.872773][ T2169] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 824.878290][ T2169] ? xa_load+0x323/0x340 [ 824.882510][ T2169] __do_page_cache_readahead+0x244/0x510 [ 824.888731][ T2169] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 824.895116][ T2169] ? unwind_next_frame+0x1c07/0x22b0 [ 824.900382][ T2169] ? page_cache_sync_readahead+0xa3/0x3c0 [ 824.906069][ T2169] generic_file_read_iter+0x626/0x20a0 [ 824.911503][ T2169] ? find_get_pages_range_tag+0xae0/0xae0 [ 824.917192][ T2169] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 824.922542][ T2169] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.928580][ T2169] ? avc_denied+0x1c0/0x1c0 [ 824.933069][ T2169] generic_file_splice_read+0x491/0x780 [ 824.938584][ T2169] ? splice_shrink_spd+0xb0/0xb0 [ 824.943504][ T2169] ? security_file_permission+0x1e9/0x300 [ 824.949191][ T2169] ? splice_shrink_spd+0xb0/0xb0 [ 824.954094][ T2169] splice_direct_to_actor+0x3cf/0xb00 [ 824.959438][ T2169] ? do_splice_direct+0x3d0/0x3d0 [ 824.964441][ T2169] ? pipe_to_sendpage+0x300/0x300 [ 824.969446][ T2169] ? security_file_permission+0x128/0x300 [ 824.975143][ T2169] do_splice_direct+0x279/0x3d0 [ 824.979971][ T2169] ? splice_direct_to_actor+0xb00/0xb00 [ 824.985486][ T2169] ? security_file_permission+0x128/0x300 [ 824.991172][ T2169] do_sendfile+0x89d/0x1110 [ 824.995646][ T2169] ? compat_writev+0x390/0x390 [ 825.000381][ T2169] ? security_file_permission+0x128/0x300 [ 825.006081][ T2169] ? vfs_write+0x427/0x4f0 [ 825.010464][ T2169] ? fput_many+0x42/0x1a0 [ 825.014773][ T2169] __x64_sys_sendfile64+0x1ae/0x220 [ 825.019940][ T2169] ? __ia32_sys_sendfile+0x240/0x240 [ 825.025194][ T2169] do_syscall_64+0xcb/0x150 [ 825.029665][ T2169] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 825.035541][ T2169] RIP: 0033:0x45de59 [ 825.039405][ T2169] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 825.058978][ T2169] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 825.067357][ T2169] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 825.075311][ T2169] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 825.083264][ T2169] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:55 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) [ 825.091206][ T2169] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000017 [ 825.099165][ T2169] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:55 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) 10:43:55 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:43:55 executing program 4 (fault-call:11 fault-nth:24): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:55 executing program 1: unshare(0x44004000) 10:43:55 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:43:55 executing program 0: unshare(0x44001600) 10:43:55 executing program 2: perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0x1, {0x8, 0xffffffffffff0001, 0x37c, 0x200000000, 0x401}}) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup2(r3, r4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0x108, 0x230, 0x0, 0x230, 0x0, 0x318, 0x300, 0x300, 0x300, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @local, [], [], 'veth0_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x203590, 0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:43:55 executing program 1: unshare(0x44004a00) [ 825.815418][ T2205] x_tables: duplicate underflow at hook 2 [ 825.825109][ T2209] FAULT_INJECTION: forcing a failure. [ 825.825109][ T2209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.839437][ T2209] CPU: 1 PID: 2209 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 825.850890][ T2209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.860940][ T2209] Call Trace: [ 825.864225][ T2209] dump_stack+0x1b0/0x21e [ 825.868550][ T2209] ? devkmsg_release+0x11c/0x11c [ 825.873489][ T2209] ? show_regs_print_info+0x12/0x12 [ 825.878784][ T2209] ? kasan_alloc_pages+0x4a/0x60 [ 825.883740][ T2209] should_fail+0x6fb/0x860 [ 825.888148][ T2209] ? setup_fault_attr+0x2b0/0x2b0 [ 825.893166][ T2209] __alloc_pages_nodemask+0x1ee/0x7c0 [ 825.898534][ T2209] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 825.904070][ T2209] ? find_get_entry+0x5da/0x670 [ 825.908908][ T2209] ? xa_load+0x323/0x340 10:43:55 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) r4 = signalfd4(r3, &(0x7f0000000080)={[0x9]}, 0x8, 0x81000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r5}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r4, r5, 0x1b, 0x4, r0}, 0x14) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r6 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) rt_sigpending(&(0x7f0000000100), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:55 executing program 0: unshare(0x44001800) 10:43:56 executing program 1: unshare(0x44005200) 10:43:56 executing program 0: unshare(0x44001f00) 10:43:56 executing program 1: unshare(0x44006400) [ 825.913149][ T2209] __do_page_cache_readahead+0x244/0x510 [ 825.918775][ T2209] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 825.925179][ T2209] ? unwind_next_frame+0x1c07/0x22b0 [ 825.930600][ T2209] ? page_cache_sync_readahead+0xa3/0x3c0 [ 825.936311][ T2209] generic_file_read_iter+0x626/0x20a0 [ 825.941773][ T2209] ? find_get_pages_range_tag+0xae0/0xae0 [ 825.947485][ T2209] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 825.952848][ T2209] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 825.958908][ T2209] ? avc_denied+0x1c0/0x1c0 [ 825.963407][ T2209] generic_file_splice_read+0x491/0x780 [ 825.968945][ T2209] ? splice_shrink_spd+0xb0/0xb0 [ 825.973883][ T2209] ? security_file_permission+0x1e9/0x300 [ 825.979601][ T2209] ? splice_shrink_spd+0xb0/0xb0 [ 825.991131][ T2209] splice_direct_to_actor+0x3cf/0xb00 [ 825.996511][ T2209] ? do_splice_direct+0x3d0/0x3d0 [ 826.001518][ T2209] ? pipe_to_sendpage+0x300/0x300 [ 826.006518][ T2209] ? security_file_permission+0x128/0x300 [ 826.012204][ T2209] do_splice_direct+0x279/0x3d0 [ 826.017022][ T2209] ? splice_direct_to_actor+0xb00/0xb00 [ 826.022622][ T2209] ? security_file_permission+0x128/0x300 [ 826.028310][ T2209] do_sendfile+0x89d/0x1110 [ 826.032828][ T2209] ? compat_writev+0x390/0x390 [ 826.037563][ T2209] ? security_file_permission+0x128/0x300 [ 826.043266][ T2209] ? vfs_write+0x427/0x4f0 [ 826.047650][ T2209] ? fput_many+0x42/0x1a0 [ 826.051948][ T2209] __x64_sys_sendfile64+0x1ae/0x220 [ 826.057113][ T2209] ? __ia32_sys_sendfile+0x240/0x240 [ 826.062363][ T2209] do_syscall_64+0xcb/0x150 [ 826.066839][ T2209] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 826.072706][ T2209] RIP: 0033:0x45de59 [ 826.077270][ T2209] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 826.096861][ T2209] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.105240][ T2209] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 826.113206][ T2209] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 826.121239][ T2209] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 826.129177][ T2209] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000018 [ 826.137115][ T2209] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:56 executing program 4 (fault-call:11 fault-nth:25): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:56 executing program 0: unshare(0x44002000) 10:43:56 executing program 1: unshare(0x44007600) 10:43:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000040), 0x4a, 0x0) 10:43:56 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:43:56 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$peeksig(0x4209, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x2010, 0x0, 0x400}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000009840)={0x0, 0x0, &(0x7f0000009800)={0x0}}, 0x0) 10:43:56 executing program 1: unshare(0x44008700) 10:43:56 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:43:56 executing program 3: pipe2$9p(&(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x6}, &(0x7f0000000240)={0x9}, 0x0, 0x0) [ 826.807456][ T2240] FAULT_INJECTION: forcing a failure. [ 826.807456][ T2240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.833790][ T2240] CPU: 1 PID: 2240 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 826.845264][ T2240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.855367][ T2240] Call Trace: [ 826.858643][ T2240] dump_stack+0x1b0/0x21e [ 826.862944][ T2240] ? devkmsg_release+0x11c/0x11c [ 826.867850][ T2240] ? show_regs_print_info+0x12/0x12 [ 826.873023][ T2240] ? kasan_alloc_pages+0x4a/0x60 [ 826.877934][ T2240] should_fail+0x6fb/0x860 [ 826.882327][ T2240] ? setup_fault_attr+0x2b0/0x2b0 [ 826.887341][ T2240] __alloc_pages_nodemask+0x1ee/0x7c0 [ 826.892700][ T2240] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 826.898226][ T2240] ? find_get_entry+0x5da/0x670 [ 826.903049][ T2240] ? xa_load+0x323/0x340 [ 826.907270][ T2240] __do_page_cache_readahead+0x244/0x510 [ 826.912874][ T2240] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 826.919256][ T2240] ? unwind_next_frame+0x1c07/0x22b0 [ 826.924528][ T2240] ? page_cache_sync_readahead+0xa3/0x3c0 [ 826.930218][ T2240] generic_file_read_iter+0x626/0x20a0 [ 826.935653][ T2240] ? find_get_pages_range_tag+0xae0/0xae0 [ 826.941341][ T2240] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 826.946854][ T2240] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 826.952908][ T2240] ? avc_denied+0x1c0/0x1c0 [ 826.957390][ T2240] generic_file_splice_read+0x491/0x780 [ 826.962927][ T2240] ? splice_shrink_spd+0xb0/0xb0 [ 826.967839][ T2240] ? security_file_permission+0x1e9/0x300 [ 826.973525][ T2240] ? splice_shrink_spd+0xb0/0xb0 [ 826.978432][ T2240] splice_direct_to_actor+0x3cf/0xb00 [ 826.983784][ T2240] ? do_splice_direct+0x3d0/0x3d0 [ 826.988800][ T2240] ? pipe_to_sendpage+0x300/0x300 [ 826.993793][ T2240] ? security_file_permission+0x128/0x300 [ 826.999477][ T2240] do_splice_direct+0x279/0x3d0 [ 827.004298][ T2240] ? splice_direct_to_actor+0xb00/0xb00 [ 827.009814][ T2240] ? security_file_permission+0x128/0x300 [ 827.015503][ T2240] do_sendfile+0x89d/0x1110 [ 827.019986][ T2240] ? compat_writev+0x390/0x390 [ 827.024720][ T2240] ? security_file_permission+0x128/0x300 [ 827.030411][ T2240] ? vfs_write+0x427/0x4f0 [ 827.034796][ T2240] ? fput_many+0x42/0x1a0 [ 827.039098][ T2240] __x64_sys_sendfile64+0x1ae/0x220 [ 827.044275][ T2240] ? __ia32_sys_sendfile+0x240/0x240 [ 827.049537][ T2240] do_syscall_64+0xcb/0x150 [ 827.054011][ T2240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 827.059871][ T2240] RIP: 0033:0x45de59 [ 827.063755][ T2240] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 827.083329][ T2240] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 827.091725][ T2240] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 827.099688][ T2240] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44003) [ 827.107630][ T2240] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 827.115570][ T2240] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000019 [ 827.123522][ T2240] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:57 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:43:57 executing program 4 (fault-call:11 fault-nth:26): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:57 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x3e040, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 10:43:57 executing program 1: unshare(0x4400ae00) 10:43:57 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:43:57 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:57 executing program 0: unshare(0x44002100) 10:43:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004380)=@security={'security\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, '\b@'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0x188, 0x1f8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"0541"}}, @common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv6=@private2, [], @ipv4=@private, [], @ipv4=@empty}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "384cd4ae51c0f4b63313b04f57f6fa27c691745db81d30b21732c9a5dd6a30d2023782923275dfcc268b54901cda3132ad82e86be0686030e915d38f2c0f4de4"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) [ 827.831080][ T2276] FAULT_INJECTION: forcing a failure. [ 827.831080][ T2276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 827.838915][ T2279] x_tables: duplicate underflow at hook 2 [ 827.848722][ T2276] CPU: 0 PID: 2276 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 827.861472][ T2276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.871533][ T2276] Call Trace: [ 827.874828][ T2276] dump_stack+0x1b0/0x21e [ 827.879153][ T2276] ? devkmsg_release+0x11c/0x11c [ 827.884088][ T2276] ? show_regs_print_info+0x12/0x12 [ 827.889285][ T2276] ? kasan_alloc_pages+0x4a/0x60 [ 827.894214][ T2276] should_fail+0x6fb/0x860 [ 827.898632][ T2276] ? setup_fault_attr+0x2b0/0x2b0 [ 827.903654][ T2276] __alloc_pages_nodemask+0x1ee/0x7c0 [ 827.909054][ T2276] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 827.914594][ T2276] ? find_get_entry+0x5da/0x670 [ 827.919436][ T2276] ? xa_load+0x323/0x340 [ 827.923673][ T2276] __do_page_cache_readahead+0x244/0x510 [ 827.929308][ T2276] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 827.935715][ T2276] ? unwind_next_frame+0x1c07/0x22b0 [ 827.940992][ T2276] ? page_cache_sync_readahead+0xa3/0x3c0 [ 827.946720][ T2276] generic_file_read_iter+0x626/0x20a0 [ 827.952187][ T2276] ? find_get_pages_range_tag+0xae0/0xae0 [ 827.957908][ T2276] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 827.963276][ T2276] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 827.969423][ T2276] ? avc_denied+0x1c0/0x1c0 [ 827.973931][ T2276] generic_file_splice_read+0x491/0x780 [ 827.979474][ T2276] ? splice_shrink_spd+0xb0/0xb0 [ 827.984409][ T2276] ? security_file_permission+0x1e9/0x300 [ 827.990121][ T2276] ? splice_shrink_spd+0xb0/0xb0 [ 827.995048][ T2276] splice_direct_to_actor+0x3cf/0xb00 [ 828.000420][ T2276] ? do_splice_direct+0x3d0/0x3d0 [ 828.005430][ T2276] ? pipe_to_sendpage+0x300/0x300 [ 828.010449][ T2276] ? security_file_permission+0x128/0x300 [ 828.016156][ T2276] do_splice_direct+0x279/0x3d0 [ 828.021695][ T2276] ? splice_direct_to_actor+0xb00/0xb00 [ 828.027237][ T2276] ? security_file_permission+0x128/0x300 [ 828.032947][ T2276] do_sendfile+0x89d/0x1110 [ 828.037456][ T2276] ? compat_writev+0x390/0x390 [ 828.042212][ T2276] ? security_file_permission+0x128/0x300 [ 828.047924][ T2276] ? vfs_write+0x427/0x4f0 [ 828.052333][ T2276] ? fput_many+0x42/0x1a0 [ 828.056653][ T2276] __x64_sys_sendfile64+0x1ae/0x220 [ 828.061843][ T2276] ? __ia32_sys_sendfile+0x240/0x240 [ 828.067130][ T2276] do_syscall_64+0xcb/0x150 [ 828.071626][ T2276] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.077501][ T2276] RIP: 0033:0x45de59 [ 828.081382][ T2276] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.100975][ T2276] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 828.109383][ T2276] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 828.117347][ T2276] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:58 executing program 1: unshare(0x4400c000) 10:43:58 executing program 0: unshare(0x44002200) 10:43:58 executing program 0: unshare(0x44002700) 10:43:58 executing program 1: unshare(0x4400d200) 10:43:58 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) r4 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000800)='./bus/file0\x00', 0xc, 0x5) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 828.125311][ T2276] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 828.133270][ T2276] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001a [ 828.141228][ T2276] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:58 executing program 4 (fault-call:11 fault-nth:27): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:58 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000120019"], 0x9c}}, 0x0) recvmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) 10:43:58 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:43:58 executing program 0: unshare(0x44003800) 10:43:58 executing program 1: unshare(0x4400f000) 10:43:58 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000000000003f19a68b0782b87f000000000000000000000000000000000000000000f6ff0000100000", @ANYRES32=0x0, @ANYBLOB="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"]) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/171, 0xab}], 0x7) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:58 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x3e040, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'user.', '%]/\x00'}, &(0x7f0000000240)=""/251, 0xfb) 10:43:58 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 10:43:58 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:43:58 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, 0x18180b, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendfile(r1, r2, 0x0, 0x200000f) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 828.820742][ T2309] FAULT_INJECTION: forcing a failure. [ 828.820742][ T2309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 828.846676][ T2309] CPU: 1 PID: 2309 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 828.858141][ T2309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.868184][ T2309] Call Trace: [ 828.871456][ T2309] dump_stack+0x1b0/0x21e [ 828.875756][ T2309] ? devkmsg_release+0x11c/0x11c [ 828.880665][ T2309] ? show_regs_print_info+0x12/0x12 [ 828.885832][ T2309] ? kasan_alloc_pages+0x4a/0x60 [ 828.890739][ T2309] should_fail+0x6fb/0x860 [ 828.895123][ T2309] ? setup_fault_attr+0x2b0/0x2b0 [ 828.900116][ T2309] __alloc_pages_nodemask+0x1ee/0x7c0 [ 828.905458][ T2309] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 828.910973][ T2309] ? find_get_entry+0x5da/0x670 [ 828.915789][ T2309] ? xa_load+0x323/0x340 [ 828.920011][ T2309] __do_page_cache_readahead+0x244/0x510 [ 828.925616][ T2309] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 828.931998][ T2309] ? unwind_next_frame+0x1c07/0x22b0 [ 828.937251][ T2309] ? page_cache_sync_readahead+0xa3/0x3c0 [ 828.942951][ T2309] generic_file_read_iter+0x626/0x20a0 [ 828.948387][ T2309] ? find_get_pages_range_tag+0xae0/0xae0 [ 828.954073][ T2309] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 828.959430][ T2309] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 828.965471][ T2309] ? avc_denied+0x1c0/0x1c0 [ 828.969943][ T2309] generic_file_splice_read+0x491/0x780 [ 828.975472][ T2309] ? splice_shrink_spd+0xb0/0xb0 [ 828.980386][ T2309] ? security_file_permission+0x1e9/0x300 [ 828.986088][ T2309] ? splice_shrink_spd+0xb0/0xb0 [ 828.991003][ T2309] splice_direct_to_actor+0x3cf/0xb00 [ 828.996361][ T2309] ? do_splice_direct+0x3d0/0x3d0 [ 829.001363][ T2309] ? pipe_to_sendpage+0x300/0x300 [ 829.006356][ T2309] ? security_file_permission+0x128/0x300 [ 829.012045][ T2309] do_splice_direct+0x279/0x3d0 [ 829.016867][ T2309] ? splice_direct_to_actor+0xb00/0xb00 [ 829.022385][ T2309] ? security_file_permission+0x128/0x300 [ 829.028095][ T2309] do_sendfile+0x89d/0x1110 [ 829.032629][ T2309] ? compat_writev+0x390/0x390 [ 829.037394][ T2309] ? security_file_permission+0x128/0x300 [ 829.043104][ T2309] ? vfs_write+0x427/0x4f0 [ 829.047500][ T2309] ? fput_many+0x42/0x1a0 [ 829.051829][ T2309] __x64_sys_sendfile64+0x1ae/0x220 [ 829.057001][ T2309] ? __ia32_sys_sendfile+0x240/0x240 [ 829.062259][ T2309] do_syscall_64+0xcb/0x150 [ 829.066735][ T2309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 829.072597][ T2309] RIP: 0033:0x45de59 [ 829.076465][ T2309] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.096038][ T2309] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 829.104417][ T2309] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 829.112367][ T2309] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:43:59 executing program 1: unshare(0x4400fe00) [ 829.120328][ T2309] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 829.128268][ T2309] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001b [ 829.136222][ T2309] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:43:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x5}, 0x14}}, 0x0) 10:43:59 executing program 4 (fault-call:11 fault-nth:28): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:59 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) 10:43:59 executing program 0: unshare(0x44003a00) 10:43:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20040005, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x2}, 0x80) 10:43:59 executing program 1: unshare(0x4400ff00) 10:43:59 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000180)={{0x2, 0x0, @identifier="c92b8062f96229344e774ec49f150f40"}}) ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000100)=0x3f) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x1}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000080)) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:43:59 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) [ 829.885311][ T2343] FAULT_INJECTION: forcing a failure. [ 829.885311][ T2343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 829.898665][ T2343] CPU: 0 PID: 2343 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 829.910122][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.920178][ T2343] Call Trace: [ 829.923467][ T2343] dump_stack+0x1b0/0x21e [ 829.927790][ T2343] ? devkmsg_release+0x11c/0x11c [ 829.932725][ T2343] ? show_regs_print_info+0x12/0x12 [ 829.937896][ T2343] ? kasan_alloc_pages+0x4a/0x60 [ 829.942817][ T2343] should_fail+0x6fb/0x860 [ 829.947203][ T2343] ? setup_fault_attr+0x2b0/0x2b0 [ 829.952198][ T2343] __alloc_pages_nodemask+0x1ee/0x7c0 [ 829.957567][ T2343] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 829.963183][ T2343] ? find_get_entry+0x5da/0x670 [ 829.968004][ T2343] ? xa_load+0x323/0x340 [ 829.972219][ T2343] __do_page_cache_readahead+0x244/0x510 [ 829.977822][ T2343] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 829.984205][ T2343] ? unwind_next_frame+0x1c07/0x22b0 [ 829.989457][ T2343] ? page_cache_sync_readahead+0xa3/0x3c0 [ 829.995158][ T2343] generic_file_read_iter+0x626/0x20a0 [ 830.001546][ T2343] ? find_get_pages_range_tag+0xae0/0xae0 [ 830.007235][ T2343] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 830.012577][ T2343] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 830.018611][ T2343] ? avc_denied+0x1c0/0x1c0 [ 830.023095][ T2343] generic_file_splice_read+0x491/0x780 [ 830.028634][ T2343] ? splice_shrink_spd+0xb0/0xb0 [ 830.033559][ T2343] ? security_file_permission+0x1e9/0x300 [ 830.039270][ T2343] ? splice_shrink_spd+0xb0/0xb0 [ 830.044188][ T2343] splice_direct_to_actor+0x3cf/0xb00 [ 830.050225][ T2343] ? do_splice_direct+0x3d0/0x3d0 [ 830.055218][ T2343] ? pipe_to_sendpage+0x300/0x300 [ 830.060475][ T2343] ? security_file_permission+0x128/0x300 [ 830.066174][ T2343] do_splice_direct+0x279/0x3d0 [ 830.071008][ T2343] ? splice_direct_to_actor+0xb00/0xb00 [ 830.076528][ T2343] ? security_file_permission+0x128/0x300 [ 830.082219][ T2343] do_sendfile+0x89d/0x1110 [ 830.086695][ T2343] ? compat_writev+0x390/0x390 [ 830.091432][ T2343] ? security_file_permission+0x128/0x300 [ 830.097121][ T2343] ? vfs_write+0x427/0x4f0 [ 830.101520][ T2343] ? fput_many+0x42/0x1a0 [ 830.105832][ T2343] __x64_sys_sendfile64+0x1ae/0x220 [ 830.111015][ T2343] ? __ia32_sys_sendfile+0x240/0x240 [ 830.116272][ T2343] do_syscall_64+0xcb/0x150 [ 830.120756][ T2343] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 830.126628][ T2343] RIP: 0033:0x45de59 [ 830.130505][ T2343] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 830.150090][ T2343] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 830.158477][ T2343] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 830.166437][ T2343] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 830.174394][ T2343] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:43:59 executing program 1: unshare(0x10000000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 10:44:00 executing program 0: unshare(0x44004000) 10:44:00 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x3) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffbffe0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:00 executing program 0: unshare(0x44004a00) 10:44:00 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) [ 830.182364][ T2343] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001c [ 830.190326][ T2343] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:00 executing program 4 (fault-call:11 fault-nth:29): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:00 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x220400, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002040)={{r2}, r3, 0x8, @inherit={0x68, &(0x7f0000001780)={0x1, 0x4, 0x100, 0x3, {0x4, 0x1, 0x10001, 0x3, 0x2}, [0x3, 0x401, 0xb7, 0x5]}}, @name="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"}) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:00 executing program 0: unshare(0x44008700) 10:44:00 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:44:00 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x28040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x34040, 0x0) 10:44:00 executing program 0: unshare(0x4400f000) 10:44:00 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0xb2) write$P9_RREADDIR(r0, &(0x7f0000000540)=ANY=[], 0x122) [ 830.860595][ T2374] FAULT_INJECTION: forcing a failure. [ 830.860595][ T2374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.890004][ T2374] CPU: 0 PID: 2374 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 830.901482][ T2374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.911787][ T2374] Call Trace: [ 830.915079][ T2374] dump_stack+0x1b0/0x21e [ 830.919401][ T2374] ? devkmsg_release+0x11c/0x11c [ 830.924313][ T2374] ? show_regs_print_info+0x12/0x12 [ 830.929480][ T2374] ? kasan_alloc_pages+0x4a/0x60 [ 830.934418][ T2374] should_fail+0x6fb/0x860 [ 830.939075][ T2374] ? setup_fault_attr+0x2b0/0x2b0 [ 830.944086][ T2374] __alloc_pages_nodemask+0x1ee/0x7c0 [ 830.949427][ T2374] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 830.954943][ T2374] ? find_get_entry+0x5da/0x670 [ 830.959768][ T2374] ? xa_load+0x323/0x340 [ 830.963999][ T2374] __do_page_cache_readahead+0x244/0x510 [ 830.969620][ T2374] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 830.976064][ T2374] ? unwind_next_frame+0x1c07/0x22b0 [ 830.981338][ T2374] ? page_cache_sync_readahead+0xa3/0x3c0 [ 830.987028][ T2374] generic_file_read_iter+0x626/0x20a0 [ 830.992476][ T2374] ? find_get_pages_range_tag+0xae0/0xae0 [ 830.998174][ T2374] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 831.003526][ T2374] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 831.009582][ T2374] ? avc_denied+0x1c0/0x1c0 [ 831.014059][ T2374] generic_file_splice_read+0x491/0x780 [ 831.019574][ T2374] ? splice_shrink_spd+0xb0/0xb0 [ 831.024485][ T2374] ? security_file_permission+0x1e9/0x300 [ 831.030173][ T2374] ? splice_shrink_spd+0xb0/0xb0 [ 831.035083][ T2374] splice_direct_to_actor+0x3cf/0xb00 [ 831.040429][ T2374] ? do_splice_direct+0x3d0/0x3d0 [ 831.045421][ T2374] ? pipe_to_sendpage+0x300/0x300 [ 831.050427][ T2374] ? security_file_permission+0x128/0x300 [ 831.056126][ T2374] do_splice_direct+0x279/0x3d0 [ 831.060950][ T2374] ? splice_direct_to_actor+0xb00/0xb00 [ 831.066477][ T2374] ? security_file_permission+0x128/0x300 [ 831.072177][ T2374] do_sendfile+0x89d/0x1110 [ 831.076654][ T2374] ? compat_writev+0x390/0x390 [ 831.081386][ T2374] ? security_file_permission+0x128/0x300 [ 831.087077][ T2374] ? vfs_write+0x427/0x4f0 [ 831.091463][ T2374] ? fput_many+0x42/0x1a0 [ 831.095764][ T2374] __x64_sys_sendfile64+0x1ae/0x220 [ 831.100947][ T2374] ? __ia32_sys_sendfile+0x240/0x240 [ 831.106202][ T2374] do_syscall_64+0xcb/0x150 [ 831.110687][ T2374] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 831.116545][ T2374] RIP: 0033:0x45de59 [ 831.120410][ T2374] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 831.139989][ T2374] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 831.148380][ T2374] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 10:44:01 executing program 1: unshare(0x4b2ae6bd762ca02c) 10:44:01 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0xb2) write$P9_RREADDIR(r0, &(0x7f0000000540)=ANY=[], 0x122) 10:44:01 executing program 0: unshare(0x4400fe00) 10:44:01 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:44:01 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x1ff, 0xfffff800, 0x9b, 0x4, r0, 0x7, [], 0x0, r0, 0x0, 0x3, 0x5}, 0x40) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) [ 831.156331][ T2374] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 831.164291][ T2374] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 831.172425][ T2374] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001d [ 831.181339][ T2374] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:01 executing program 4 (fault-call:11 fault-nth:30): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:01 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:44:01 executing program 0: unshare(0x4400ff00) 10:44:01 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) unshare(0x44000600) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x2, 0x8f2c}) 10:44:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000040), 0x4a, 0x0) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 10:44:01 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getxattr(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/71, 0x47) 10:44:01 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2a0c2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'memory'}]}, 0x8) write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf}, 0xf) 10:44:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1080, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x3f, 0x4) unshare(0x44000600) [ 831.871644][ T2412] FAULT_INJECTION: forcing a failure. [ 831.871644][ T2412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 831.897723][ T2412] CPU: 0 PID: 2412 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 831.909194][ T2412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.919239][ T2412] Call Trace: [ 831.922528][ T2412] dump_stack+0x1b0/0x21e [ 831.926850][ T2412] ? devkmsg_release+0x11c/0x11c [ 831.931823][ T2412] ? show_regs_print_info+0x12/0x12 [ 831.937016][ T2412] ? kasan_alloc_pages+0x4a/0x60 [ 831.941953][ T2412] should_fail+0x6fb/0x860 [ 831.946385][ T2412] ? setup_fault_attr+0x2b0/0x2b0 [ 831.951401][ T2412] __alloc_pages_nodemask+0x1ee/0x7c0 [ 831.956772][ T2412] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 831.962311][ T2412] ? find_get_entry+0x5da/0x670 [ 831.967156][ T2412] ? xa_load+0x323/0x340 [ 831.971395][ T2412] __do_page_cache_readahead+0x244/0x510 [ 831.977034][ T2412] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 831.983443][ T2412] ? unwind_next_frame+0x1c07/0x22b0 [ 831.988722][ T2412] ? page_cache_sync_readahead+0xa3/0x3c0 [ 831.994438][ T2412] generic_file_read_iter+0x626/0x20a0 [ 831.999898][ T2412] ? find_get_pages_range_tag+0xae0/0xae0 [ 832.005702][ T2412] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 832.011067][ T2412] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.017124][ T2412] ? avc_denied+0x1c0/0x1c0 10:44:02 executing program 1: unshare(0x64000600) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x82a00, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) write$vga_arbiter(r0, &(0x7f00000000c0)=@target_default='target default\x00', 0xf) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "f7beffffffffdb2d", "f7ab2b3b7eb9564b4e4d0ad54a0d1c0d", "c36194ee", "ab3b9ed06af28067"}, 0x28) 10:44:02 executing program 0: unshare(0x44000600) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x4, 0x40, 0x1}) 10:44:02 executing program 0: r0 = socket$inet(0x2, 0xa, 0x7) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000012c0)={'rose0\x00'}) unshare(0x40000a80) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x100c) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001240)='/dev/bsg\x00', 0x400000, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000001280)={0x3, 0x4, [0x6, 0xffff, 0x3, 0x5, 0x7ff], 0x4}) r2 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='^a$\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r2) keyctl$dh_compute(0x17, &(0x7f0000001040)={0x0, r2}, &(0x7f0000001080)=""/29, 0x1d, &(0x7f0000001200)={&(0x7f00000010c0)={'streebog512-generic\x00'}, &(0x7f0000001100)="0d5e75b681645ebabfabc923693eecca98b8e6f4fe606fb578c20f91973fa5f95e8a5fa41d75ea3f3fc29ab0904f872dee60bd587aaca56800262bef17ab2912589448810f4a972bf7210d3a6087e4a5b86f0406c1430e00fe57cfe7f5dc59ab25cf423fea6f6ce3aad7bbfc64b161fbf55c8c8418540a94b54b7c5589472b59a9f95646bad492677fcd91a12f37be9c0c5b80e74cb34c01de944eb50f85ad6e5c7f3062626a415f33527b65b2e50ad06bc5f0cd5eb71aaa4034fbd258eda88d411e7f2150757d68f7535ae1b4f64a69e3a0f9482eb3341f785a84b9f32503f187beea8e1153f7e4e3b3730e8c7f239e4e182aa966", 0xf5}) [ 832.021627][ T2412] generic_file_splice_read+0x491/0x780 [ 832.027920][ T2412] ? splice_shrink_spd+0xb0/0xb0 [ 832.032863][ T2412] ? security_file_permission+0x1e9/0x300 [ 832.038578][ T2412] ? splice_shrink_spd+0xb0/0xb0 [ 832.043512][ T2412] splice_direct_to_actor+0x3cf/0xb00 [ 832.048885][ T2412] ? do_splice_direct+0x3d0/0x3d0 [ 832.055815][ T2412] ? pipe_to_sendpage+0x300/0x300 [ 832.061011][ T2412] ? security_file_permission+0x128/0x300 [ 832.066733][ T2412] do_splice_direct+0x279/0x3d0 [ 832.071576][ T2412] ? splice_direct_to_actor+0xb00/0xb00 [ 832.077119][ T2412] ? security_file_permission+0x128/0x300 [ 832.082917][ T2412] do_sendfile+0x89d/0x1110 [ 832.087414][ T2412] ? compat_writev+0x390/0x390 [ 832.092168][ T2412] ? security_file_permission+0x128/0x300 [ 832.097892][ T2412] ? vfs_write+0x427/0x4f0 [ 832.102300][ T2412] ? fput_many+0x42/0x1a0 [ 832.106623][ T2412] __x64_sys_sendfile64+0x1ae/0x220 [ 832.111815][ T2412] ? __ia32_sys_sendfile+0x240/0x240 [ 832.117095][ T2412] do_syscall_64+0xcb/0x150 [ 832.121592][ T2412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 832.127473][ T2412] RIP: 0033:0x45de59 [ 832.131353][ T2412] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.150949][ T2412] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 832.159355][ T2412] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 10:44:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup2(r1, r2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0x108, 0x0, 0x108, 0x0, 0x0, 0x318, 0x300, 0x300, 0x300, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @local, [], [], 'veth0_vlan\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3590, 0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r4 = dup(r0) sendto$inet6(r0, &(0x7f0000000280)="1ea22483a6a7d5986cd93c18d19f2b", 0xf, 0x20008800, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50}, 0x50) [ 832.167669][ T2412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 832.175634][ T2412] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 832.183601][ T2412] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001e [ 832.191566][ T2412] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 832.227285][ T2442] x_tables: duplicate underflow at hook 2 [ 832.245621][ T2442] x_tables: duplicate underflow at hook 2 10:44:02 executing program 4 (fault-call:11 fault-nth:31): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:02 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) 10:44:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x2, 0x0}}], 0x1, 0x0) 10:44:02 executing program 0: unshare(0x44000600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4004000) 10:44:02 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) write$input_event(r0, &(0x7f0000001880)={{r4, r5/1000+60000}, 0x16, 0x3, 0x5}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x100000000, 0x9, &(0x7f00000005c0)=[{&(0x7f0000000140)="e14ba69446d57c7d8060dd3ef19c4c5dfdbfd58dab04eed98dcd153284c27a7a4024bbd9c89e10524ab964083c2a226ee6d51c6f24", 0x35, 0xfffffffffffff800}, {&(0x7f0000000180)="0bb65d3be605251aa5f4458893421058318ca9688d02ba027dd2aa18d09d97885e4ad9bb16ba370d8ddc1601785ce62e3393b118c25e34939525cf0597376b4026ba5f2cd8a9157b5337eb8be4c128f47658095f39ed484b5fa3c800778185437779f57cd105276e7585122f8b87bd74106bcbb12948fe42ff59420ff7c36e0d63585bf2c74a45736f5fe3960307", 0x8e, 0x2}, {&(0x7f0000000240)="aed9eaa107b7c12a250346898118938db3c3d8b88f384759e9e910e9a839b1e982fa6018dfd4db4b96b92c67dfc3a9314925930a874c5bd8e268c2a1d412b1da3bc87955ac88209303da75c71e45c2f8daa3b727c66ee2cc44f4d2f17f46a0b13f6ae9b02972c4e3c23c76b1c56803964716c0bed4f43a12d3fe9d9fc95ebf69463acaabbc6273ea59b79de8f0654538b39c8e5a6321eb65d2bce6ee9a77e82a8f67409f761c797df256bc92723145b03194630eda0f85c9fc344a64613a6a3035a914938daefa6a36046cbf2681926c93fa02b3a237014b", 0xd8, 0xffffffff}, {&(0x7f0000000340)="e7ca54570d734be1908afbc5e4a528099124e279762a14bfddf4f326dfaac1b366f1ff83a82d68550fea057ee031919789102c7bd9e9e6b27679d56205ca841535aace3cb957a0f481933667e9758230488b3a65066696d828bdc30994c7cb56b3e7c399d89571c17cbf1b3e1aa658c5a468183c88efffc0d42b53fb17dac8c37c27dcd12bede0e4403cc1c463bb09d0377f175b92a36d8abfb1aa42c2f7ad3219d355613d9941", 0xa7, 0x65849510}, {&(0x7f0000000780)="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", 0x1000, 0x1b}, {&(0x7f0000000400)="4b249dcfc6e3a65fe883cc310264c14137409f606d01cf7af83dbe1aaeea5e3d660ea4e6a091e54746a3b3ace5e5c53b326cf89ecd8270d207c116e0e6a65314e98478024976087f8df84daa2e7b46558cc754eb60ae906f00e9cd38088364626d095b97cb8cad5369a0f1641738b7443572c4", 0x73, 0xffff}, {&(0x7f0000000480)="a8e9e97469eafe557a2669d3744b32d9799c83704ece580b27", 0x19, 0x3}, {&(0x7f00000004c0)="9a791271a2f78227ce4a46fcfcfc4359b7807ff27d0b592443803d9b1a2fa23b09e93997b1b242faf9ba2b64853a2a84e6ce5e351264579d704d26f47f240e40ddcbbd924c0ebe1bd4f12bbc12a71e44eb6ea2be92da7fca70c3a2275066cb0aee2c6ec8ed886ae9c29b571da4fff61d3c912f15092994ddbacf1ed065e0037ec89926c183bc8edf7bb4cefe1d67c402093dfdb5b6c093fee39493fe26", 0x9d, 0xfffffffffffffffd}, {&(0x7f0000000580)="20d9ce19680677c62d7b67e88bc76f9bc1c874bad5a2ec27b43747e89db8d1175f12b1b0b011", 0x26, 0x7ff}], 0x8010, &(0x7f0000001780)={[{@size={'size', 0x3d, [0x6b, 0x32, 0x37, 0x6d, 0x70, 0x6b, 0x30, 0x32, 0x38, 0x31]}}, {@gid={'gid', 0x3d, 0xee00}}, {@huge_within_size='huge=within_size'}], [{@fowner_eq={'fowner'}}, {@seclabel='seclabel'}, {@euid_gt={'euid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '**\\'}}, {@fowner_eq={'fowner'}}]}) symlinkat(&(0x7f0000000080)='./bus\x00', r6, &(0x7f00000006c0)='./bus\x00') 10:44:02 executing program 1: unshare(0x44000600) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80001, 0x0) fcntl$notify(r0, 0x402, 0xc) 10:44:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3a3dd4008420af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffff9, 0xffffffffffffffec, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000020005c84b, 0x187f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r2 = getpid() tkill(r2, 0x3d) 10:44:02 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) [ 832.924624][ T2457] FAULT_INJECTION: forcing a failure. [ 832.924624][ T2457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 832.942507][ T2457] CPU: 1 PID: 2457 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 832.953972][ T2457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.964015][ T2457] Call Trace: [ 832.967301][ T2457] dump_stack+0x1b0/0x21e [ 832.971624][ T2457] ? devkmsg_release+0x11c/0x11c [ 832.976556][ T2457] ? show_regs_print_info+0x12/0x12 [ 832.981742][ T2457] ? kasan_alloc_pages+0x4a/0x60 [ 832.986667][ T2457] should_fail+0x6fb/0x860 [ 832.991070][ T2457] ? setup_fault_attr+0x2b0/0x2b0 [ 832.996087][ T2457] __alloc_pages_nodemask+0x1ee/0x7c0 [ 833.001453][ T2457] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 833.006987][ T2457] ? find_get_entry+0x5da/0x670 [ 833.011825][ T2457] ? xa_load+0x323/0x340 [ 833.016061][ T2457] __do_page_cache_readahead+0x244/0x510 [ 833.021691][ T2457] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 833.028095][ T2457] ? unwind_next_frame+0x1c07/0x22b0 [ 833.033372][ T2457] ? page_cache_sync_readahead+0xa3/0x3c0 [ 833.039084][ T2457] generic_file_read_iter+0x626/0x20a0 [ 833.044544][ T2457] ? find_get_pages_range_tag+0xae0/0xae0 [ 833.050253][ T2457] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 833.055619][ T2457] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.061679][ T2457] ? avc_denied+0x1c0/0x1c0 [ 833.066175][ T2457] generic_file_splice_read+0x491/0x780 [ 833.071717][ T2457] ? splice_shrink_spd+0xb0/0xb0 [ 833.076651][ T2457] ? security_file_permission+0x1e9/0x300 [ 833.082356][ T2457] ? splice_shrink_spd+0xb0/0xb0 [ 833.087280][ T2457] splice_direct_to_actor+0x3cf/0xb00 [ 833.092645][ T2457] ? do_splice_direct+0x3d0/0x3d0 [ 833.097660][ T2457] ? pipe_to_sendpage+0x300/0x300 [ 833.102677][ T2457] ? security_file_permission+0x128/0x300 [ 833.108381][ T2457] do_splice_direct+0x279/0x3d0 [ 833.113218][ T2457] ? splice_direct_to_actor+0xb00/0xb00 [ 833.119716][ T2457] ? security_file_permission+0x128/0x300 [ 833.125426][ T2457] do_sendfile+0x89d/0x1110 [ 833.129924][ T2457] ? compat_writev+0x390/0x390 [ 833.134682][ T2457] ? security_file_permission+0x128/0x300 [ 833.140393][ T2457] ? vfs_write+0x427/0x4f0 [ 833.144801][ T2457] ? fput_many+0x42/0x1a0 [ 833.149121][ T2457] __x64_sys_sendfile64+0x1ae/0x220 [ 833.154308][ T2457] ? __ia32_sys_sendfile+0x240/0x240 [ 833.159581][ T2457] do_syscall_64+0xcb/0x150 [ 833.164073][ T2457] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.169953][ T2457] RIP: 0033:0x45de59 [ 833.173832][ T2457] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.194481][ T2457] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 833.203847][ T2457] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 833.211808][ T2457] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:44:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x2) 10:44:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:44:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) [ 833.219773][ T2457] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 833.227735][ T2457] R10: 0000000000200fc0 R11: 0000000000000246 R12: 000000000000001f [ 833.235696][ T2457] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:03 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x80200, 0x20) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0xcf, 0x6c36, 0x8d03, 0x6, 0x981, 0x6}) write$vga_arbiter(r4, &(0x7f00000000c0)=@other={'unlock', ' ', 'io+mem'}, 0xe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:03 executing program 4 (fault-call:11 fault-nth:32): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:03 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) 10:44:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], 0x8a) socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000800)='veth1_virt_wifi\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000700)={0x6, 'veth1_virt_wifi\x00', {0x200}, 0x100}) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/125, 0x7d}], 0x5, 0x3, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000012}, 0x80) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x55}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000800}, 0x4012) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000080)=""/191) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x125, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000780)={0x55, 0x9e3, 0xfd85, {0x7, 0x6}, {0x1f, 0xff}, @period={0x5b, 0x3, 0x6, 0x40, 0x4, {0x0, 0xcc66, 0x4, 0x1}, 0x8, &(0x7f0000000740)=[0xfff8, 0x401, 0x8, 0x2, 0x1, 0x56f6, 0x20, 0x5]}}) 10:44:03 executing program 1: unshare(0x44000600) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0xee00, r2}, 0xc) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x4080814) 10:44:03 executing program 0: unshare(0x4030400) 10:44:03 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x10) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="4bd27ad07f0bcdf1cda113b1182e5a7249d3241549458d650866dd4ddf371fa81c6edad84271db0b8b299cc55e7c84c13dc0662a180a83f114a9a9ed176daeed96eaa2148119c3b5673d0d8a88ae45f045c0ed53fc7c66083cffab1694cd4ff12e422754718bda70a9344a5cbe3b2e24bb56feb2699dfc4c21ddf7bee4cc5a40a5e4127dbf1bf6f43ba1e1ca67254ba7bfbea6f1c0d918ccbff9f9f69a4f3c90740966fc162538301a8fc61d83c35eb32221e220ca1a73425318c2ee9c0d57ab2c79ebe389df4d752e94d14215343cbaa06f65ee3393cbca848d24546273d0207160949349147f9a1203ac904a28fc2ae63fb0", 0xf3, r3}, 0x68) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 833.926004][ T2495] FAULT_INJECTION: forcing a failure. [ 833.926004][ T2495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 833.943053][ T2495] CPU: 0 PID: 2495 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 833.955047][ T2495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.965095][ T2495] Call Trace: [ 833.968378][ T2495] dump_stack+0x1b0/0x21e [ 833.972698][ T2495] ? devkmsg_release+0x11c/0x11c [ 833.977634][ T2495] ? show_regs_print_info+0x12/0x12 [ 833.982941][ T2495] ? kasan_alloc_pages+0x4a/0x60 [ 833.987866][ T2495] should_fail+0x6fb/0x860 [ 833.992294][ T2495] ? setup_fault_attr+0x2b0/0x2b0 [ 833.997312][ T2495] __alloc_pages_nodemask+0x1ee/0x7c0 [ 834.002677][ T2495] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 834.008210][ T2495] ? find_get_entry+0x5da/0x670 [ 834.013048][ T2495] ? xa_load+0x323/0x340 [ 834.017278][ T2495] __do_page_cache_readahead+0x244/0x510 [ 834.022900][ T2495] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 834.029300][ T2495] ? unwind_next_frame+0x1c07/0x22b0 [ 834.034574][ T2495] ? page_cache_sync_readahead+0xa3/0x3c0 [ 834.040284][ T2495] generic_file_read_iter+0x626/0x20a0 [ 834.045757][ T2495] ? find_get_pages_range_tag+0xae0/0xae0 [ 834.051559][ T2495] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 834.056919][ T2495] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.067320][ T2495] ? avc_denied+0x1c0/0x1c0 [ 834.071825][ T2495] generic_file_splice_read+0x491/0x780 [ 834.077365][ T2495] ? splice_shrink_spd+0xb0/0xb0 [ 834.082300][ T2495] ? security_file_permission+0x1e9/0x300 [ 834.088011][ T2495] ? splice_shrink_spd+0xb0/0xb0 [ 834.092938][ T2495] splice_direct_to_actor+0x3cf/0xb00 [ 834.098327][ T2495] ? do_splice_direct+0x3d0/0x3d0 [ 834.103383][ T2495] ? pipe_to_sendpage+0x300/0x300 [ 834.108404][ T2495] ? security_file_permission+0x128/0x300 [ 834.114136][ T2495] do_splice_direct+0x279/0x3d0 [ 834.119178][ T2495] ? splice_direct_to_actor+0xb00/0xb00 [ 834.124715][ T2495] ? security_file_permission+0x128/0x300 [ 834.130423][ T2495] do_sendfile+0x89d/0x1110 [ 834.134917][ T2495] ? compat_writev+0x390/0x390 [ 834.139941][ T2495] ? security_file_permission+0x128/0x300 [ 834.145654][ T2495] ? vfs_write+0x427/0x4f0 [ 834.150059][ T2495] ? fput_many+0x42/0x1a0 [ 834.154376][ T2495] __x64_sys_sendfile64+0x1ae/0x220 [ 834.159568][ T2495] ? __ia32_sys_sendfile+0x240/0x240 [ 834.164848][ T2495] do_syscall_64+0xcb/0x150 [ 834.169345][ T2495] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.175226][ T2495] RIP: 0033:0x45de59 [ 834.179110][ T2495] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.198701][ T2495] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.207099][ T2495] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 834.215063][ T2495] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 10:44:04 executing program 0: unshare(0x54000180) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 10:44:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:44:04 executing program 3: syz_emit_ethernet(0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c20000000800490000a800000000002f9078ac1414aaac141400890300070300071700ac1414bbac1414aa"], 0x0) [ 834.223025][ T2495] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 834.230983][ T2495] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000020 [ 834.238939][ T2495] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:44:04 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x40010, r0, 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:04 executing program 1: unshare(0x44000600) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getdents64(r0, &(0x7f0000000400)=""/242, 0xf2) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = fcntl$getown(r0, 0x9) ptrace$cont(0x1f, r1, 0x5, 0x7) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x401, 0x5, 0x4, 0x3, 0x1}}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002e00020028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000040)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 10:44:04 executing program 4 (fault-call:11 fault-nth:33): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:04 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:44:04 executing program 3: ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)='&z9', 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000040), 0x4a, 0x0) 10:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, r1, 0x23f, 0x0, 0x0, {{}, {0x0, 0xf, 0xf0}, {0xc, 0x19, 'syz1\x00'}}}, 0x28}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x10001, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000007c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007c40)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="587b3fbd00"}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000007e40)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007e00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf2509000000500001800800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r2, @ANYBLOB="240098245857c2991e3655aae9df89cd0101fdffffffe5ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000007800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000000000008000300000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020073797a6b616c6c65723000000000000014000200697036746e6c300000000000000000000800030001000000300001800800030002000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="1400020076657468305f766c616e0000000000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x144}, 0x1, 0x0, 0x0, 0x40011}, 0x4000040) unshare(0x44000600) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r7, r7, &(0x7f0000000240), 0x7fff) openat(r7, &(0x7f0000000000)='./file0\x00', 0x800, 0x90) 10:44:04 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20540000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000600b72b5e7f2d0ebcc15fc8be3000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fcdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xbc}, 0x1, 0x0, 0x0, 0xc000}, 0x4040000) r2 = socket(0x1e, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x20}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40088c4) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) [ 834.914701][ T2534] FAULT_INJECTION: forcing a failure. [ 834.914701][ T2534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 834.931053][ T2534] CPU: 0 PID: 2534 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 834.942766][ T2534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.952898][ T2534] Call Trace: [ 834.956186][ T2534] dump_stack+0x1b0/0x21e [ 834.960505][ T2534] ? devkmsg_release+0x11c/0x11c [ 834.965432][ T2534] ? show_regs_print_info+0x12/0x12 [ 834.970616][ T2534] ? kasan_alloc_pages+0x4a/0x60 [ 834.975543][ T2534] should_fail+0x6fb/0x860 [ 834.979960][ T2534] ? setup_fault_attr+0x2b0/0x2b0 [ 834.984989][ T2534] __alloc_pages_nodemask+0x1ee/0x7c0 [ 834.990357][ T2534] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 834.995902][ T2534] ? find_get_entry+0x5da/0x670 [ 835.000744][ T2534] ? xa_load+0x323/0x340 [ 835.004984][ T2534] __do_page_cache_readahead+0x244/0x510 [ 835.010617][ T2534] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 835.017029][ T2534] ? unwind_next_frame+0x1c07/0x22b0 [ 835.022318][ T2534] ? page_cache_sync_readahead+0xa3/0x3c0 [ 835.028039][ T2534] generic_file_read_iter+0x626/0x20a0 [ 835.033496][ T2534] ? find_get_pages_range_tag+0xae0/0xae0 [ 835.039324][ T2534] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 835.044690][ T2534] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 835.050863][ T2534] ? avc_denied+0x1c0/0x1c0 [ 835.055365][ T2534] generic_file_splice_read+0x491/0x780 [ 835.060902][ T2534] ? splice_shrink_spd+0xb0/0xb0 [ 835.065839][ T2534] ? security_file_permission+0x1e9/0x300 [ 835.071547][ T2534] ? splice_shrink_spd+0xb0/0xb0 [ 835.076473][ T2534] splice_direct_to_actor+0x3cf/0xb00 [ 835.081832][ T2534] ? do_splice_direct+0x3d0/0x3d0 [ 835.086842][ T2534] ? pipe_to_sendpage+0x300/0x300 [ 835.091856][ T2534] ? security_file_permission+0x128/0x300 [ 835.097560][ T2534] do_splice_direct+0x279/0x3d0 [ 835.102402][ T2534] ? splice_direct_to_actor+0xb00/0xb00 [ 835.107940][ T2534] ? security_file_permission+0x128/0x300 [ 835.113646][ T2534] do_sendfile+0x89d/0x1110 [ 835.118140][ T2534] ? compat_writev+0x390/0x390 [ 835.122891][ T2534] ? security_file_permission+0x128/0x300 [ 835.128600][ T2534] ? vfs_write+0x427/0x4f0 [ 835.133002][ T2534] ? fput_many+0x42/0x1a0 [ 835.137317][ T2534] __x64_sys_sendfile64+0x1ae/0x220 [ 835.142506][ T2534] ? __ia32_sys_sendfile+0x240/0x240 [ 835.147777][ T2534] do_syscall_64+0xcb/0x150 [ 835.152304][ T2534] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 835.158183][ T2534] RIP: 0033:0x45de59 [ 835.162097][ T2534] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 835.181693][ T2534] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 835.190968][ T2534] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 835.198934][ T2534] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 835.206923][ T2534] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:44:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], []]}, 0x237) 10:44:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x24}}, 0x0) [ 835.214887][ T2534] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000021 [ 835.222849][ T2534] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], []]}, 0x237) 10:44:05 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x12, 0x319}, 0x4c}}, 0x0) clock_gettime(0x0, &(0x7f0000001e00)) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 10:44:05 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000d80)=0x0) r3 = syz_open_dev$rtc(&(0x7f0000000dc0)='/dev/rtc#\x00', 0xffff, 0x28ac0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = accept$unix(r1, 0x0, &(0x7f0000000e00)) r6 = fspick(r1, &(0x7f0000000e40)='./bus\x00', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000000fc0)={0x78c, 0x3c, 0x100, 0x70bd27, 0x25dfdbfc, "", [@typed={0x5, 0x8f, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x6d, 0x0, 0x1, [@typed={0x4, 0x1a}]}, @nested={0x9d, 0x6e, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @fd}, @generic="ef1a69e23b1dccc8c614d906383027b4e4ce25d54f05b0f0cb7d0f83af94ef0bcab9fa9992cf5b611f23d85ff5a85ac2980c32f286eb3cf9688f1f40528ea3b102b95e1b6dec53da235ff4a5a53d2bc3bc075f93de196f854f24f2c22be7e8cd03e135ca483f35b8fdce324801b23a12d4ab36fcd7b3e47833031b7532355c149411a04db0", @typed={0x5, 0x2b, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x4c}]}, @generic="a0c47f5eb1580efe611f56fc40b678091d4d107477668a56529d872ad9e22229c6ffe590205aa3649d12eae9124319e9a9753bc6dfb0346076277191c039c38afa8a9a2be4a455f6690c7e473d0e0da469043de33d8be588e0b2dff3e53932b3c374570886c256660c4df7e7206a8e15ee24f527eef95b5e0c7eec5fc2bd10ce0b33a86cd91240f964055e5ad3979661471307ec3acfd787bf663d353ea541e844592f48a1298bb7804b47bbb6fa4d2d11fb4d49c85a0d2d4cf4cc9cbaf4814407922a43cb9ef4e8120b8194efd0", @generic="984ac40208953eca6b6ad5776962b233c6b0c85f604d879fdfa2967c13f21db3f7d18213a1d77cccc75f90321e6c790219ed1a3d4e83847838e637ac1d2796f8ffedab5e6ff334bba87e66b52769d9016fd2437e4b75c3a7c3bb2dac453354479afa0abb372faa281c5203080f08621451f114b553a554210790ef090797b611cc4b006fd0129813207b4123ee232fb54dd8cddab0b893792b00590c1fd3498f0cbe516f624683c64b371930aa32f605351921e91f790dc0ca891b", @nested={0x44d, 0x6, 0x0, 0x1, [@generic="0dff0eed26dd74a71cb370fc5577b29af24cdbe5463c668d758f7acb19ab9393e140cfc6c541c9af97aad2a13556b1e535c67fa4cb463962c051a91f863a9f493687ed91e8886fff206cdb5c5e7bba02efc227a359a4fb1a27e1f246c90dab36cecb8c1fbad3ff72be799f", @generic="58ec239cd7d162907b5cff3cfd8d0cf5b39bb1b87470a8b1ea104fec99c35054572a010fdc6e734412a07b7973bdd13aaf630ddcf6ece4773366c3fc57", @generic="81e1926ffebd609c3a6cefaaec3e12f7a740f29042f51925ed2ee57e39e138dfad8ad1ab66b17f365e1d521a58dbc4d8a92d7d066f6ea165fa224d49914e7a8adcd3926d106706e3b7ec73f6bcbc0462c2afa985b34388b9a8a08f064ae7d777d0bbf3c526ada1f496241930097beb91cc14e055c160b968164859e5172c7d26b36f02558ee50330cc43c5dc72fc149d97e3c7c2b8d1ae7390625e3cfd8c77f0174dd687276b7644364b1aa81b83b825b5a94db32d4935721e2e54bfd3c8a72d79b8da743c08d421b5f7a86d3d26ba6a1e01df9748c06e76276537f808c653559377f60862a8929b655ad1a85565e37d43c8154d53d55646", @typed={0x4, 0x7c}, @generic="69905e2efad5f11b275c6939ff802e5345a3124a7a40be223399c8aaacdbb4ee77e51961373a11f35f7d0fa8acaf3abc133244b4ffc61075464703d234d438dd2b07891e4d375c5dc510d359c325df9b5bb87eabdeccae7a5b37a6d68a9b62d3f90dbb1b72eb560bce6e217316d284415af1434aafff7b67b545ca62165156eef57620b9a7c9a2588c8b5df54a2b96c085b4b484c2547de0c5af0618cfc9c6ccb54589ffcd15145b244ce5754e49ebeb52fe8b", @generic="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", @typed={0xed, 0x83, 0x0, 0x0, @binary="73921642df0f058308078f02c77fa0fdb88953dd9ce4597ad5fb081326a9c3b0878f3e3216e1952814772310144f1716802fea87970a3624b46d8f7f173f7552264f108f674db52de330bcd99548cee7b986261f9880b4697c0cd6391721b9484b9c555712ddecdf2156bac0562fbdd50cf3a911b761c14b8a67f3ac046b50dc4db5cbeec22095e6b8e4c130d05a5142c230d46273892d20cf36c02f3fb97ce59ec7d6885f722fff5659d4a860e09a596e0f11e8b3a5ee9d501ffd7df8a78835962677a49f0077d2d87ed76545f95eeb2381822d0943d3d92949e520fdeff0e88ee80d3c587780c45d"}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=0xee01}]}, @typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@mcast1}, @generic="6a1cbbf79cf7407dc5c1503464070b310055d93c2e499949749cdeac12c7e396b035495d4993dc6b41fcf9d21d80f034325b4a5456b9c358f0c1b242adab13fd48820a5afee9516061e73abd8d46fb2e75f9ad067da7a4cbf9aaa1079dfcbac8cad04eed6698b1373712f080d44f1a70e7d18cd9b13af0806a83efec18b30ec5006778abfbac79465780321044e38a9587339c96039ca725709ca92ce2ba919b88b9b10ad0fdff11caf064d1cd6cb08850c815322be6aa", @nested={0x28, 0x6c, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x45, 0x0, 0x0, @u32=0x9}]}]}, 0x78c}, {&(0x7f0000000580)={0xcc, 0x1d, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@generic="cfec2e021e6f839034447f5716dbbcf0ffe8b43d5966aba82d5d56b14c7871a1f7c5216551eb0ccb8fa3f131835445be337989a6f87d2d9f9f392ec2eb7620c0262fcf06ccd9c737b0894b1a044d21c306ffe400f9205c9ee65159fb10f9e20fe5f90263bba28090854e09dba5960a7e48924c57bc9457cf7d438929f12ac079905c547e91775a3e493fb4e33fdb5e8c7bc90b9135cde33fe913506a54dfbf6822526d69811778a8c165a2116261", @typed={0xa, 0x7e, 0x0, 0x0, @str='^$(&$\x00'}]}, 0xcc}, {&(0x7f0000000780)={0x17c, 0x14, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x4, 0x30}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0xfffffffffffffffd}, @nested={0xff, 0x1, 0x0, 0x1, [@generic="a651b4057396956cb962e20ab017be5216b93a52496f7ebe7304491e36d7a02723875bb9a04aaf51c8fd284f348142f0bdaa6560896326f28151c17c080b35167210ac4d68f72ccb30b8733c49414a8dfcc7e0e34a2c1891ea1741414457ba7566d98146004b8851aa08c7ca9da755a6e5b730647e47b63725eeef89095afb391c2637f4e0bb813c9626574b18f8f8cd7f1b77fb04d03fa3fa2f50f3de471bbb07f81345548f2a166f7cafa2afa7a2eaaa04b6a5e7ffa18a4db7a97d2ed38c6dcb6dfdc314bc1f0109b12bb79792325a6cee7a1c2ee73490e5098f17157657c534db602b4fcca69786b49edb2aa6e0", @typed={0xc, 0x9, 0x0, 0x0, @u64=0x1}]}, @nested={0x5c, 0x36, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@multicast2}, @generic="8f5f68654796e6b94ee1b4e7b6840cd0a9a77d28f1c5b470f55bf097430c9762dbe533f92118e1b7ea6dfa6ea0260d4fa1513def7e267ab8a6a6542ca47ed3e9bb30a12879a3a7f5352925369597a48a"]}]}, 0x17c}, {&(0x7f0000000900)={0x3b0, 0x12, 0x100, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1}, @nested={0x34a, 0x30, 0x0, 0x1, [@generic="f714ca21b3df2952579ae99c4c8c461c20fa263495b80efbfa6b3bfaba274840ced82a6104dd14fdfbc04ae7ab14adb2a654987d8d847b3649cc60169a5502ca8683c7f3f9075bfc81978dcf6df540033cb12e5d46c2eb9a8268d79e221974d4467112b11b85da18cbaf70af437dcb6e381e325d20fc82fd38cc43a9fb9f9e06c20e78058fde5fad92261f72514088c9963fdc2f8741de257ea62ab6a6efdb473265faacf456a6c0e38c9ade0901014fefbc23c14c983195f4971621095bacc8c23aeb8c4c9e3a513f38f5bdaf707c6ea6", @generic="8f7c00133a46bd664f9baf1dbe27d569cb392db6d2b386", @generic="e57ac34d5c3f28b9c826c9c5eca6d31d1919793bb0395a73d9707c969f141d4c49b8fd10a6b439f4206da9110f4f75ced34767a94bd03c5c83aca2501221b1ea8bc68785104f50f3671e57f7f9670de2098e6e27902ea4e5d0942e4199df321151069bc626c12249fb3a439c5295c8803a949266c89ed9f5659a41255281a3d9bf5cd4e7fb5f68c40308eb581c3b1d4140e02b571f3b0f4bb41a906b26af9875bbcceef69f5e0e1ff574", @generic="534db26bd7963dd662e4251d08cc5f691f758bd9a596c15e35f4d199850d4a42f03ee8fdd90a373a215ec26fa06cc0e389f5f9b7960d468b7bebb50482e726f2449f635732f2b2e4ffbe0da5f1d9eeb7b3c13f33f229568ab14eff324eceb36b7050281886a0d09dfe9066a8474d447d934d2849be974c246c69fb9b5313238cd53e4282de4fa19ad9961558c603ecd84f45f3414bcb08775cadbeadf442c7d357a6a24ab230455c089b6eb1f7f48bba6a33be64177377ca90cccb201ca7479606459fe2481b66e7d9a14c9b52d42d399f210f9d5b8fb89b5d57e8f15f067d200ca8eb198d34fe49003d7d", @generic="363fc750caf4e634c4d5adc08b81fde6f181c1059b404250b5e998656a1b760bb1b959498db5a888c49a1c24cfc0a071a3fe8c39ea602017a8727abbcee964347dfa866e0a5735f73d955a1de1bfa76cb06adf28930079a5864b1a594b6296a907994384272dee71cee26b419d32239803a55da29c86665824027e08f4bf15da6992747151780842c491ea96c2fc9dde636687eff9f00cf882d9700aa44dda8b09e13b45bab028f2a5b82a569729930dc15227ebf4110072a1714295db747fa8c8aa01018b1c0d008d"]}, @generic, @nested={0x20, 0xe, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="9ed1f734b1a012454e99f3a49b1af5c29d4daa5958620ec4f2", @typed={0x9, 0x40, 0x0, 0x0, @str='&{\f&\x00'}]}, 0x3b0}, {&(0x7f0000000680)={0x18, 0x40, 0x10, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x20, 0x0, 0x0, @fd=r1}]}, 0x18}, {&(0x7f00000006c0)={0x1c, 0x31, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0xc, 0x89, 0x0, 0x0, @u64=0x8001}]}, 0x1c}], 0x6, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, r0, r0, r4, r5, r1, r6]}}], 0xd0, 0x20000040}, 0x4c810) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r9 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) getsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], []]}, 0x237) 10:44:05 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x60) unshare(0x44000600) 10:44:05 executing program 4 (fault-call:11 fault-nth:34): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:05 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], []]}, 0x237) 10:44:05 executing program 1: unshare(0x4010e00) 10:44:05 executing program 0: unshare(0x44000600) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) 10:44:05 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x12, 0x319}, 0x4c}}, 0x0) clock_gettime(0x0, &(0x7f0000001e00)) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 10:44:05 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket$key(0xf, 0x3, 0x2) recvfrom(r2, &(0x7f0000000080)=""/185, 0xb9, 0x12100, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x3, 0x2, 0x2, 0x3}}, 0x80) close(r1) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r5 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:05 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x0, 0xd0, 0x0, 0xd0, 0xd0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x1b0, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0xffffffff, '\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x3, @dev}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 10:44:06 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0xffffff75) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000200)) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4004) unshare(0x44000600) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x9, {{0xa, 0x4e20, 0x44be0aff, @loopback, 0x6}}}, 0x88) [ 835.936356][ T2586] FAULT_INJECTION: forcing a failure. [ 835.936356][ T2586] name failslab, interval 1, probability 0, space 0, times 0 [ 835.955573][ T2586] CPU: 1 PID: 2586 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 835.967011][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.977058][ T2586] Call Trace: [ 835.980343][ T2586] dump_stack+0x1b0/0x21e [ 835.984670][ T2586] ? devkmsg_release+0x11c/0x11c [ 835.989580][ T2586] ? show_regs_print_info+0x12/0x12 [ 835.994757][ T2586] ? memset+0x1f/0x40 [ 835.998722][ T2586] ? unwind_next_frame+0x1c07/0x22b0 [ 836.003997][ T2586] should_fail+0x6fb/0x860 [ 836.008385][ T2586] ? setup_fault_attr+0x2b0/0x2b0 [ 836.013382][ T2586] ? xas_create+0xe07/0x1360 [ 836.017941][ T2586] should_failslab+0x5/0x20 [ 836.022428][ T2586] kmem_cache_alloc+0x36/0x250 [ 836.027169][ T2586] xas_create+0xe07/0x1360 [ 836.031575][ T2586] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 836.037091][ T2586] xas_store+0x93/0x13b0 [ 836.041305][ T2586] ? _raw_spin_lock_irq+0xa2/0x180 [ 836.046386][ T2586] ? _raw_spin_lock_irqsave+0x1c0/0x1c0 [ 836.051915][ T2586] ? xas_load+0x46f/0x4c0 [ 836.056217][ T2586] __add_to_page_cache_locked+0x390/0x8a0 [ 836.061909][ T2586] ? add_to_page_cache_locked+0x30/0x30 [ 836.067424][ T2586] ? workingset_activation+0x150/0x150 [ 836.073463][ T2586] ? unwind_next_frame+0x1c07/0x22b0 [ 836.078740][ T2586] add_to_page_cache_lru+0x11d/0x280 [ 836.083999][ T2586] ? __add_to_page_cache_locked+0x8a0/0x8a0 [ 836.089871][ T2586] ? memset+0x1f/0x40 [ 836.093834][ T2586] ? unwind_next_frame+0x1c07/0x22b0 [ 836.099106][ T2586] ext4_mpage_readpages+0x467/0x1eb0 [ 836.104367][ T2586] ? __rcu_read_lock+0x50/0x50 [ 836.109116][ T2586] ? ext4_end_bio+0x590/0x590 [ 836.113776][ T2586] ? prep_new_page+0x11a/0x380 [ 836.118512][ T2586] ? ext4_readpages+0x8b/0x110 [ 836.123263][ T2586] ? ext4_journalled_set_page_dirty+0x30/0x30 [ 836.129303][ T2586] read_pages+0x108/0x3f0 [ 836.133608][ T2586] ? __do_page_cache_readahead+0x510/0x510 [ 836.139384][ T2586] ? find_get_entry+0x5da/0x670 [ 836.144203][ T2586] ? xa_load+0x323/0x340 [ 836.148415][ T2586] __do_page_cache_readahead+0x470/0x510 [ 836.154038][ T2586] ? read_cache_pages_invalidate_page+0x1b0/0x1b0 [ 836.160878][ T2586] ? unwind_next_frame+0x1c07/0x22b0 [ 836.166145][ T2586] ? page_cache_sync_readahead+0xa3/0x3c0 [ 836.171848][ T2586] generic_file_read_iter+0x626/0x20a0 [ 836.177284][ T2586] ? find_get_pages_range_tag+0xae0/0xae0 [ 836.183090][ T2586] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 836.188451][ T2586] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 836.194503][ T2586] ? avc_denied+0x1c0/0x1c0 [ 836.198994][ T2586] generic_file_splice_read+0x491/0x780 [ 836.204515][ T2586] ? splice_shrink_spd+0xb0/0xb0 [ 836.209427][ T2586] ? security_file_permission+0x1e9/0x300 [ 836.215114][ T2586] ? splice_shrink_spd+0xb0/0xb0 [ 836.220031][ T2586] splice_direct_to_actor+0x3cf/0xb00 [ 836.225386][ T2586] ? do_splice_direct+0x3d0/0x3d0 [ 836.230389][ T2586] ? pipe_to_sendpage+0x300/0x300 [ 836.235384][ T2586] ? security_file_permission+0x128/0x300 [ 836.241071][ T2586] do_splice_direct+0x279/0x3d0 [ 836.245897][ T2586] ? splice_direct_to_actor+0xb00/0xb00 [ 836.251421][ T2586] ? security_file_permission+0x128/0x300 [ 836.257112][ T2586] do_sendfile+0x89d/0x1110 [ 836.261586][ T2586] ? compat_writev+0x390/0x390 [ 836.266318][ T2586] ? security_file_permission+0x128/0x300 [ 836.272005][ T2586] ? vfs_write+0x427/0x4f0 [ 836.276394][ T2586] ? fput_many+0x42/0x1a0 [ 836.280694][ T2586] __x64_sys_sendfile64+0x1ae/0x220 [ 836.285874][ T2586] ? __ia32_sys_sendfile+0x240/0x240 [ 836.291142][ T2586] do_syscall_64+0xcb/0x150 [ 836.295626][ T2586] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 836.301486][ T2586] RIP: 0033:0x45de59 [ 836.305351][ T2586] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 836.324924][ T2586] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 10:44:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], []]}, 0x237) [ 836.333915][ T2586] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 836.342381][ T2586] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 836.350335][ T2586] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 836.358302][ T2586] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000022 [ 836.366248][ T2586] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@nl=@unspec, 0x80) 10:44:06 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], []]}, 0x237) 10:44:06 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x2a0c2, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='\'-,!,\\\x00', 0x7, 0x0) 10:44:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0xd1}, 0x80) 10:44:07 executing program 4 (fault-call:11 fault-nth:35): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], []]}, 0x237) 10:44:07 executing program 0: sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x5f71c83b202d1e1b, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x63}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x20000040) unshare(0x44020480) 10:44:07 executing program 1: unshare(0x44000600) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x4d0f}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r1}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) 10:44:07 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x2f, 0x7, 0x34, 0x9, 0x49, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x7821, 0x7800, 0x4, 0x2}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@remote, 0x56, r3}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x200fc0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x20000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xa8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4a01}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 10:44:07 executing program 0: rt_sigaction(0x1a, &(0x7f0000000080)={&(0x7f0000000000)="c4e3255f010f443b5b37c48119f2274281f9770000006766400f29db0f59c566440f6bf6420f0f7eb0b4f30fa6d0c4a17c10cb", 0x18000000, &(0x7f0000000040)="0f0f598ea6440f46449d8865420f42cac0f900c4417c77c42279341666410fea6000c401a1f6868700000067663667362666440fdaeb647505", {[0x2]}}, 0x0, 0x8, &(0x7f00000000c0)) unshare(0x44000600) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x400, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="6a904b0910867f64da9eb3010c9630df4f2cd629c982295b01ea058c9b9216dfcd18d7073525e554171ab047fa2e9850b09964e7208175173b8da2c14f1ec2deb2d87cec95e20c24cd", 0x49, 0xfffffffffffffff8) keyctl$describe(0x6, r0, &(0x7f0000000200)=""/250, 0xfa) 10:44:07 executing program 3: clock_gettime(0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000040), 0x4a, 0x0) [ 837.062085][ T2629] FAULT_INJECTION: forcing a failure. [ 837.062085][ T2629] name failslab, interval 1, probability 0, space 0, times 0 [ 837.079132][ T2629] CPU: 0 PID: 2629 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 837.090596][ T2629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.100650][ T2629] Call Trace: [ 837.103946][ T2629] dump_stack+0x1b0/0x21e [ 837.108267][ T2629] ? devkmsg_release+0x11c/0x11c [ 837.113443][ T2629] ? show_regs_print_info+0x12/0x12 [ 837.118627][ T2629] ? kmem_cache_alloc+0x1d5/0x250 [ 837.123628][ T2629] ? workingset_activation+0x150/0x150 [ 837.129057][ T2629] should_fail+0x6fb/0x860 [ 837.133452][ T2629] ? setup_fault_attr+0x2b0/0x2b0 [ 837.138448][ T2629] ? find_get_entry+0x5da/0x670 [ 837.143272][ T2629] ? __alloc_skb+0x88/0x4d0 [ 837.147747][ T2629] should_failslab+0x5/0x20 [ 837.152227][ T2629] kmem_cache_alloc+0x36/0x250 [ 837.156976][ T2629] __alloc_skb+0x88/0x4d0 [ 837.161290][ T2629] ? xas_nomem+0x177/0x1b0 [ 837.165683][ T2629] tipc_msg_build+0x74a/0x1b20 [ 837.170427][ T2629] ? _local_bh_enable+0x30/0x30 [ 837.175277][ T2629] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 837.181421][ T2629] tipc_sendmcast+0x92a/0xeb0 [ 837.186129][ T2629] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 837.191743][ T2629] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 837.197782][ T2629] ? wait_woken+0x250/0x250 [ 837.202256][ T2629] ? ext4_get_group_desc+0x253/0x2a0 [ 837.207512][ T2629] ? __ext4_journal_get_create_access+0x300/0x300 [ 837.213897][ T2629] ? __ext4_get_inode_loc+0x499/0x1030 [ 837.219325][ T2629] __tipc_sendmsg+0x120d/0x2d30 [ 837.224155][ T2629] ? local_bh_enable+0x20/0x20 [ 837.228889][ T2629] ? ext4_chunk_trans_blocks+0x280/0x280 [ 837.234495][ T2629] ? _raw_spin_lock_bh+0xa4/0x180 [ 837.239502][ T2629] ? _local_bh_enable+0x30/0x30 [ 837.244322][ T2629] ? memset+0x1f/0x40 [ 837.248283][ T2629] ? selinux_socket_sendmsg+0x10b/0x320 [ 837.253798][ T2629] ? lock_sock_nested+0x25a/0x320 [ 837.258892][ T2629] ? xas_load+0x468/0x4c0 [ 837.263192][ T2629] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 837.268877][ T2629] ? __ext4_journal_start_sb+0x3ad/0x420 [ 837.274483][ T2629] ? tipc_recvmsg+0x17c0/0x17c0 [ 837.279311][ T2629] tipc_sendmsg+0x51/0x70 [ 837.283613][ T2629] kernel_sendmsg+0xe2/0x120 [ 837.288174][ T2629] sock_no_sendpage+0x13f/0x1b0 [ 837.292992][ T2629] ? __receive_sock+0xb0/0xb0 [ 837.297652][ T2629] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 837.303346][ T2629] ? __receive_sock+0xb0/0xb0 [ 837.308008][ T2629] sock_sendpage+0xd0/0x120 [ 837.312494][ T2629] pipe_to_sendpage+0x23b/0x300 [ 837.317315][ T2629] ? sock_fasync+0xf0/0xf0 [ 837.321702][ T2629] ? generic_splice_sendpage+0x200/0x200 [ 837.327320][ T2629] ? atime_needs_update+0x378/0x570 [ 837.332614][ T2629] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 837.338740][ T2629] __splice_from_pipe+0x2d3/0x870 [ 837.343923][ T2629] ? generic_splice_sendpage+0x200/0x200 [ 837.349544][ T2629] generic_splice_sendpage+0x172/0x200 [ 837.354982][ T2629] ? iter_file_splice_write+0xf20/0xf20 [ 837.360505][ T2629] ? direct_splice_actor+0x25/0x120 [ 837.365679][ T2629] splice_direct_to_actor+0x496/0xb00 [ 837.371024][ T2629] ? do_splice_direct+0x3d0/0x3d0 [ 837.376972][ T2629] ? pipe_to_sendpage+0x300/0x300 [ 837.381970][ T2629] ? security_file_permission+0x128/0x300 [ 837.387665][ T2629] do_splice_direct+0x279/0x3d0 [ 837.392489][ T2629] ? splice_direct_to_actor+0xb00/0xb00 [ 837.398003][ T2629] ? security_file_permission+0x128/0x300 [ 837.403691][ T2629] do_sendfile+0x89d/0x1110 [ 837.408165][ T2629] ? compat_writev+0x390/0x390 [ 837.412910][ T2629] ? security_file_permission+0x128/0x300 [ 837.419987][ T2629] ? vfs_write+0x427/0x4f0 [ 837.424473][ T2629] ? fput_many+0x42/0x1a0 [ 837.428787][ T2629] __x64_sys_sendfile64+0x1ae/0x220 [ 837.433964][ T2629] ? __ia32_sys_sendfile+0x240/0x240 [ 837.439224][ T2629] do_syscall_64+0xcb/0x150 [ 837.443702][ T2629] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 837.449651][ T2629] RIP: 0033:0x45de59 [ 837.453517][ T2629] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 837.473098][ T2629] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 837.481476][ T2629] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 837.489415][ T2629] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 837.497356][ T2629] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 837.505382][ T2629] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000023 10:44:07 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], []]}, 0x237) 10:44:07 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2a0c2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 837.513321][ T2629] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, 0x0) 10:44:08 executing program 4 (fault-call:11 fault-nth:36): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], []]}, 0x237) 10:44:08 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x6}, &(0x7f0000000240)={0x9}, 0x0, 0x0) 10:44:08 executing program 1: unshare(0x44000600) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0xea, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x89a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x9, 0x3, 0x40, 0x2}, 0xd2, &(0x7f0000000080)={0x5, 0xf, 0xd2, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xd, 0x2}, @generic={0xb5, 0x10, 0xb, "0609cc05ae78e8b6563a8f9f43373d6756daa3651394fd92a02afadff110c71882849f172c0928a029efe798ffa09849732abac7c86467248b509bee816fbd7465ca94d61933467515773039e4967831c2630fbf4c7cf04de77eadf2016bcc3e2ce42997051686e9aead6f58a6e6ce83c549205f0469a9cdd426348cb336e4d6ef5afa26d211764d52335f21b2554d8b74ebc6a5fbc25f832c60d5da8816e9202b6ae4787c4123bf2ee0b9f2f6b6dcb1314b"}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}, {0x56, &(0x7f00000001c0)=@string={0x56, 0x3, "f579772c3ca4d9daba82cc764dbd3a2228fffb87dfcedc3df6d8ab5056f2ceb4f1b3a6fab4d678b57c0a470594e23dde8f0aefc52beca62dfeb0350a1b5a2aec7763c441efb5e7f444ff1417d62c7e4ab6a0778e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x408}}, {0xf0, &(0x7f00000002c0)=@string={0xf0, 0x3, "cf810aabaf49003c47b2ffb554e3435f383a9e53713c972b46b2828272ae4bbedadad56bb0b35d37b70436fe1aeb6132fa21876ab3554e0e5d10d94778685618d2c622c26308d66af7f609edfbf15501e72b3ce73132a4ec750d3fb1c12ada1f58350f94040d1a1f6ca4f16e72d1c220b6a4b181bce7624692b926936c2cb380ce324d5d9c8e14d9be8ad64b51c487a0725453e4cd77ccc15f0f3edd025a1115f93e924fd354044b6fa98ed9485f03f6b7eb80a8e54a4930dbcb1c6c3a8c4514e0f45e1af4f4da5738364e7965b9c42f079ce94bbe0af24bbd8981b24d07aba22e3ef295d592db4aea4b92f7126e"}}, {0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "efc2621d2e7718e7b4960a0d1f90d589a2124eebb50e94dc83c16b210f99866af1f5eb575ed00ea3e8fca6536fd68569950a7f79a70360d8c42f45ad6d99f83563853bcb68df5701200523b766e1730a3dc0eee5ed51954e419d530cbb2b66c4b4638e03b65c08bd21707f916d2df154dd1020193dec16a58825ece5a2e8bd9c342054a909a0db6165d43c66983ae9eb269733189b2b28325755d03c73cd4a239b451b3b07da2a56147736ee1ea589da3d937ae7256845ddc1a24c7b701a63e75f23fa8890ffa68e65c8a359"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_disconnect(r0) 10:44:08 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)=')\x00') 10:44:08 executing program 0: unshare(0x78040380) 10:44:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20040005, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80) [ 838.120623][ T2673] FAULT_INJECTION: forcing a failure. [ 838.120623][ T2673] name failslab, interval 1, probability 0, space 0, times 0 [ 838.141042][ T2673] CPU: 0 PID: 2673 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 838.152512][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.162654][ T2673] Call Trace: [ 838.165938][ T2673] dump_stack+0x1b0/0x21e [ 838.170250][ T2673] ? devkmsg_release+0x11c/0x11c [ 838.175172][ T2673] ? show_regs_print_info+0x12/0x12 [ 838.180354][ T2673] ? kmem_cache_alloc+0x1d5/0x250 [ 838.185348][ T2673] ? workingset_update_node+0xe7/0x150 [ 838.190776][ T2673] should_fail+0x6fb/0x860 [ 838.195159][ T2673] ? setup_fault_attr+0x2b0/0x2b0 [ 838.200149][ T2673] ? setup_fault_attr+0x2b0/0x2b0 [ 838.205141][ T2673] ? mem_cgroup_charge_statistics+0x12a/0x7d0 [ 838.211190][ T2673] ? get_mem_cgroup_from_mm+0x27b/0x2c0 [ 838.216722][ T2673] ? tipc_msg_build+0x74a/0x1b20 [ 838.221629][ T2673] should_failslab+0x5/0x20 [ 838.226102][ T2673] __kmalloc_track_caller+0x5d/0x2b0 [ 838.231355][ T2673] ? kmem_cache_alloc+0x1d5/0x250 [ 838.236348][ T2673] ? tipc_msg_build+0x74a/0x1b20 [ 838.241265][ T2673] __alloc_skb+0xd1/0x4d0 [ 838.245577][ T2673] tipc_msg_build+0x74a/0x1b20 [ 838.250325][ T2673] ? _local_bh_enable+0x30/0x30 [ 838.255146][ T2673] ? tipc_nametbl_lookup_dst_nodes+0x33f/0x380 [ 838.261278][ T2673] tipc_sendmcast+0x92a/0xeb0 [ 838.265935][ T2673] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 838.271538][ T2673] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 838.277589][ T2673] ? wait_woken+0x250/0x250 [ 838.282070][ T2673] ? ext4_get_group_desc+0x253/0x2a0 [ 838.287333][ T2673] ? __ext4_journal_get_create_access+0x300/0x300 [ 838.293725][ T2673] ? __ext4_get_inode_loc+0x499/0x1030 [ 838.299158][ T2673] __tipc_sendmsg+0x120d/0x2d30 [ 838.303997][ T2673] ? local_bh_enable+0x20/0x20 [ 838.308732][ T2673] ? ext4_chunk_trans_blocks+0x280/0x280 [ 838.314333][ T2673] ? _raw_spin_lock_bh+0xa4/0x180 [ 838.319325][ T2673] ? _local_bh_enable+0x30/0x30 [ 838.324146][ T2673] ? memset+0x1f/0x40 [ 838.328097][ T2673] ? selinux_socket_sendmsg+0x10b/0x320 [ 838.333630][ T2673] ? lock_sock_nested+0x25a/0x320 [ 838.338704][ T2673] ? xas_load+0x468/0x4c0 [ 838.343011][ T2673] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 838.348707][ T2673] ? __ext4_journal_start_sb+0x3ad/0x420 [ 838.354323][ T2673] ? tipc_recvmsg+0x17c0/0x17c0 [ 838.359159][ T2673] tipc_sendmsg+0x51/0x70 [ 838.363464][ T2673] kernel_sendmsg+0xe2/0x120 [ 838.368031][ T2673] sock_no_sendpage+0x13f/0x1b0 [ 838.372850][ T2673] ? __receive_sock+0xb0/0xb0 [ 838.377500][ T2673] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 838.383187][ T2673] ? __receive_sock+0xb0/0xb0 [ 838.387834][ T2673] sock_sendpage+0xd0/0x120 [ 838.392320][ T2673] pipe_to_sendpage+0x23b/0x300 [ 838.397150][ T2673] ? sock_fasync+0xf0/0xf0 [ 838.401546][ T2673] ? generic_splice_sendpage+0x200/0x200 [ 838.407150][ T2673] ? atime_needs_update+0x2cf/0x570 [ 838.412318][ T2673] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 838.418264][ T2673] __splice_from_pipe+0x2d3/0x870 [ 838.423268][ T2673] ? generic_splice_sendpage+0x200/0x200 [ 838.428880][ T2673] generic_splice_sendpage+0x172/0x200 [ 838.434315][ T2673] ? iter_file_splice_write+0xf20/0xf20 [ 838.439830][ T2673] ? direct_splice_actor+0x25/0x120 [ 838.444996][ T2673] splice_direct_to_actor+0x496/0xb00 [ 838.450357][ T2673] ? do_splice_direct+0x3d0/0x3d0 [ 838.455349][ T2673] ? pipe_to_sendpage+0x300/0x300 [ 838.460342][ T2673] ? security_file_permission+0x128/0x300 [ 838.466120][ T2673] do_splice_direct+0x279/0x3d0 [ 838.470940][ T2673] ? splice_direct_to_actor+0xb00/0xb00 [ 838.476458][ T2673] ? security_file_permission+0x128/0x300 [ 838.482158][ T2673] do_sendfile+0x89d/0x1110 [ 838.486633][ T2673] ? compat_writev+0x390/0x390 [ 838.491372][ T2673] ? security_file_permission+0x128/0x300 [ 838.497146][ T2673] ? vfs_write+0x427/0x4f0 [ 838.501532][ T2673] ? fput_many+0x42/0x1a0 [ 838.505844][ T2673] __x64_sys_sendfile64+0x1ae/0x220 [ 838.511011][ T2673] ? __ia32_sys_sendfile+0x240/0x240 [ 838.516265][ T2673] do_syscall_64+0xcb/0x150 [ 838.520738][ T2673] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 838.526600][ T2673] RIP: 0033:0x45de59 [ 838.530465][ T2673] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 838.550057][ T2673] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 838.558439][ T2673] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 10:44:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg$sock(r0, &(0x7f0000003900)=[{{&(0x7f0000000080)=@caif=@util={0x25, "83b992d3cc4dbcfe4f07797348461afb"}, 0x80, 0x0}}], 0x1, 0x0) 10:44:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], []]}, 0x237) 10:44:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, &(0x7f0000001d40)) [ 838.566380][ T2673] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 838.574321][ T2673] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 838.582262][ T2673] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000024 [ 838.590201][ T2673] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:08 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0xc0040, 0x0) llistxattr(&(0x7f0000007e40)='./file0\x00', &(0x7f0000007e80)=""/42, 0x2a) 10:44:08 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], []]}, 0x237) [ 838.901640][ T463] usb 2-1: new high-speed USB device number 12 using dummy_hcd 10:44:09 executing program 4 (fault-call:11 fault-nth:37): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:09 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], []]}, 0x237) 10:44:09 executing program 0: restart_syscall() unshare(0x44000600) fsopen(&(0x7f0000000040)='erofs\x00', 0x1) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x9}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000180)=""/59, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x0, {{0xe2, 0x869e, 0x2, r0}}}, 0x28) [ 839.354091][ T2704] FAULT_INJECTION: forcing a failure. [ 839.354091][ T2704] name failslab, interval 1, probability 0, space 0, times 0 [ 839.367011][ T2704] CPU: 1 PID: 2704 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 839.374403][ T463] usb 2-1: config 1 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 839.378459][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.395365][ T463] usb 2-1: config 1 interface 0 altsetting 234 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.404358][ T2704] Call Trace: [ 839.404376][ T2704] dump_stack+0x1b0/0x21e [ 839.404384][ T2704] ? devkmsg_release+0x11c/0x11c [ 839.404391][ T2704] ? show_regs_print_info+0x12/0x12 [ 839.404399][ T2704] ? kmem_cache_alloc+0x1d5/0x250 [ 839.404407][ T2704] ? workingset_activation+0x150/0x150 [ 839.404419][ T2704] should_fail+0x6fb/0x860 [ 839.420130][ T463] usb 2-1: config 1 interface 0 has no altsetting 0 [ 839.420591][ T2704] ? setup_fault_attr+0x2b0/0x2b0 [ 839.462178][ T2704] ? __alloc_skb+0x88/0x4d0 [ 839.466756][ T2704] should_failslab+0x5/0x20 [ 839.471240][ T2704] kmem_cache_alloc+0x36/0x250 [ 839.475975][ T2704] __alloc_skb+0x88/0x4d0 [ 839.480283][ T2704] ? __check_object_size+0x2e5/0x3b0 [ 839.485561][ T2704] tipc_msg_build+0xcf5/0x1b20 [ 839.490314][ T2704] tipc_sendmcast+0x92a/0xeb0 [ 839.494966][ T2704] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 839.500571][ T2704] ? memset+0x1f/0x40 [ 839.504541][ T2704] ? unwind_next_frame+0x1c07/0x22b0 [ 839.509809][ T2704] ? wait_woken+0x250/0x250 [ 839.514282][ T2704] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 839.519794][ T2704] __tipc_sendmsg+0x120d/0x2d30 [ 839.524617][ T2704] ? local_bh_enable+0x20/0x20 [ 839.529438][ T2704] ? blk_flush_plug_list+0x4b7/0x500 [ 839.534691][ T2704] ? prep_new_page+0x11a/0x380 [ 839.539421][ T2704] ? _raw_spin_lock_bh+0xa4/0x180 [ 839.544415][ T2704] ? _local_bh_enable+0x30/0x30 [ 839.549240][ T2704] ? memset+0x1f/0x40 [ 839.553214][ T2704] ? selinux_socket_sendmsg+0x10b/0x320 [ 839.558737][ T2704] ? lock_sock_nested+0x25a/0x320 [ 839.563732][ T2704] ? xas_load+0x468/0x4c0 [ 839.568042][ T2704] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 839.573742][ T2704] ? tipc_recvmsg+0x17c0/0x17c0 [ 839.578559][ T2704] tipc_sendmsg+0x51/0x70 [ 839.582872][ T2704] kernel_sendmsg+0xe2/0x120 [ 839.587429][ T2704] sock_no_sendpage+0x13f/0x1b0 [ 839.592252][ T2704] ? __receive_sock+0xb0/0xb0 [ 839.596901][ T2704] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 839.602587][ T2704] ? __receive_sock+0xb0/0xb0 [ 839.607240][ T2704] sock_sendpage+0xd0/0x120 [ 839.611727][ T2704] pipe_to_sendpage+0x23b/0x300 [ 839.616556][ T2704] ? sock_fasync+0xf0/0xf0 [ 839.620940][ T2704] ? generic_splice_sendpage+0x200/0x200 [ 839.626539][ T2704] ? atime_needs_update+0x2cf/0x570 [ 839.631706][ T2704] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 839.641221][ T2704] __splice_from_pipe+0x2d3/0x870 [ 839.646223][ T2704] ? generic_splice_sendpage+0x200/0x200 [ 839.651825][ T2704] generic_splice_sendpage+0x172/0x200 [ 839.657250][ T2704] ? iter_file_splice_write+0xf20/0xf20 [ 839.662762][ T2704] ? direct_splice_actor+0x25/0x120 [ 839.667926][ T2704] splice_direct_to_actor+0x496/0xb00 [ 839.673266][ T2704] ? do_splice_direct+0x3d0/0x3d0 [ 839.678275][ T2704] ? pipe_to_sendpage+0x300/0x300 [ 839.683270][ T2704] ? security_file_permission+0x128/0x300 [ 839.688954][ T2704] do_splice_direct+0x279/0x3d0 [ 839.694654][ T2704] ? splice_direct_to_actor+0xb00/0xb00 [ 839.700166][ T2704] ? security_file_permission+0x128/0x300 [ 839.705848][ T2704] do_sendfile+0x89d/0x1110 [ 839.710331][ T2704] ? compat_writev+0x390/0x390 [ 839.715070][ T2704] ? security_file_permission+0x128/0x300 [ 839.720771][ T2704] ? vfs_write+0x427/0x4f0 [ 839.725155][ T2704] ? fput_many+0x42/0x1a0 [ 839.729460][ T2704] __x64_sys_sendfile64+0x1ae/0x220 [ 839.734631][ T2704] ? __ia32_sys_sendfile+0x240/0x240 [ 839.739890][ T2704] do_syscall_64+0xcb/0x150 [ 839.744364][ T2704] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 839.750228][ T2704] RIP: 0033:0x45de59 [ 839.754094][ T2704] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 839.773679][ T2704] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 839.782069][ T2704] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 839.790009][ T2704] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 839.797953][ T2704] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 839.805907][ T2704] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000025 [ 839.813845][ T2704] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 839.991581][ T463] usb 2-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 840.000894][ T463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.009466][ T463] usb 2-1: Product: Щ [ 840.013984][ T463] usb 2-1: Manufacturer: 秵ⱷꐼ芺盌뵍∺Ｈ蟻컟㷜傫듎돱益횴땸੼Շએ엯ⶦ냾ਵ娛捷䇄뗯ｄ᜔Ⳗ䩾ꂶ蹷 [ 840.028897][ T463] usb 2-1: SerialNumber: Ј [ 840.651565][ T463] usbhid 2-1:1.0: can't add hid device: -71 [ 840.657598][ T463] usbhid: probe of 2-1:1.0 failed with error -71 [ 840.665803][ T463] usb 2-1: USB disconnect, device number 12 10:44:11 executing program 1: unshare(0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)="2b40313040c569c7085ebd005cd48e0755fc637a35a9ec73a5927e9d946f5f8ee4f7b59eeedd2d43577b35b42674bfa48afff265a43cd6041a523fb0b51ae670fd14508b942fab17ba364def63471c02c407b71f7c3ea9d16ed5b540487b0f293e236a9a001655f88861f8dcdd3aa4aefa7cb9f9726fd550200bf52e25ce1df7e8bae34359675e5045df2967aaadf0e6389ae03a8f3f4bdb82da4f46b76ceec9842eae214f8b71e0740939b3432fe6d7379128b36c4d68b5c394fed98cb0e7442ae635fe09f4c66115ebfc27bcd7b4f195d737312d809c3446bafb0e4653185c3a398c55a61c125855d58c") 10:44:11 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c00000012001903"], 0x9c}}, 0x0) 10:44:11 executing program 0: unshare(0x44000600) chroot(&(0x7f0000000080)='./bus\x00') openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x202002, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x142) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_mcast\x00') openat(r1, &(0x7f0000000100)='./bus\x00', 0x10000, 0x10) ioctl$CHAR_RAW_RAGET(r0, 0x1263, &(0x7f0000000040)) 10:44:11 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], []]}, 0x237) 10:44:11 executing program 4 (fault-call:11 fault-nth:38): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:11 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001200190300000000000000000000001f00"/56, @ANYRES32=0x0, @ANYBLOB="a1db471fd03fc4039e"], 0x4c}}, 0x0) 10:44:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10:44:11 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x18, 0xa, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r4}, 0x10) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:11 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0xfffffffffffffffd, 0x0) 10:44:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000], []]}, 0x237) [ 841.246718][ T2731] FAULT_INJECTION: forcing a failure. [ 841.246718][ T2731] name failslab, interval 1, probability 0, space 0, times 0 [ 841.275890][ T2731] CPU: 1 PID: 2731 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 10:44:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000], []]}, 0x237) [ 841.287354][ T2731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.297397][ T2731] Call Trace: [ 841.300779][ T2731] dump_stack+0x1b0/0x21e [ 841.305101][ T2731] ? devkmsg_release+0x11c/0x11c [ 841.310033][ T2731] ? show_regs_print_info+0x12/0x12 [ 841.315226][ T2731] ? kmem_cache_alloc+0x1d5/0x250 [ 841.320241][ T2731] ? __rcu_read_lock+0x50/0x50 [ 841.324995][ T2731] ? workingset_update_node+0xe7/0x150 [ 841.330458][ T2731] should_fail+0x6fb/0x860 [ 841.334954][ T2731] ? setup_fault_attr+0x2b0/0x2b0 [ 841.339959][ T2731] ? setup_fault_attr+0x2b0/0x2b0 [ 841.345053][ T2731] ? tipc_msg_build+0xcf5/0x1b20 [ 841.350929][ T2731] should_failslab+0x5/0x20 [ 841.355795][ T2731] __kmalloc_track_caller+0x5d/0x2b0 [ 841.361073][ T2731] ? kmem_cache_alloc+0x1d5/0x250 [ 841.366093][ T2731] ? tipc_msg_build+0xcf5/0x1b20 [ 841.371013][ T2731] __alloc_skb+0xd1/0x4d0 [ 841.375328][ T2731] tipc_msg_build+0xcf5/0x1b20 [ 841.380081][ T2731] tipc_sendmcast+0x92a/0xeb0 [ 841.384741][ T2731] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 841.390378][ T2731] ? memset+0x1f/0x40 [ 841.394337][ T2731] ? unwind_next_frame+0x1c07/0x22b0 [ 841.399612][ T2731] ? wait_woken+0x250/0x250 [ 841.404094][ T2731] ? ext4_mpage_readpages+0x1e31/0x1eb0 [ 841.409616][ T2731] __tipc_sendmsg+0x120d/0x2d30 [ 841.414448][ T2731] ? local_bh_enable+0x20/0x20 [ 841.419210][ T2731] ? blk_flush_plug_list+0x4b7/0x500 [ 841.424471][ T2731] ? prep_new_page+0x11a/0x380 [ 841.429209][ T2731] ? _raw_spin_lock_bh+0xa4/0x180 [ 841.434208][ T2731] ? _local_bh_enable+0x30/0x30 [ 841.439033][ T2731] ? memset+0x1f/0x40 [ 841.442995][ T2731] ? selinux_socket_sendmsg+0x10b/0x320 [ 841.448523][ T2731] ? lock_sock_nested+0x25a/0x320 [ 841.453579][ T2731] ? xas_load+0x468/0x4c0 [ 841.458840][ T2731] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 841.464553][ T2731] ? tipc_recvmsg+0x17c0/0x17c0 [ 841.469376][ T2731] tipc_sendmsg+0x51/0x70 [ 841.473685][ T2731] kernel_sendmsg+0xe2/0x120 [ 841.478248][ T2731] sock_no_sendpage+0x13f/0x1b0 [ 841.483077][ T2731] ? __receive_sock+0xb0/0xb0 [ 841.487754][ T2731] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 841.493471][ T2731] ? __receive_sock+0xb0/0xb0 [ 841.498126][ T2731] sock_sendpage+0xd0/0x120 [ 841.502612][ T2731] pipe_to_sendpage+0x23b/0x300 [ 841.507438][ T2731] ? sock_fasync+0xf0/0xf0 [ 841.511829][ T2731] ? generic_splice_sendpage+0x200/0x200 [ 841.517439][ T2731] ? atime_needs_update+0x2cf/0x570 [ 841.522611][ T2731] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 841.528565][ T2731] __splice_from_pipe+0x2d3/0x870 [ 841.533569][ T2731] ? generic_splice_sendpage+0x200/0x200 [ 841.539178][ T2731] generic_splice_sendpage+0x172/0x200 [ 841.544613][ T2731] ? iter_file_splice_write+0xf20/0xf20 [ 841.550237][ T2731] ? direct_splice_actor+0x25/0x120 [ 841.555422][ T2731] splice_direct_to_actor+0x496/0xb00 [ 841.560772][ T2731] ? do_splice_direct+0x3d0/0x3d0 [ 841.565771][ T2731] ? pipe_to_sendpage+0x300/0x300 [ 841.570772][ T2731] ? security_file_permission+0x128/0x300 [ 841.576481][ T2731] do_splice_direct+0x279/0x3d0 [ 841.581308][ T2731] ? splice_direct_to_actor+0xb00/0xb00 [ 841.586832][ T2731] ? security_file_permission+0x128/0x300 [ 841.592524][ T2731] do_sendfile+0x89d/0x1110 [ 841.597004][ T2731] ? compat_writev+0x390/0x390 [ 841.601743][ T2731] ? security_file_permission+0x128/0x300 [ 841.607436][ T2731] ? vfs_write+0x427/0x4f0 [ 841.611825][ T2731] ? fput_many+0x42/0x1a0 [ 841.616130][ T2731] __x64_sys_sendfile64+0x1ae/0x220 [ 841.621305][ T2731] ? __ia32_sys_sendfile+0x240/0x240 [ 841.626582][ T2731] do_syscall_64+0xcb/0x150 [ 841.631062][ T2731] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 841.636930][ T2731] RIP: 0033:0x45de59 [ 841.640803][ T2731] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 841.660394][ T2731] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 841.669748][ T2731] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 841.677719][ T2731] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 841.685665][ T2731] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 10:44:11 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) unshare(0x44000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121900, 0x42) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/149) 10:44:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, 0x0}}], 0x1, 0x0) [ 841.693620][ T2731] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000026 [ 841.701567][ T2731] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c 10:44:11 executing program 0: unshare(0x44000600) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x122b14d5}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) 10:44:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], []]}, 0x237) 10:44:11 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x100, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0xc18f) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 4 (fault-call:11 fault-nth:39): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) keyctl$invalidate(0x15, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4101, 0x1005}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "0007000000000000000000000000b1b9000200"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r1, &(0x7f00000000c0)=""/19, 0x8) 10:44:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], []]}, 0x237) 10:44:12 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000800009526ae98425cc647a98db4e2229ed3a66d0e3785ac3ec2f9418acb4ab4a54fe1bb4c74da779052c19bf8da248b1125a9fd275bb1592cea5f3abd9c6a09ffc92c2c9efdf39f2759f733b17b34108208f112054fdb02965bfaeb05f536dde5cc0b11e8392ff9c48357e19f30e8e57375eceffb681ed041c601bf9158a80ad44e422deb93c0d91306e46bfa9c985823e1868830a3d889e6e5ac6d16ba"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') unshare(0x2020300) [ 842.292188][ T2780] FAULT_INJECTION: forcing a failure. [ 842.292188][ T2780] name failslab, interval 1, probability 0, space 0, times 0 [ 842.307031][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 842.318587][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.328639][ T2780] Call Trace: [ 842.331932][ T2780] dump_stack+0x1b0/0x21e [ 842.336261][ T2780] ? devkmsg_release+0x11c/0x11c [ 842.341757][ T2780] ? show_regs_print_info+0x12/0x12 [ 842.346950][ T2780] ? 0xffffffffa0128000 [ 842.351103][ T2780] should_fail+0x6fb/0x860 [ 842.355612][ T2780] ? setup_fault_attr+0x2b0/0x2b0 [ 842.360640][ T2780] ? unwind_get_return_address+0x48/0x90 [ 842.366262][ T2780] ? arch_stack_walk+0x98/0xe0 [ 842.371019][ T2780] ? __alloc_skb+0x88/0x4d0 [ 842.375514][ T2780] should_failslab+0x5/0x20 [ 842.380013][ T2780] kmem_cache_alloc+0x36/0x250 [ 842.384775][ T2780] __alloc_skb+0x88/0x4d0 [ 842.389100][ T2780] ? __do_page_cache_readahead+0x470/0x510 [ 842.394896][ T2780] skb_copy+0xe3/0x740 [ 842.398959][ T2780] ? memcpy+0x38/0x50 [ 842.402935][ T2780] tipc_buf_append+0x461/0xad0 [ 842.407688][ T2780] ? __kasan_kmalloc+0x117/0x1b0 [ 842.412624][ T2780] ? tipc_msg_create+0x3a0/0x3a0 [ 842.417555][ T2780] ? skb_clone+0x1f4/0x370 [ 842.421965][ T2780] tipc_msg_reassemble+0x331/0x590 [ 842.427071][ T2780] ? tipc_msg_lookup_dest+0x980/0x980 [ 842.432441][ T2780] ? xas_create+0x1269/0x1360 [ 842.437121][ T2780] ? __rcu_read_lock+0x50/0x50 [ 842.441873][ T2780] ? should_fail+0x182/0x860 [ 842.446450][ T2780] ? should_fail+0x182/0x860 [ 842.451039][ T2780] ? setup_fault_attr+0x2b0/0x2b0 [ 842.456061][ T2780] tipc_mcast_xmit+0x223/0x16c0 [ 842.460909][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 842.467057][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 842.472335][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 842.477013][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 842.482639][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 842.488695][ T2780] ? wait_woken+0x250/0x250 [ 842.493187][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 842.498465][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 842.504871][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 842.510326][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 842.515172][ T2780] ? local_bh_enable+0x20/0x20 [ 842.519928][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 842.525642][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 842.530657][ T2780] ? _local_bh_enable+0x30/0x30 [ 842.535499][ T2780] ? memset+0x1f/0x40 [ 842.539471][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 842.545015][ T2780] ? lock_sock_nested+0x25a/0x320 [ 842.550033][ T2780] ? xas_load+0x468/0x4c0 [ 842.554355][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 842.560075][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 842.565701][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 842.570541][ T2780] tipc_sendmsg+0x51/0x70 [ 842.574864][ T2780] kernel_sendmsg+0xe2/0x120 [ 842.579443][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 842.584287][ T2780] ? __receive_sock+0xb0/0xb0 [ 842.588977][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 842.594682][ T2780] ? __receive_sock+0xb0/0xb0 [ 842.599352][ T2780] sock_sendpage+0xd0/0x120 [ 842.603847][ T2780] pipe_to_sendpage+0x23b/0x300 [ 842.608695][ T2780] ? sock_fasync+0xf0/0xf0 [ 842.613098][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 842.618720][ T2780] ? atime_needs_update+0x378/0x570 [ 842.623915][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 842.629893][ T2780] __splice_from_pipe+0x2d3/0x870 [ 842.635014][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 842.640643][ T2780] generic_splice_sendpage+0x172/0x200 [ 842.646091][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 842.651632][ T2780] ? direct_splice_actor+0x25/0x120 [ 842.656822][ T2780] splice_direct_to_actor+0x496/0xb00 [ 842.662187][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 842.667203][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 842.672227][ T2780] ? security_file_permission+0x128/0x300 [ 842.677935][ T2780] do_splice_direct+0x279/0x3d0 [ 842.682776][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 842.688316][ T2780] ? security_file_permission+0x128/0x300 [ 842.694025][ T2780] do_sendfile+0x89d/0x1110 [ 842.698527][ T2780] ? compat_writev+0x390/0x390 [ 842.703279][ T2780] ? security_file_permission+0x128/0x300 [ 842.708992][ T2780] ? vfs_write+0x427/0x4f0 [ 842.713581][ T2780] ? fput_many+0x42/0x1a0 [ 842.717905][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 842.723098][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 842.728393][ T2780] do_syscall_64+0xcb/0x150 [ 842.732887][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 842.738768][ T2780] RIP: 0033:0x45de59 [ 842.742669][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 842.762262][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 842.770664][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 842.778627][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 842.786594][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 842.794559][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 842.802530][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 842.816708][ T2780] tipc: Failed do clone local mcast rcv buffer [ 842.823022][ T2780] ================================================================== [ 842.831080][ T2780] BUG: KASAN: use-after-free in tipc_mcast_xmit+0x1026/0x16c0 [ 842.838525][ T2780] Read of size 8 at addr ffff8881d3abf680 by task syz-executor.4/2780 [ 842.846655][ T2780] [ 842.848983][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 842.860414][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.870457][ T2780] Call Trace: [ 842.873750][ T2780] dump_stack+0x1b0/0x21e [ 842.878073][ T2780] ? show_regs_print_info+0x12/0x12 [ 842.883256][ T2780] ? printk+0xc0/0x104 [ 842.887310][ T2780] ? printk+0xc0/0x104 [ 842.891369][ T2780] print_address_description+0x96/0x5d0 [ 842.896901][ T2780] ? devkmsg_release+0x11c/0x11c [ 842.901826][ T2780] ? skb_clone+0x1f4/0x370 [ 842.906226][ T2780] ? kfree_skb+0x1b6/0x220 [ 842.910632][ T2780] ? tipc_msg_reassemble+0x3e2/0x590 [ 842.915907][ T2780] __kasan_report+0x14b/0x1c0 [ 842.920573][ T2780] ? tipc_mcast_xmit+0x1026/0x16c0 [ 842.925671][ T2780] kasan_report+0x27/0x50 [ 842.929991][ T2780] tipc_mcast_xmit+0x1026/0x16c0 [ 842.934923][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 842.941066][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 842.946343][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 842.951014][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 842.956647][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 842.962706][ T2780] ? wait_woken+0x250/0x250 [ 842.967197][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 842.972475][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 842.978876][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 842.984328][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 842.989182][ T2780] ? local_bh_enable+0x20/0x20 [ 842.993938][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 842.999564][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 843.005532][ T2780] ? _local_bh_enable+0x30/0x30 [ 843.010537][ T2780] ? memset+0x1f/0x40 [ 843.014508][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 843.020048][ T2780] ? lock_sock_nested+0x25a/0x320 [ 843.025067][ T2780] ? xas_load+0x468/0x4c0 [ 843.029384][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 843.035108][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 843.040730][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 843.045566][ T2780] tipc_sendmsg+0x51/0x70 [ 843.049880][ T2780] kernel_sendmsg+0xe2/0x120 [ 843.054460][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 843.059301][ T2780] ? __receive_sock+0xb0/0xb0 [ 843.063970][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 843.069676][ T2780] ? __receive_sock+0xb0/0xb0 [ 843.074340][ T2780] sock_sendpage+0xd0/0x120 [ 843.078836][ T2780] pipe_to_sendpage+0x23b/0x300 [ 843.083680][ T2780] ? sock_fasync+0xf0/0xf0 [ 843.088085][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 843.093705][ T2780] ? atime_needs_update+0x378/0x570 [ 843.098906][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 843.104889][ T2780] __splice_from_pipe+0x2d3/0x870 [ 843.109911][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 843.115549][ T2780] generic_splice_sendpage+0x172/0x200 [ 843.121003][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 843.126542][ T2780] ? direct_splice_actor+0x25/0x120 [ 843.131728][ T2780] splice_direct_to_actor+0x496/0xb00 [ 843.137088][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 843.142185][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 843.147238][ T2780] ? security_file_permission+0x128/0x300 [ 843.152952][ T2780] do_splice_direct+0x279/0x3d0 [ 843.157792][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 843.163500][ T2780] ? security_file_permission+0x128/0x300 [ 843.169209][ T2780] do_sendfile+0x89d/0x1110 [ 843.173707][ T2780] ? compat_writev+0x390/0x390 [ 843.178462][ T2780] ? security_file_permission+0x128/0x300 [ 843.184176][ T2780] ? vfs_write+0x427/0x4f0 [ 843.188582][ T2780] ? fput_many+0x42/0x1a0 [ 843.192903][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 843.198090][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 843.203625][ T2780] do_syscall_64+0xcb/0x150 [ 843.208115][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.213994][ T2780] RIP: 0033:0x45de59 [ 843.217873][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.237468][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 843.245957][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 843.253920][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 843.262841][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 843.270805][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 843.278770][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 843.286825][ T2780] [ 843.289142][ T2780] Allocated by task 2780: [ 843.293466][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 843.298228][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 843.303065][ T2780] __alloc_skb+0x88/0x4d0 [ 843.307503][ T2780] tipc_msg_build+0x74a/0x1b20 [ 843.312254][ T2780] tipc_sendmcast+0x92a/0xeb0 [ 843.316916][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 843.321752][ T2780] tipc_sendmsg+0x51/0x70 [ 843.326071][ T2780] kernel_sendmsg+0xe2/0x120 [ 843.330653][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 843.335492][ T2780] sock_sendpage+0xd0/0x120 [ 843.339976][ T2780] pipe_to_sendpage+0x23b/0x300 [ 843.344810][ T2780] __splice_from_pipe+0x2d3/0x870 [ 843.350172][ T2780] generic_splice_sendpage+0x172/0x200 [ 843.355619][ T2780] splice_direct_to_actor+0x496/0xb00 [ 843.360971][ T2780] do_splice_direct+0x279/0x3d0 [ 843.365833][ T2780] do_sendfile+0x89d/0x1110 [ 843.370303][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 843.375477][ T2780] do_syscall_64+0xcb/0x150 [ 843.379949][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.385852][ T2780] [ 843.388153][ T2780] Freed by task 2780: [ 843.392106][ T2780] __kasan_slab_free+0x168/0x220 [ 843.397009][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 843.402346][ T2780] kmem_cache_free+0xac/0x5c0 [ 843.406987][ T2780] tipc_buf_append+0x2d1/0xad0 [ 843.411717][ T2780] tipc_msg_reassemble+0x331/0x590 [ 843.416793][ T2780] tipc_mcast_xmit+0x223/0x16c0 [ 843.421608][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 843.426259][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 843.431124][ T2780] tipc_sendmsg+0x51/0x70 [ 843.435425][ T2780] kernel_sendmsg+0xe2/0x120 [ 843.439986][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 843.444802][ T2780] sock_sendpage+0xd0/0x120 [ 843.449271][ T2780] pipe_to_sendpage+0x23b/0x300 [ 843.454090][ T2780] __splice_from_pipe+0x2d3/0x870 [ 843.459079][ T2780] generic_splice_sendpage+0x172/0x200 [ 843.464503][ T2780] splice_direct_to_actor+0x496/0xb00 [ 843.469844][ T2780] do_splice_direct+0x279/0x3d0 [ 843.474660][ T2780] do_sendfile+0x89d/0x1110 [ 843.479127][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 843.484292][ T2780] do_syscall_64+0xcb/0x150 [ 843.488763][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 843.494629][ T2780] [ 843.496926][ T2780] The buggy address belongs to the object at ffff8881d3abf680 [ 843.496926][ T2780] which belongs to the cache skbuff_fclone_cache of size 488 [ 843.511644][ T2780] The buggy address is located 0 bytes inside of [ 843.511644][ T2780] 488-byte region [ffff8881d3abf680, ffff8881d3abf868) [ 843.524706][ T2780] The buggy address belongs to the page: [ 843.530306][ T2780] page:ffffea00074eaf80 refcount:1 mapcount:0 mapping:ffff8881daa92780 index:0x0 compound_mapcount: 0 [ 843.541206][ T2780] flags: 0x8000000000010200(slab|head) [ 843.546668][ T2780] raw: 8000000000010200 ffffea0007409280 0000000300000003 ffff8881daa92780 [ 843.555239][ T2780] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 843.563815][ T2780] page dumped because: kasan: bad access detected [ 843.570192][ T2780] [ 843.572490][ T2780] Memory state around the buggy address: [ 843.578098][ T2780] ffff8881d3abf580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 843.586127][ T2780] ffff8881d3abf600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 10:44:12 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0xc6079f60}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 2: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x8a) close(0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) fchdir(r5) r6 = syz_io_uring_complete(0x0) io_submit(0x0, 0x7, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x3, r3, &(0x7f00000000c0)="a7134dfb632e1fad3233482636031eb9ddbdd4800352125fe03c5d4e60d39324c2e853208f983d032a205b8a18d1f65872a4e5b92618730d3c08e12a559c25129de6ee008f518394f03a5139e80d60f2743e5d3999d1075e8732f4e1bbb7418845cde70b9d86bba2805c1df7ad8ca456cbbf568e96216f860b160937b12e2c7caf559104a91989b148d2abb667", 0x8d, 0xe7, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000, 0x0, 0x0, 0x3, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000000200)="7dd1d4898b96dbec1ae2137e3b246b31f9bebfdade1e7f51692272e01314d765d3587fe46b25c98f12a8cdcc4293d7968347a4652be794a3097d921e07cce0bb8949f13b60eedb7d0af44cf27b6b6e65", 0x50, 0x773, 0x0, 0x2, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f00000002c0)="90e73c820db51d02f68cbbcd6333b3ae045a67011573b326a1f58faf879f46f9f3823a7204ddb5ff584f99f93a55b8f465a11d453abdad38a2fffbfb86c0515c1736cfc8dac660eb202f375b7c5adb357b909d", 0x53, 0x20000000000, 0x0, 0x3, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x800, r0, &(0x7f0000000380)="8c4233404e035b5f6c7938ffd2704975eb84479b08216d96e73438d933b49b3999e87580ee97e734be073affd40970ee1cbbdc0c4118aab7c3948e225f46d6f1a46050d1492c6912084f7737d91bf3be6eab5678747ce8f2", 0x58, 0x6, 0x0, 0x3, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x85, r4, &(0x7f0000000440)='\x00', 0x1, 0x7f, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x1, r5, &(0x7f00000004c0)="f6e7bcec2fc86c1898d2c621e833972fa7f6241c30c53b333d75c98047254e6d557155104036a51cfaf054dc92df0f2e617d270650943134c05b760f5d81d2aecf70dcf14b08ed7a865108094aa944907b41fb9589c7a67cb6a4b243a8784a1d7b10dbde743a1573b0a2d0937fe23ffa7acfb0850be6050e2f9657c3e553732b6b5c927e202dd03efd02ffd6dfa68b98ca171bc9ab31f572941352ebf1fb3b6fdcbf9d8f220ecc39f4cf7e89a310e8eacd7cc4c6d824442314734836ce7db7c4225d543ffc424a19c72feac49971c522bb1b8e4a43b5a4ba44747a80147f791b09b919a16b56406a0fc0aa87ebc060113509fc7d1034c89c9d", 0xf9, 0x400, 0x0, 0x1, r6}]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = open(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000002480)={{r6}, r7, 0xe, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000019dd26b7000000000000080000000000000000000000000000000000000000000000060000000000000066cd000000000000000000000000000000000000000000000000000000000000ffffff7f0000000000000000000000007f6a0000000000000100000000000000"]}, @subvolid=0xc3b3}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000780)={{r0}, r7, 0x14, @unused=[0x1f, 0x80000000, 0xffffffffffffffff, 0x2], @subvolid=0x6e0b2697}) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 10:44:12 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x81, 0x40, 0x36b, 0x79, 0x3, 0x308, 0x2}, "2a8fdc9f16c4e9e0d69ee65c39b027c0bcd8c19e9c4460", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], []]}, 0x237) 10:44:13 executing program 0: unshare(0x44000600) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:44:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4101, 0x1005}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "0007000000000000000000000000b1b9000200"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read(r1, &(0x7f00000000c0)=""/19, 0x8) 10:44:13 executing program 1: unshare(0x44000600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000040)=0xfffffffa, 0x4) [ 843.594157][ T2780] >ffff8881d3abf680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 843.602182][ T2780] ^ [ 843.606230][ T2780] ffff8881d3abf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 843.614256][ T2780] ffff8881d3abf780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 843.622280][ T2780] ================================================================== [ 843.630317][ T2780] Disabling lock debugging due to kernel taint [ 843.639428][ T2780] ================================================================== [ 843.647509][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 843.655836][ T2780] [ 843.658149][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 843.669575][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.679618][ T2780] Call Trace: [ 843.682885][ T2780] dump_stack+0x1b0/0x21e [ 843.687192][ T2780] ? bpf_put_raw_tracepoint+0x30/0x30 [ 843.692551][ T2780] ? show_regs_print_info+0x12/0x12 [ 843.697735][ T2780] ? printk+0xc0/0x104 [ 843.701770][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 843.706596][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 843.711503][ T2780] print_address_description+0x96/0x5d0 [ 843.717013][ T2780] ? devkmsg_release+0x11c/0x11c [ 843.722874][ T2780] ? __perf_event_task_sched_in+0x4ed/0x550 [ 843.728735][ T2780] ? update_load_avg+0x410/0x8f0 [ 843.733640][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 843.738455][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 843.743286][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 843.748727][ T2780] __kasan_slab_free+0x102/0x220 [ 843.753631][ T2780] ? cmp_ex_search+0x6d/0x90 [ 843.758189][ T2780] ? __start___ex_table+0x7170/0xa620 [ 843.763527][ T2780] ? bsearch+0x9b/0xc0 [ 843.767559][ T2780] ? search_extable+0xf0/0xf0 [ 843.772200][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 843.778146][ T2780] ? __stop_notes+0xc/0xc [ 843.782465][ T2780] ? search_extable+0xaf/0xf0 [ 843.787113][ T2780] ? __rcu_read_lock+0x50/0x50 [ 843.791845][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 843.796934][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 843.802900][ T2780] ? __start___ex_table+0x7170/0xa620 [ 843.808249][ T2780] ? __start___ex_table+0x7170/0xa620 [ 843.813601][ T2780] ? kasan_report+0x27/0x50 [ 843.818073][ T2780] ? ex_handler_refcount+0x130/0x170 [ 843.823325][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 843.828142][ T2780] ? __start___ex_table+0x7178/0xa620 [ 843.833479][ T2780] ? fixup_exception+0x92/0xd0 [ 843.838257][ T2780] ? do_trap+0x148/0x340 [ 843.842468][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 843.848065][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 843.854011][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 843.859959][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 843.865301][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 843.870378][ T2780] kmem_cache_free+0xac/0x5c0 [ 843.875021][ T2780] ? kasan_report+0x27/0x50 [ 843.879507][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 843.884418][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 843.890550][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 843.895805][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 843.900453][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 843.906052][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 843.912346][ T2780] ? wait_woken+0x250/0x250 [ 843.916817][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 843.922067][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 843.928447][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 843.933874][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 843.938694][ T2780] ? local_bh_enable+0x20/0x20 [ 843.943467][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 843.949078][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 843.954067][ T2780] ? _local_bh_enable+0x30/0x30 [ 843.958883][ T2780] ? memset+0x1f/0x40 [ 843.962832][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 843.968346][ T2780] ? lock_sock_nested+0x25a/0x320 [ 843.973352][ T2780] ? xas_load+0x468/0x4c0 [ 843.977648][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 843.983346][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 843.988955][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 843.993776][ T2780] tipc_sendmsg+0x51/0x70 [ 843.998080][ T2780] kernel_sendmsg+0xe2/0x120 [ 844.002734][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 844.007554][ T2780] ? __receive_sock+0xb0/0xb0 [ 844.012214][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 844.017912][ T2780] ? __receive_sock+0xb0/0xb0 [ 844.022563][ T2780] sock_sendpage+0xd0/0x120 [ 844.027037][ T2780] pipe_to_sendpage+0x23b/0x300 [ 844.031856][ T2780] ? sock_fasync+0xf0/0xf0 [ 844.036240][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 844.041865][ T2780] ? atime_needs_update+0x378/0x570 [ 844.047125][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 844.053074][ T2780] __splice_from_pipe+0x2d3/0x870 [ 844.058067][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 844.063668][ T2780] generic_splice_sendpage+0x172/0x200 [ 844.069094][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 844.074606][ T2780] ? direct_splice_actor+0x25/0x120 [ 844.079769][ T2780] splice_direct_to_actor+0x496/0xb00 [ 844.085108][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 844.090099][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 844.095098][ T2780] ? security_file_permission+0x128/0x300 [ 844.100782][ T2780] do_splice_direct+0x279/0x3d0 [ 844.105603][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 844.111119][ T2780] ? security_file_permission+0x128/0x300 [ 844.117258][ T2780] do_sendfile+0x89d/0x1110 [ 844.121750][ T2780] ? compat_writev+0x390/0x390 [ 844.126507][ T2780] ? security_file_permission+0x128/0x300 [ 844.132207][ T2780] ? vfs_write+0x427/0x4f0 [ 844.136601][ T2780] ? fput_many+0x42/0x1a0 [ 844.140905][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 844.146142][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 844.151423][ T2780] do_syscall_64+0xcb/0x150 [ 844.155901][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 844.162287][ T2780] RIP: 0033:0x45de59 [ 844.166174][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.185744][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 844.194137][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 844.202094][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 844.210035][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 844.217977][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 844.225929][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 844.233906][ T2780] [ 844.236210][ T2780] Allocated by task 2780: [ 844.240533][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 844.245267][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 844.250087][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 844.255099][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 844.260521][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 844.265944][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 844.271380][ T2780] __iterate_interfaces+0x1fc/0x390 [ 844.276557][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 844.283455][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 844.288631][ T2780] __run_hrtimer+0x405/0x7a0 [ 844.293183][ T2780] hrtimer_run_softirq+0x320/0x450 [ 844.298258][ T2780] __do_softirq+0x22e/0x569 [ 844.302727][ T2780] [ 844.305027][ T2780] Freed by task 2780: [ 844.308975][ T2780] __kasan_slab_free+0x168/0x220 [ 844.313899][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 844.319931][ T2780] kmem_cache_free+0xac/0x5c0 [ 844.324572][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 844.330350][ T2780] __iterate_interfaces+0x1fc/0x390 [ 844.336575][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 844.343606][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 844.348774][ T2780] __run_hrtimer+0x405/0x7a0 [ 844.353346][ T2780] hrtimer_run_softirq+0x320/0x450 [ 844.358437][ T2780] __do_softirq+0x22e/0x569 [ 844.362904][ T2780] [ 844.365213][ T2780] The buggy address belongs to the object at ffff8881cd80c3c0 [ 844.365213][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 844.379763][ T2780] The buggy address is located 0 bytes inside of [ 844.379763][ T2780] 240-byte region [ffff8881cd80c3c0, ffff8881cd80c4b0) [ 844.392932][ T2780] The buggy address belongs to the page: [ 844.398544][ T2780] page:ffffea0007360300 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 844.407636][ T2780] flags: 0x8000000000000200(slab) [ 844.412628][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 844.421185][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 844.429826][ T2780] page dumped because: kasan: bad access detected [ 844.436214][ T2780] [ 844.438509][ T2780] Memory state around the buggy address: [ 844.444105][ T2780] ffff8881cd80c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 844.452132][ T2780] ffff8881cd80c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 844.460172][ T2780] >ffff8881cd80c380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 844.468196][ T2780] ^ [ 844.474312][ T2780] ffff8881cd80c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 844.482346][ T2780] ffff8881cd80c480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 844.490381][ T2780] ================================================================== [ 844.501689][ T2780] ================================================================== [ 844.509763][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 844.518067][ T2780] [ 844.520399][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 844.531826][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.541942][ T2780] Call Trace: [ 844.545216][ T2780] dump_stack+0x1b0/0x21e [ 844.549525][ T2780] ? show_regs_print_info+0x12/0x12 [ 844.555733][ T2780] ? printk+0xc0/0x104 [ 844.559772][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 844.564589][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 844.569446][ T2780] print_address_description+0x96/0x5d0 [ 844.574986][ T2780] ? devkmsg_release+0x11c/0x11c [ 844.579926][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 844.584750][ T2780] ? ___preempt_schedule+0x16/0x20 [ 844.590792][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 844.595609][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 844.600427][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 844.605860][ T2780] __kasan_slab_free+0x102/0x220 [ 844.610774][ T2780] ? cmp_ex_search+0x6d/0x90 [ 844.615344][ T2780] ? __start___ex_table+0x7170/0xa620 [ 844.620788][ T2780] ? bsearch+0x9b/0xc0 [ 844.624822][ T2780] ? search_extable+0xf0/0xf0 [ 844.629464][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 844.635410][ T2780] ? __stop_notes+0xc/0xc [ 844.639728][ T2780] ? search_extable+0xaf/0xf0 [ 844.644760][ T2780] ? __rcu_read_lock+0x50/0x50 [ 844.649499][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 844.654576][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 844.660536][ T2780] ? __start___ex_table+0x7170/0xa620 [ 844.665873][ T2780] ? __start___ex_table+0x7170/0xa620 [ 844.671211][ T2780] ? kasan_report+0x27/0x50 [ 844.675694][ T2780] ? ex_handler_refcount+0x130/0x170 [ 844.680944][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 844.685759][ T2780] ? __start___ex_table+0x7178/0xa620 [ 844.691477][ T2780] ? fixup_exception+0x92/0xd0 [ 844.696235][ T2780] ? do_trap+0x148/0x340 [ 844.700452][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 844.706072][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 844.712043][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 844.718964][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 844.724309][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 844.729394][ T2780] kmem_cache_free+0xac/0x5c0 [ 844.734040][ T2780] ? kasan_report+0x27/0x50 [ 844.738530][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 844.743452][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 844.749575][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 844.754830][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 844.759478][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 844.765081][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 844.771127][ T2780] ? wait_woken+0x250/0x250 [ 844.775604][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 844.780854][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 844.787237][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 844.792677][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 844.797514][ T2780] ? local_bh_enable+0x20/0x20 [ 844.802259][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 844.807859][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 844.812859][ T2780] ? _local_bh_enable+0x30/0x30 [ 844.817704][ T2780] ? memset+0x1f/0x40 [ 844.821669][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 844.827181][ T2780] ? lock_sock_nested+0x25a/0x320 [ 844.832193][ T2780] ? xas_load+0x468/0x4c0 [ 844.836491][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 844.842176][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 844.847774][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 844.852602][ T2780] tipc_sendmsg+0x51/0x70 [ 844.856903][ T2780] kernel_sendmsg+0xe2/0x120 [ 844.861464][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 844.866280][ T2780] ? __receive_sock+0xb0/0xb0 [ 844.870943][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 844.876653][ T2780] ? __receive_sock+0xb0/0xb0 [ 844.881297][ T2780] sock_sendpage+0xd0/0x120 [ 844.885782][ T2780] pipe_to_sendpage+0x23b/0x300 [ 844.890600][ T2780] ? sock_fasync+0xf0/0xf0 [ 844.895003][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 844.900600][ T2780] ? atime_needs_update+0x378/0x570 [ 844.905769][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 844.911719][ T2780] __splice_from_pipe+0x2d3/0x870 [ 844.916714][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 844.922323][ T2780] generic_splice_sendpage+0x172/0x200 [ 844.927760][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 844.933270][ T2780] ? direct_splice_actor+0x25/0x120 [ 844.938449][ T2780] splice_direct_to_actor+0x496/0xb00 [ 844.943789][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 844.948779][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 844.953787][ T2780] ? security_file_permission+0x128/0x300 [ 844.959484][ T2780] do_splice_direct+0x279/0x3d0 [ 844.964302][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 844.969816][ T2780] ? security_file_permission+0x128/0x300 [ 844.975515][ T2780] do_sendfile+0x89d/0x1110 [ 844.979989][ T2780] ? compat_writev+0x390/0x390 [ 844.984719][ T2780] ? security_file_permission+0x128/0x300 [ 844.990406][ T2780] ? vfs_write+0x427/0x4f0 [ 844.994787][ T2780] ? fput_many+0x42/0x1a0 [ 844.999105][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 845.004273][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 845.009535][ T2780] do_syscall_64+0xcb/0x150 [ 845.014008][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.019874][ T2780] RIP: 0033:0x45de59 [ 845.023740][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.043515][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.051907][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 845.059902][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 845.068031][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 845.075985][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 845.083940][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 845.091888][ T2780] [ 845.094188][ T2780] Allocated by task 2780: [ 845.098488][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 845.103227][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 845.108067][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 845.113067][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 845.118496][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 845.123939][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 845.129367][ T2780] __iterate_interfaces+0x1fc/0x390 [ 845.134531][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 845.141431][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 845.146781][ T2780] __run_hrtimer+0x405/0x7a0 [ 845.151337][ T2780] hrtimer_run_softirq+0x320/0x450 [ 845.156596][ T2780] __do_softirq+0x22e/0x569 [ 845.161066][ T2780] [ 845.163368][ T2780] Freed by task 2780: [ 845.168296][ T2780] __kasan_slab_free+0x168/0x220 [ 845.173201][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 845.178556][ T2780] kmem_cache_free+0xac/0x5c0 [ 845.183375][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 845.188896][ T2780] __iterate_interfaces+0x1fc/0x390 [ 845.194060][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 845.200958][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 845.206132][ T2780] __run_hrtimer+0x405/0x7a0 [ 845.210687][ T2780] hrtimer_run_softirq+0x320/0x450 [ 845.215775][ T2780] __do_softirq+0x22e/0x569 [ 845.220242][ T2780] [ 845.222551][ T2780] The buggy address belongs to the object at ffff8881cd80c000 [ 845.222551][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 845.237094][ T2780] The buggy address is located 0 bytes inside of [ 845.237094][ T2780] 240-byte region [ffff8881cd80c000, ffff8881cd80c0f0) [ 845.250152][ T2780] The buggy address belongs to the page: [ 845.255753][ T2780] page:ffffea0007360300 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 845.264825][ T2780] flags: 0x8000000000000200(slab) [ 845.269822][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 845.278380][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 845.287022][ T2780] page dumped because: kasan: bad access detected [ 845.293397][ T2780] [ 845.295693][ T2780] Memory state around the buggy address: [ 845.301305][ T2780] ffff8881cd80bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.309330][ T2780] ffff8881cd80bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 845.317362][ T2780] >ffff8881cd80c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.325392][ T2780] ^ [ 845.329432][ T2780] ffff8881cd80c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 845.337956][ T2780] ffff8881cd80c100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 845.346438][ T2780] ================================================================== [ 845.357527][ T2780] ================================================================== [ 845.365619][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 845.373922][ T2780] [ 845.377199][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 845.388624][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.398649][ T2780] Call Trace: [ 845.401934][ T2780] dump_stack+0x1b0/0x21e [ 845.406233][ T2780] ? show_regs_print_info+0x12/0x12 [ 845.411399][ T2780] ? printk+0xc0/0x104 [ 845.415462][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 845.420302][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 845.425140][ T2780] print_address_description+0x96/0x5d0 [ 845.430682][ T2780] ? devkmsg_release+0x11c/0x11c [ 845.435587][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 845.440420][ T2780] ? ___preempt_schedule+0x16/0x20 [ 845.445499][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 845.450318][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 845.455136][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 845.460819][ T2780] __kasan_slab_free+0x102/0x220 [ 845.465729][ T2780] ? cmp_ex_search+0x6d/0x90 [ 845.470292][ T2780] ? __start___ex_table+0x7170/0xa620 [ 845.475650][ T2780] ? bsearch+0x9b/0xc0 [ 845.479687][ T2780] ? search_extable+0xf0/0xf0 [ 845.484332][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 845.490281][ T2780] ? __stop_notes+0xc/0xc [ 845.494594][ T2780] ? search_extable+0xaf/0xf0 [ 845.499237][ T2780] ? __rcu_read_lock+0x50/0x50 [ 845.503988][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 845.509066][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 845.515025][ T2780] ? __start___ex_table+0x7170/0xa620 [ 845.520361][ T2780] ? __start___ex_table+0x7170/0xa620 [ 845.525714][ T2780] ? kasan_report+0x27/0x50 [ 845.530193][ T2780] ? ex_handler_refcount+0x130/0x170 [ 845.535444][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 845.540261][ T2780] ? __start___ex_table+0x7178/0xa620 [ 845.545599][ T2780] ? fixup_exception+0x92/0xd0 [ 845.550333][ T2780] ? do_trap+0x148/0x340 [ 845.554543][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 845.560240][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 845.566185][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 845.572132][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 845.577473][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 845.582554][ T2780] kmem_cache_free+0xac/0x5c0 [ 845.587199][ T2780] ? kasan_report+0x27/0x50 [ 845.591675][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 845.596583][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 845.602717][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 845.607973][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 845.612709][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 845.618315][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 845.624350][ T2780] ? wait_woken+0x250/0x250 [ 845.628831][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 845.634086][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 845.640467][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 845.645892][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 845.650710][ T2780] ? local_bh_enable+0x20/0x20 [ 845.655440][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 845.661039][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 845.666030][ T2780] ? _local_bh_enable+0x30/0x30 [ 845.670847][ T2780] ? memset+0x1f/0x40 [ 845.674796][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 845.680306][ T2780] ? lock_sock_nested+0x25a/0x320 [ 845.685304][ T2780] ? xas_load+0x468/0x4c0 [ 845.689609][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 845.695294][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 845.700892][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 845.705708][ T2780] tipc_sendmsg+0x51/0x70 [ 845.710004][ T2780] kernel_sendmsg+0xe2/0x120 [ 845.714560][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 845.719392][ T2780] ? __receive_sock+0xb0/0xb0 [ 845.724039][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 845.729723][ T2780] ? __receive_sock+0xb0/0xb0 [ 845.734371][ T2780] sock_sendpage+0xd0/0x120 [ 845.738847][ T2780] pipe_to_sendpage+0x23b/0x300 [ 845.743666][ T2780] ? sock_fasync+0xf0/0xf0 [ 845.748049][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 845.753647][ T2780] ? atime_needs_update+0x378/0x570 [ 845.758812][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 845.764760][ T2780] __splice_from_pipe+0x2d3/0x870 [ 845.769770][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 845.775370][ T2780] generic_splice_sendpage+0x172/0x200 [ 845.780798][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 845.786311][ T2780] ? direct_splice_actor+0x25/0x120 [ 845.791486][ T2780] splice_direct_to_actor+0x496/0xb00 [ 845.796837][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 845.801854][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 845.806853][ T2780] ? security_file_permission+0x128/0x300 [ 845.812539][ T2780] do_splice_direct+0x279/0x3d0 [ 845.817371][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 845.822885][ T2780] ? security_file_permission+0x128/0x300 [ 845.828568][ T2780] do_sendfile+0x89d/0x1110 [ 845.833057][ T2780] ? compat_writev+0x390/0x390 [ 845.837798][ T2780] ? security_file_permission+0x128/0x300 [ 845.843500][ T2780] ? vfs_write+0x427/0x4f0 [ 845.847882][ T2780] ? fput_many+0x42/0x1a0 [ 845.852177][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 845.857342][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 845.862595][ T2780] do_syscall_64+0xcb/0x150 [ 845.867123][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 845.873008][ T2780] RIP: 0033:0x45de59 [ 845.876873][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.896467][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.904865][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 845.912821][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 845.920779][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 845.928729][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 845.936688][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 845.944675][ T2780] [ 845.946978][ T2780] Allocated by task 2780: [ 845.951277][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 845.956010][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 845.960842][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 845.965833][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 845.971256][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 845.976681][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 845.982108][ T2780] __iterate_interfaces+0x1fc/0x390 [ 845.987287][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 845.994201][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 845.999364][ T2780] __run_hrtimer+0x405/0x7a0 [ 846.004181][ T2780] hrtimer_run_softirq+0x320/0x450 [ 846.009258][ T2780] __do_softirq+0x22e/0x569 [ 846.013726][ T2780] [ 846.016035][ T2780] Freed by task 2780: [ 846.019985][ T2780] __kasan_slab_free+0x168/0x220 [ 846.024890][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 846.030228][ T2780] kmem_cache_free+0xac/0x5c0 [ 846.034872][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 846.040388][ T2780] __iterate_interfaces+0x1fc/0x390 [ 846.045553][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 846.052467][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 846.057640][ T2780] __run_hrtimer+0x405/0x7a0 [ 846.062212][ T2780] hrtimer_run_softirq+0x320/0x450 [ 846.067308][ T2780] __do_softirq+0x22e/0x569 [ 846.071777][ T2780] [ 846.074079][ T2780] The buggy address belongs to the object at ffff8881cd80c640 [ 846.074079][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 846.088619][ T2780] The buggy address is located 0 bytes inside of [ 846.088619][ T2780] 240-byte region [ffff8881cd80c640, ffff8881cd80c730) [ 846.101688][ T2780] The buggy address belongs to the page: [ 846.107297][ T2780] page:ffffea0007360300 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 846.116366][ T2780] flags: 0x8000000000000200(slab) [ 846.121359][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 846.129940][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 846.138506][ T2780] page dumped because: kasan: bad access detected [ 846.144886][ T2780] [ 846.147182][ T2780] Memory state around the buggy address: [ 846.152781][ T2780] ffff8881cd80c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 846.160809][ T2780] ffff8881cd80c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 846.168836][ T2780] >ffff8881cd80c600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 846.176870][ T2780] ^ [ 846.182999][ T2780] ffff8881cd80c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 846.191064][ T2780] ffff8881cd80c700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 846.199101][ T2780] ================================================================== [ 846.209656][ T2780] ================================================================== [ 846.217743][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 846.226049][ T2780] [ 846.228372][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 846.239797][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.249822][ T2780] Call Trace: [ 846.253092][ T2780] dump_stack+0x1b0/0x21e [ 846.257391][ T2780] ? show_regs_print_info+0x12/0x12 [ 846.262555][ T2780] ? printk+0xc0/0x104 [ 846.266590][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 846.271406][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 846.276239][ T2780] print_address_description+0x96/0x5d0 [ 846.281750][ T2780] ? devkmsg_release+0x11c/0x11c [ 846.286652][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 846.291559][ T2780] ? ___preempt_schedule+0x16/0x20 [ 846.296651][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 846.301479][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 846.306323][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 846.311754][ T2780] __kasan_slab_free+0x102/0x220 [ 846.316668][ T2780] ? cmp_ex_search+0x6d/0x90 [ 846.321227][ T2780] ? __start___ex_table+0x7170/0xa620 [ 846.326564][ T2780] ? bsearch+0x9b/0xc0 [ 846.330607][ T2780] ? search_extable+0xf0/0xf0 [ 846.335266][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 846.341221][ T2780] ? __stop_notes+0xc/0xc [ 846.345521][ T2780] ? search_extable+0xaf/0xf0 [ 846.350177][ T2780] ? __rcu_read_lock+0x50/0x50 [ 846.354922][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 846.360018][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 846.365966][ T2780] ? __start___ex_table+0x7170/0xa620 [ 846.371311][ T2780] ? __start___ex_table+0x7170/0xa620 [ 846.376654][ T2780] ? kasan_report+0x27/0x50 [ 846.381136][ T2780] ? ex_handler_refcount+0x130/0x170 [ 846.386391][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 846.391211][ T2780] ? __start___ex_table+0x7178/0xa620 [ 846.396547][ T2780] ? fixup_exception+0x92/0xd0 [ 846.401278][ T2780] ? do_trap+0x148/0x340 [ 846.405487][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 846.411086][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 846.417035][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 846.422986][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 846.428326][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 846.433403][ T2780] kmem_cache_free+0xac/0x5c0 [ 846.438046][ T2780] ? kasan_report+0x27/0x50 [ 846.442516][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 846.447437][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 846.453568][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 846.458826][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 846.463487][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 846.469089][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 846.475122][ T2780] ? wait_woken+0x250/0x250 [ 846.479603][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 846.484856][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 846.491241][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 846.496667][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 846.501486][ T2780] ? local_bh_enable+0x20/0x20 [ 846.506311][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 846.511923][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 846.516912][ T2780] ? _local_bh_enable+0x30/0x30 [ 846.521732][ T2780] ? memset+0x1f/0x40 [ 846.525696][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 846.531215][ T2780] ? lock_sock_nested+0x25a/0x320 [ 846.536205][ T2780] ? xas_load+0x468/0x4c0 [ 846.540503][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 846.546206][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 846.551809][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 846.556628][ T2780] tipc_sendmsg+0x51/0x70 [ 846.560927][ T2780] kernel_sendmsg+0xe2/0x120 [ 846.565503][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 846.570324][ T2780] ? __receive_sock+0xb0/0xb0 [ 846.574986][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 846.580671][ T2780] ? __receive_sock+0xb0/0xb0 [ 846.585317][ T2780] sock_sendpage+0xd0/0x120 [ 846.589790][ T2780] pipe_to_sendpage+0x23b/0x300 [ 846.594611][ T2780] ? sock_fasync+0xf0/0xf0 [ 846.598994][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 846.604593][ T2780] ? atime_needs_update+0x378/0x570 [ 846.609762][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 846.615721][ T2780] __splice_from_pipe+0x2d3/0x870 [ 846.620740][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 846.626345][ T2780] generic_splice_sendpage+0x172/0x200 [ 846.631774][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 846.637289][ T2780] ? direct_splice_actor+0x25/0x120 [ 846.642453][ T2780] splice_direct_to_actor+0x496/0xb00 [ 846.647793][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 846.652783][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 846.657782][ T2780] ? security_file_permission+0x128/0x300 [ 846.663486][ T2780] do_splice_direct+0x279/0x3d0 [ 846.668321][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 846.673835][ T2780] ? security_file_permission+0x128/0x300 [ 846.679519][ T2780] do_sendfile+0x89d/0x1110 [ 846.683991][ T2780] ? compat_writev+0x390/0x390 [ 846.688720][ T2780] ? security_file_permission+0x128/0x300 [ 846.694406][ T2780] ? vfs_write+0x427/0x4f0 [ 846.698801][ T2780] ? fput_many+0x42/0x1a0 [ 846.703097][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 846.708273][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 846.713525][ T2780] do_syscall_64+0xcb/0x150 [ 846.717995][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 846.723855][ T2780] RIP: 0033:0x45de59 [ 846.727743][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.747341][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 846.755737][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 846.763681][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 846.771630][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 846.779573][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 846.787518][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 846.795465][ T2780] [ 846.797777][ T2780] Allocated by task 2780: [ 846.802076][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 846.806807][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 846.811627][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 846.816632][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 846.822079][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 846.827508][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 846.832943][ T2780] __iterate_interfaces+0x1fc/0x390 [ 846.838168][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 846.845138][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 846.850318][ T2780] __run_hrtimer+0x405/0x7a0 [ 846.854881][ T2780] hrtimer_run_softirq+0x320/0x450 [ 846.859963][ T2780] __do_softirq+0x22e/0x569 [ 846.864443][ T2780] [ 846.866743][ T2780] Freed by task 2780: [ 846.870709][ T2780] __kasan_slab_free+0x168/0x220 [ 846.875614][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 846.880950][ T2780] kmem_cache_free+0xac/0x5c0 [ 846.885594][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 846.891111][ T2780] __iterate_interfaces+0x1fc/0x390 [ 846.896278][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 846.903178][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 846.908357][ T2780] __run_hrtimer+0x405/0x7a0 [ 846.912916][ T2780] hrtimer_run_softirq+0x320/0x450 [ 846.917999][ T2780] __do_softirq+0x22e/0x569 [ 846.922481][ T2780] [ 846.924783][ T2780] The buggy address belongs to the object at ffff8881c7baa3c0 [ 846.924783][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 846.939350][ T2780] The buggy address is located 0 bytes inside of [ 846.939350][ T2780] 240-byte region [ffff8881c7baa3c0, ffff8881c7baa4b0) [ 846.952419][ T2780] The buggy address belongs to the page: [ 846.958040][ T2780] page:ffffea00071eea80 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 846.967227][ T2780] flags: 0x8000000000000200(slab) [ 846.972244][ T2780] raw: 8000000000000200 0000000000000000 0000000300000001 ffff8881daa92500 [ 846.980803][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 846.989354][ T2780] page dumped because: kasan: bad access detected [ 846.995741][ T2780] [ 846.998053][ T2780] Memory state around the buggy address: [ 847.003664][ T2780] ffff8881c7baa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 847.011712][ T2780] ffff8881c7baa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 847.019741][ T2780] >ffff8881c7baa380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 847.027772][ T2780] ^ [ 847.033893][ T2780] ffff8881c7baa400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 847.041919][ T2780] ffff8881c7baa480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 847.049969][ T2780] ================================================================== [ 847.060677][ T2780] ================================================================== [ 847.068760][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 847.077063][ T2780] [ 847.079391][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 847.090954][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.100998][ T2780] Call Trace: [ 847.104268][ T2780] dump_stack+0x1b0/0x21e [ 847.108565][ T2780] ? show_regs_print_info+0x12/0x12 [ 847.113731][ T2780] ? printk+0xc0/0x104 [ 847.117767][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.122584][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.127400][ T2780] print_address_description+0x96/0x5d0 [ 847.132914][ T2780] ? devkmsg_release+0x11c/0x11c [ 847.137823][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.142644][ T2780] ? ___preempt_schedule+0x16/0x20 [ 847.147734][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.152577][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.157408][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 847.162840][ T2780] __kasan_slab_free+0x102/0x220 [ 847.167767][ T2780] ? cmp_ex_search+0x6d/0x90 [ 847.172332][ T2780] ? __start___ex_table+0x7170/0xa620 [ 847.177687][ T2780] ? bsearch+0x9b/0xc0 [ 847.181734][ T2780] ? search_extable+0xf0/0xf0 [ 847.186395][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 847.192349][ T2780] ? __stop_notes+0xc/0xc [ 847.196659][ T2780] ? search_extable+0xaf/0xf0 [ 847.201306][ T2780] ? __rcu_read_lock+0x50/0x50 [ 847.206037][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 847.211135][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 847.217081][ T2780] ? __start___ex_table+0x7170/0xa620 [ 847.222610][ T2780] ? __start___ex_table+0x7170/0xa620 [ 847.227960][ T2780] ? kasan_report+0x27/0x50 [ 847.232431][ T2780] ? ex_handler_refcount+0x130/0x170 [ 847.237696][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 847.242513][ T2780] ? __start___ex_table+0x7178/0xa620 [ 847.247850][ T2780] ? fixup_exception+0x92/0xd0 [ 847.252580][ T2780] ? do_trap+0x148/0x340 [ 847.256805][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 847.262404][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 847.268354][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 847.274321][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 847.279663][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 847.284810][ T2780] kmem_cache_free+0xac/0x5c0 [ 847.289466][ T2780] ? kasan_report+0x27/0x50 [ 847.293945][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 847.298856][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 847.304978][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 847.310262][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 847.314907][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 847.320532][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 847.326579][ T2780] ? wait_woken+0x250/0x250 [ 847.331186][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 847.336447][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 847.342830][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 847.348271][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 847.353103][ T2780] ? local_bh_enable+0x20/0x20 [ 847.357840][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 847.363466][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 847.368471][ T2780] ? _local_bh_enable+0x30/0x30 [ 847.373296][ T2780] ? memset+0x1f/0x40 [ 847.377253][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 847.382783][ T2780] ? lock_sock_nested+0x25a/0x320 [ 847.387774][ T2780] ? xas_load+0x468/0x4c0 [ 847.392071][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 847.397860][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 847.403459][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 847.408276][ T2780] tipc_sendmsg+0x51/0x70 [ 847.412606][ T2780] kernel_sendmsg+0xe2/0x120 [ 847.417164][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 847.421989][ T2780] ? __receive_sock+0xb0/0xb0 [ 847.426651][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 847.432335][ T2780] ? __receive_sock+0xb0/0xb0 [ 847.436995][ T2780] sock_sendpage+0xd0/0x120 [ 847.441467][ T2780] pipe_to_sendpage+0x23b/0x300 [ 847.446283][ T2780] ? sock_fasync+0xf0/0xf0 [ 847.450664][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 847.456283][ T2780] ? atime_needs_update+0x378/0x570 [ 847.461457][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 847.467402][ T2780] __splice_from_pipe+0x2d3/0x870 [ 847.472395][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 847.478005][ T2780] generic_splice_sendpage+0x172/0x200 [ 847.483434][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 847.488961][ T2780] ? direct_splice_actor+0x25/0x120 [ 847.494235][ T2780] splice_direct_to_actor+0x496/0xb00 [ 847.499677][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 847.504667][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 847.509660][ T2780] ? security_file_permission+0x128/0x300 [ 847.515342][ T2780] do_splice_direct+0x279/0x3d0 [ 847.520175][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 847.525690][ T2780] ? security_file_permission+0x128/0x300 [ 847.531375][ T2780] do_sendfile+0x89d/0x1110 [ 847.535846][ T2780] ? compat_writev+0x390/0x390 [ 847.541025][ T2780] ? security_file_permission+0x128/0x300 [ 847.546711][ T2780] ? vfs_write+0x427/0x4f0 [ 847.551093][ T2780] ? fput_many+0x42/0x1a0 [ 847.555404][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 847.560571][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 847.565821][ T2780] do_syscall_64+0xcb/0x150 [ 847.570292][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.576156][ T2780] RIP: 0033:0x45de59 [ 847.580019][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 847.599590][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 847.607979][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 847.615935][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 847.623875][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 847.631815][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 847.639754][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 847.647697][ T2780] [ 847.649994][ T2780] Allocated by task 2780: [ 847.654293][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 847.659025][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 847.663841][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 847.668830][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 847.674255][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 847.679699][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 847.685126][ T2780] __iterate_interfaces+0x1fc/0x390 [ 847.690288][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 847.697199][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 847.702370][ T2780] __run_hrtimer+0x405/0x7a0 [ 847.706931][ T2780] hrtimer_run_softirq+0x320/0x450 [ 847.712015][ T2780] __do_softirq+0x22e/0x569 [ 847.716482][ T2780] [ 847.718780][ T2780] Freed by task 2780: [ 847.722731][ T2780] __kasan_slab_free+0x168/0x220 [ 847.727649][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 847.733001][ T2780] kmem_cache_free+0xac/0x5c0 [ 847.737658][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 847.743172][ T2780] __iterate_interfaces+0x1fc/0x390 [ 847.748365][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 847.755264][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 847.760426][ T2780] __run_hrtimer+0x405/0x7a0 [ 847.764983][ T2780] hrtimer_run_softirq+0x320/0x450 [ 847.770059][ T2780] __do_softirq+0x22e/0x569 [ 847.774524][ T2780] [ 847.776822][ T2780] The buggy address belongs to the object at ffff8881c7baa780 [ 847.776822][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 847.791367][ T2780] The buggy address is located 0 bytes inside of [ 847.791367][ T2780] 240-byte region [ffff8881c7baa780, ffff8881c7baa870) [ 847.804428][ T2780] The buggy address belongs to the page: [ 847.810109][ T2780] page:ffffea00071eea80 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 847.819349][ T2780] flags: 0x8000000000000200(slab) [ 847.824341][ T2780] raw: 8000000000000200 0000000000000000 0000000300000001 ffff8881daa92500 [ 847.832909][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 847.841454][ T2780] page dumped because: kasan: bad access detected [ 847.847828][ T2780] [ 847.850123][ T2780] Memory state around the buggy address: [ 847.855720][ T2780] ffff8881c7baa680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 847.863761][ T2780] ffff8881c7baa700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 847.871790][ T2780] >ffff8881c7baa780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 847.879814][ T2780] ^ [ 847.883850][ T2780] ffff8881c7baa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 847.891878][ T2780] ffff8881c7baa880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 847.899917][ T2780] ================================================================== [ 847.910796][ T2780] ================================================================== [ 847.918873][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 847.927179][ T2780] [ 847.929508][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 847.940934][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.950965][ T2780] Call Trace: [ 847.954227][ T2780] dump_stack+0x1b0/0x21e [ 847.958524][ T2780] ? show_regs_print_info+0x12/0x12 [ 847.963689][ T2780] ? printk+0xc0/0x104 [ 847.967727][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.972544][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.977361][ T2780] print_address_description+0x96/0x5d0 [ 847.982873][ T2780] ? devkmsg_release+0x11c/0x11c [ 847.987781][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 847.992601][ T2780] ? ___preempt_schedule+0x16/0x20 [ 847.997679][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.002497][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.007314][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 848.012742][ T2780] __kasan_slab_free+0x102/0x220 [ 848.017645][ T2780] ? cmp_ex_search+0x6d/0x90 [ 848.022213][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.027565][ T2780] ? bsearch+0x9b/0xc0 [ 848.031605][ T2780] ? search_extable+0xf0/0xf0 [ 848.036250][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.042214][ T2780] ? __stop_notes+0xc/0xc [ 848.046512][ T2780] ? search_extable+0xaf/0xf0 [ 848.051160][ T2780] ? __rcu_read_lock+0x50/0x50 [ 848.055889][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 848.060968][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.066913][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.072249][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.077585][ T2780] ? kasan_report+0x27/0x50 [ 848.082073][ T2780] ? ex_handler_refcount+0x130/0x170 [ 848.087332][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 848.092176][ T2780] ? __start___ex_table+0x7178/0xa620 [ 848.097514][ T2780] ? fixup_exception+0x92/0xd0 [ 848.102248][ T2780] ? do_trap+0x148/0x340 [ 848.106459][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 848.112058][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.118004][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.123951][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 848.129290][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 848.134382][ T2780] kmem_cache_free+0xac/0x5c0 [ 848.139023][ T2780] ? kasan_report+0x27/0x50 [ 848.143494][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 848.148398][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 848.154537][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 848.159806][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 848.164458][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 848.170059][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 848.176131][ T2780] ? wait_woken+0x250/0x250 [ 848.180614][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 848.185874][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 848.192262][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 848.197691][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 848.202534][ T2780] ? local_bh_enable+0x20/0x20 [ 848.207267][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 848.212880][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 848.217886][ T2780] ? _local_bh_enable+0x30/0x30 [ 848.222705][ T2780] ? memset+0x1f/0x40 [ 848.226670][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 848.232196][ T2780] ? lock_sock_nested+0x25a/0x320 [ 848.237216][ T2780] ? xas_load+0x468/0x4c0 [ 848.241522][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 848.247211][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 848.252822][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 848.257644][ T2780] tipc_sendmsg+0x51/0x70 [ 848.261956][ T2780] kernel_sendmsg+0xe2/0x120 [ 848.266517][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 848.271335][ T2780] ? __receive_sock+0xb0/0xb0 [ 848.276159][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 848.281848][ T2780] ? __receive_sock+0xb0/0xb0 [ 848.286492][ T2780] sock_sendpage+0xd0/0x120 [ 848.291068][ T2780] pipe_to_sendpage+0x23b/0x300 [ 848.295894][ T2780] ? sock_fasync+0xf0/0xf0 [ 848.300279][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 848.305890][ T2780] ? atime_needs_update+0x378/0x570 [ 848.311076][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 848.317030][ T2780] __splice_from_pipe+0x2d3/0x870 [ 848.322028][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 848.327650][ T2780] generic_splice_sendpage+0x172/0x200 [ 848.333095][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 848.338634][ T2780] ? direct_splice_actor+0x25/0x120 [ 848.343956][ T2780] splice_direct_to_actor+0x496/0xb00 [ 848.349314][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 848.354313][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 848.359311][ T2780] ? security_file_permission+0x128/0x300 [ 848.365002][ T2780] do_splice_direct+0x279/0x3d0 [ 848.369837][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 848.375355][ T2780] ? security_file_permission+0x128/0x300 [ 848.381044][ T2780] do_sendfile+0x89d/0x1110 [ 848.385521][ T2780] ? compat_writev+0x390/0x390 [ 848.390254][ T2780] ? security_file_permission+0x128/0x300 [ 848.395947][ T2780] ? vfs_write+0x427/0x4f0 [ 848.400336][ T2780] ? fput_many+0x42/0x1a0 [ 848.404634][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 848.409803][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 848.415057][ T2780] do_syscall_64+0xcb/0x150 [ 848.419542][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 848.425406][ T2780] RIP: 0033:0x45de59 [ 848.429268][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 848.448838][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 848.457218][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 848.465159][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 848.473099][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 848.481058][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 848.488998][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 848.496949][ T2780] [ 848.499258][ T2780] Allocated by task 2780: [ 848.503557][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 848.508287][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 848.513106][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 848.518099][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 848.523522][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 848.528964][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 848.534390][ T2780] __iterate_interfaces+0x1fc/0x390 [ 848.539557][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 848.546459][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 848.551622][ T2780] __run_hrtimer+0x405/0x7a0 [ 848.556193][ T2780] hrtimer_run_softirq+0x320/0x450 [ 848.561273][ T2780] __do_softirq+0x22e/0x569 [ 848.565738][ T2780] [ 848.568033][ T2780] Freed by task 2780: [ 848.571982][ T2780] __kasan_slab_free+0x168/0x220 [ 848.576888][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 848.582224][ T2780] kmem_cache_free+0xac/0x5c0 [ 848.586883][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 848.592407][ T2780] __iterate_interfaces+0x1fc/0x390 [ 848.597571][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 848.604489][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 848.609658][ T2780] __run_hrtimer+0x405/0x7a0 [ 848.614213][ T2780] hrtimer_run_softirq+0x320/0x450 [ 848.619302][ T2780] __do_softirq+0x22e/0x569 [ 848.623782][ T2780] [ 848.626083][ T2780] The buggy address belongs to the object at ffff8881c7baaa00 [ 848.626083][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 848.640639][ T2780] The buggy address is located 0 bytes inside of [ 848.640639][ T2780] 240-byte region [ffff8881c7baaa00, ffff8881c7baaaf0) [ 848.653716][ T2780] The buggy address belongs to the page: [ 848.659317][ T2780] page:ffffea00071eea80 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 848.668388][ T2780] flags: 0x8000000000000200(slab) [ 848.673383][ T2780] raw: 8000000000000200 0000000000000000 0000000100000001 ffff8881daa92500 [ 848.681952][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 848.690500][ T2780] page dumped because: kasan: bad access detected [ 848.696878][ T2780] [ 848.699183][ T2780] Memory state around the buggy address: [ 848.704782][ T2780] ffff8881c7baa900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 848.712826][ T2780] ffff8881c7baa980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 848.720851][ T2780] >ffff8881c7baaa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 848.729059][ T2780] ^ [ 848.733094][ T2780] ffff8881c7baaa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 848.741123][ T2780] ffff8881c7baab00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 848.749147][ T2780] ================================================================== [ 848.759615][ T2780] ================================================================== [ 848.767695][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 848.775986][ T2780] [ 848.778291][ T2780] CPU: 0 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 848.789711][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.799735][ T2780] Call Trace: [ 848.803009][ T2780] dump_stack+0x1b0/0x21e [ 848.807312][ T2780] ? show_regs_print_info+0x12/0x12 [ 848.812481][ T2780] ? printk+0xc0/0x104 [ 848.816533][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.821353][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.826175][ T2780] print_address_description+0x96/0x5d0 [ 848.831707][ T2780] ? devkmsg_release+0x11c/0x11c [ 848.836628][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.841451][ T2780] ? ___preempt_schedule+0x16/0x20 [ 848.846530][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.851347][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 848.856168][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 848.861607][ T2780] __kasan_slab_free+0x102/0x220 [ 848.866519][ T2780] ? cmp_ex_search+0x6d/0x90 [ 848.871092][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.876433][ T2780] ? bsearch+0x9b/0xc0 [ 848.880471][ T2780] ? search_extable+0xf0/0xf0 [ 848.885120][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.891067][ T2780] ? __stop_notes+0xc/0xc [ 848.895364][ T2780] ? search_extable+0xaf/0xf0 [ 848.900010][ T2780] ? __rcu_read_lock+0x50/0x50 [ 848.904744][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 848.909822][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.915787][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.921127][ T2780] ? __start___ex_table+0x7170/0xa620 [ 848.926465][ T2780] ? kasan_report+0x27/0x50 [ 848.930946][ T2780] ? ex_handler_refcount+0x130/0x170 [ 848.936210][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 848.941028][ T2780] ? __start___ex_table+0x7178/0xa620 [ 848.946387][ T2780] ? fixup_exception+0x92/0xd0 [ 848.951120][ T2780] ? do_trap+0x148/0x340 [ 848.955342][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 848.960943][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.966902][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 848.972861][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 848.978212][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 848.983304][ T2780] kmem_cache_free+0xac/0x5c0 [ 848.987949][ T2780] ? kasan_report+0x27/0x50 [ 848.992422][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 848.997332][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 849.003465][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 849.008728][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 849.013374][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 849.018978][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 849.025018][ T2780] ? wait_woken+0x250/0x250 [ 849.029497][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 849.034774][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 849.041157][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 849.046596][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 849.051420][ T2780] ? local_bh_enable+0x20/0x20 [ 849.056242][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 849.061865][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 849.067465][ T2780] ? _local_bh_enable+0x30/0x30 [ 849.072286][ T2780] ? memset+0x1f/0x40 [ 849.076246][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 849.081775][ T2780] ? lock_sock_nested+0x25a/0x320 [ 849.086768][ T2780] ? xas_load+0x468/0x4c0 [ 849.091081][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 849.096771][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 849.102372][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 849.107198][ T2780] tipc_sendmsg+0x51/0x70 [ 849.111499][ T2780] kernel_sendmsg+0xe2/0x120 [ 849.116068][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 849.120897][ T2780] ? __receive_sock+0xb0/0xb0 [ 849.125545][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 849.131231][ T2780] ? __receive_sock+0xb0/0xb0 [ 849.135876][ T2780] sock_sendpage+0xd0/0x120 [ 849.140349][ T2780] pipe_to_sendpage+0x23b/0x300 [ 849.145179][ T2780] ? sock_fasync+0xf0/0xf0 [ 849.149563][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 849.155182][ T2780] ? atime_needs_update+0x378/0x570 [ 849.160386][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 849.166358][ T2780] __splice_from_pipe+0x2d3/0x870 [ 849.171358][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 849.177218][ T2780] generic_splice_sendpage+0x172/0x200 [ 849.182648][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 849.188164][ T2780] ? direct_splice_actor+0x25/0x120 [ 849.193342][ T2780] splice_direct_to_actor+0x496/0xb00 [ 849.198685][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 849.203676][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 849.208687][ T2780] ? security_file_permission+0x128/0x300 [ 849.214388][ T2780] do_splice_direct+0x279/0x3d0 [ 849.219222][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 849.224752][ T2780] ? security_file_permission+0x128/0x300 [ 849.230613][ T2780] do_sendfile+0x89d/0x1110 [ 849.235088][ T2780] ? compat_writev+0x390/0x390 [ 849.239820][ T2780] ? security_file_permission+0x128/0x300 [ 849.245520][ T2780] ? vfs_write+0x427/0x4f0 [ 849.249904][ T2780] ? fput_many+0x42/0x1a0 [ 849.254204][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 849.259372][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 849.264629][ T2780] do_syscall_64+0xcb/0x150 [ 849.269114][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 849.274985][ T2780] RIP: 0033:0x45de59 [ 849.279806][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 849.300074][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 849.308453][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 849.316405][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 849.324359][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 849.332330][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 849.340294][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 849.348361][ T2780] [ 849.350661][ T2780] Allocated by task 2780: [ 849.355066][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 849.360003][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 849.364838][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 849.369830][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 849.375255][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 849.380680][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 849.386106][ T2780] __iterate_interfaces+0x1fc/0x390 [ 849.391274][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 849.398174][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 849.403339][ T2780] __run_hrtimer+0x405/0x7a0 [ 849.407896][ T2780] hrtimer_run_softirq+0x320/0x450 [ 849.412974][ T2780] __do_softirq+0x22e/0x569 [ 849.417441][ T2780] [ 849.419738][ T2780] Freed by task 2780: [ 849.423691][ T2780] __kasan_slab_free+0x168/0x220 [ 849.428594][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 849.433931][ T2780] kmem_cache_free+0xac/0x5c0 [ 849.438586][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 849.444097][ T2780] __iterate_interfaces+0x1fc/0x390 [ 849.449262][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 849.456164][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 849.461332][ T2780] __run_hrtimer+0x405/0x7a0 [ 849.465890][ T2780] hrtimer_run_softirq+0x320/0x450 [ 849.470965][ T2780] __do_softirq+0x22e/0x569 [ 849.475432][ T2780] [ 849.477731][ T2780] The buggy address belongs to the object at ffff8881c7798b40 [ 849.477731][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 849.492272][ T2780] The buggy address is located 0 bytes inside of [ 849.492272][ T2780] 240-byte region [ffff8881c7798b40, ffff8881c7798c30) [ 849.505341][ T2780] The buggy address belongs to the page: [ 849.510942][ T2780] page:ffffea00071de600 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 849.520019][ T2780] flags: 0x8000000000000200(slab) [ 849.525014][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 849.533565][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 849.542112][ T2780] page dumped because: kasan: bad access detected [ 849.548492][ T2780] [ 849.550801][ T2780] Memory state around the buggy address: [ 849.556403][ T2780] ffff8881c7798a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 849.564431][ T2780] ffff8881c7798a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 849.572459][ T2780] >ffff8881c7798b00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 849.580490][ T2780] ^ [ 849.586624][ T2780] ffff8881c7798b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 849.594659][ T2780] ffff8881c7798c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 849.602686][ T2780] ================================================================== [ 849.616820][ T2780] ================================================================== [ 849.624919][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 849.633227][ T2780] [ 849.635551][ T2780] CPU: 1 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 849.646995][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.657048][ T2780] Call Trace: [ 849.660353][ T2780] dump_stack+0x1b0/0x21e [ 849.664666][ T2780] ? show_regs_print_info+0x12/0x12 [ 849.669895][ T2780] ? printk+0xc0/0x104 [ 849.673982][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 849.678798][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 849.683616][ T2780] print_address_description+0x96/0x5d0 [ 849.689128][ T2780] ? devkmsg_release+0x11c/0x11c [ 849.694033][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 849.698863][ T2780] ? ___preempt_schedule+0x16/0x20 [ 849.703952][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 849.708772][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 849.713592][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 849.719015][ T2780] __kasan_slab_free+0x102/0x220 [ 849.723917][ T2780] ? cmp_ex_search+0x6d/0x90 [ 849.728495][ T2780] ? __start___ex_table+0x7170/0xa620 [ 849.733847][ T2780] ? bsearch+0x9b/0xc0 [ 849.737891][ T2780] ? search_extable+0xf0/0xf0 [ 849.742550][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 849.748516][ T2780] ? __stop_notes+0xc/0xc [ 849.752822][ T2780] ? search_extable+0xaf/0xf0 [ 849.757478][ T2780] ? __rcu_read_lock+0x50/0x50 [ 849.762208][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 849.767285][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 849.773230][ T2780] ? __start___ex_table+0x7170/0xa620 [ 849.778678][ T2780] ? __start___ex_table+0x7170/0xa620 [ 849.784023][ T2780] ? kasan_report+0x27/0x50 [ 849.788496][ T2780] ? ex_handler_refcount+0x130/0x170 [ 849.793746][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 849.798576][ T2780] ? __start___ex_table+0x7178/0xa620 [ 849.803914][ T2780] ? fixup_exception+0x92/0xd0 [ 849.808659][ T2780] ? do_trap+0x148/0x340 [ 849.812869][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 849.818469][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 849.824429][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 849.830396][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 849.835737][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 849.840818][ T2780] kmem_cache_free+0xac/0x5c0 [ 849.845482][ T2780] ? kasan_report+0x27/0x50 [ 849.850050][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 849.854969][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 849.861249][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 849.866559][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 849.871211][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 849.876826][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 849.882860][ T2780] ? wait_woken+0x250/0x250 [ 849.887329][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 849.892596][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 849.898974][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 849.904399][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 849.909248][ T2780] ? local_bh_enable+0x20/0x20 [ 849.913988][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 849.919594][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 849.924604][ T2780] ? _local_bh_enable+0x30/0x30 [ 849.929422][ T2780] ? memset+0x1f/0x40 [ 849.933377][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 849.939862][ T2780] ? lock_sock_nested+0x25a/0x320 [ 849.944869][ T2780] ? xas_load+0x468/0x4c0 [ 849.949266][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 849.954963][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 849.960560][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 849.965383][ T2780] tipc_sendmsg+0x51/0x70 [ 849.969704][ T2780] kernel_sendmsg+0xe2/0x120 [ 849.974262][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 849.979089][ T2780] ? __receive_sock+0xb0/0xb0 [ 849.983746][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 849.989429][ T2780] ? __receive_sock+0xb0/0xb0 [ 849.994086][ T2780] sock_sendpage+0xd0/0x120 [ 849.998574][ T2780] pipe_to_sendpage+0x23b/0x300 [ 850.003390][ T2780] ? sock_fasync+0xf0/0xf0 [ 850.007771][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 850.013368][ T2780] ? atime_needs_update+0x378/0x570 [ 850.018545][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 850.024491][ T2780] __splice_from_pipe+0x2d3/0x870 [ 850.029484][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 850.035086][ T2780] generic_splice_sendpage+0x172/0x200 [ 850.040509][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 850.046022][ T2780] ? direct_splice_actor+0x25/0x120 [ 850.051198][ T2780] splice_direct_to_actor+0x496/0xb00 [ 850.056534][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 850.061537][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 850.066527][ T2780] ? security_file_permission+0x128/0x300 [ 850.072221][ T2780] do_splice_direct+0x279/0x3d0 [ 850.077048][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 850.082584][ T2780] ? security_file_permission+0x128/0x300 [ 850.088280][ T2780] do_sendfile+0x89d/0x1110 [ 850.092757][ T2780] ? compat_writev+0x390/0x390 [ 850.097486][ T2780] ? security_file_permission+0x128/0x300 [ 850.103174][ T2780] ? vfs_write+0x427/0x4f0 [ 850.107557][ T2780] ? fput_many+0x42/0x1a0 [ 850.111857][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 850.117022][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 850.122292][ T2780] do_syscall_64+0xcb/0x150 [ 850.126764][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.132623][ T2780] RIP: 0033:0x45de59 [ 850.136489][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.156063][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 850.164439][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 850.172377][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 850.180327][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 850.188265][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 850.196208][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 850.204151][ T2780] [ 850.206447][ T2780] Allocated by task 2780: [ 850.211264][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 850.216011][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 850.220831][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 850.226004][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 850.231425][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 850.236849][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 850.242292][ T2780] __iterate_interfaces+0x1fc/0x390 [ 850.247458][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 850.254357][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 850.259567][ T2780] __run_hrtimer+0x405/0x7a0 [ 850.264129][ T2780] hrtimer_run_softirq+0x320/0x450 [ 850.269207][ T2780] __do_softirq+0x22e/0x569 [ 850.273671][ T2780] [ 850.275985][ T2780] Freed by task 2780: [ 850.279943][ T2780] __kasan_slab_free+0x168/0x220 [ 850.284862][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 850.290209][ T2780] kmem_cache_free+0xac/0x5c0 [ 850.294867][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 850.300391][ T2780] __iterate_interfaces+0x1fc/0x390 [ 850.305575][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 850.312482][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 850.317646][ T2780] __run_hrtimer+0x405/0x7a0 [ 850.322203][ T2780] hrtimer_run_softirq+0x320/0x450 [ 850.327279][ T2780] __do_softirq+0x22e/0x569 [ 850.331835][ T2780] [ 850.334137][ T2780] The buggy address belongs to the object at ffff8881c77988c0 [ 850.334137][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 850.348772][ T2780] The buggy address is located 0 bytes inside of [ 850.348772][ T2780] 240-byte region [ffff8881c77988c0, ffff8881c77989b0) [ 850.361836][ T2780] The buggy address belongs to the page: [ 850.367435][ T2780] page:ffffea00071de600 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 850.376549][ T2780] flags: 0x8000000000000200(slab) [ 850.381539][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 850.390099][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 850.398645][ T2780] page dumped because: kasan: bad access detected [ 850.405019][ T2780] [ 850.407315][ T2780] Memory state around the buggy address: [ 850.412915][ T2780] ffff8881c7798780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.420940][ T2780] ffff8881c7798800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 850.428979][ T2780] >ffff8881c7798880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 850.437002][ T2780] ^ [ 850.443129][ T2780] ffff8881c7798900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.451156][ T2780] ffff8881c7798980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 850.459179][ T2780] ================================================================== [ 850.473397][ T2780] ================================================================== [ 850.481485][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 850.489790][ T2780] [ 850.492114][ T2780] CPU: 1 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 850.503538][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.513562][ T2780] Call Trace: [ 850.516820][ T2780] dump_stack+0x1b0/0x21e [ 850.521117][ T2780] ? show_regs_print_info+0x12/0x12 [ 850.526281][ T2780] ? printk+0xc0/0x104 [ 850.530335][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 850.535152][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 850.539982][ T2780] print_address_description+0x96/0x5d0 [ 850.545514][ T2780] ? devkmsg_release+0x11c/0x11c [ 850.550431][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 850.555267][ T2780] ? ___preempt_schedule+0x16/0x20 [ 850.560344][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 850.565161][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 850.569977][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 850.575408][ T2780] __kasan_slab_free+0x102/0x220 [ 850.580321][ T2780] ? cmp_ex_search+0x6d/0x90 [ 850.584888][ T2780] ? __start___ex_table+0x7170/0xa620 [ 850.590225][ T2780] ? bsearch+0x9b/0xc0 [ 850.594258][ T2780] ? search_extable+0xf0/0xf0 [ 850.598901][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 850.604856][ T2780] ? __stop_notes+0xc/0xc [ 850.609157][ T2780] ? search_extable+0xaf/0xf0 [ 850.613801][ T2780] ? __rcu_read_lock+0x50/0x50 [ 850.618531][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 850.623617][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 850.629575][ T2780] ? __start___ex_table+0x7170/0xa620 [ 850.634940][ T2780] ? __start___ex_table+0x7170/0xa620 [ 850.640291][ T2780] ? kasan_report+0x27/0x50 [ 850.644778][ T2780] ? ex_handler_refcount+0x130/0x170 [ 850.650031][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 850.654854][ T2780] ? __start___ex_table+0x7178/0xa620 [ 850.660189][ T2780] ? fixup_exception+0x92/0xd0 [ 850.664931][ T2780] ? do_trap+0x148/0x340 [ 850.669137][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 850.674748][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 850.680694][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 850.686650][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 850.691993][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 850.697089][ T2780] kmem_cache_free+0xac/0x5c0 [ 850.701743][ T2780] ? kasan_report+0x27/0x50 [ 850.706228][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 850.711139][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 850.717271][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 850.722527][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 850.727172][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 850.732786][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 850.738820][ T2780] ? wait_woken+0x250/0x250 [ 850.743292][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 850.748542][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 850.754937][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 850.760381][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 850.765200][ T2780] ? local_bh_enable+0x20/0x20 [ 850.769929][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 850.775543][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 850.780558][ T2780] ? _local_bh_enable+0x30/0x30 [ 850.785375][ T2780] ? memset+0x1f/0x40 [ 850.789333][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 850.794860][ T2780] ? lock_sock_nested+0x25a/0x320 [ 850.799850][ T2780] ? xas_load+0x468/0x4c0 [ 850.804145][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 850.809839][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 850.815437][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 850.820252][ T2780] tipc_sendmsg+0x51/0x70 [ 850.824548][ T2780] kernel_sendmsg+0xe2/0x120 [ 850.829107][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 850.833922][ T2780] ? __receive_sock+0xb0/0xb0 [ 850.838927][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 850.844636][ T2780] ? __receive_sock+0xb0/0xb0 [ 850.849283][ T2780] sock_sendpage+0xd0/0x120 [ 850.853761][ T2780] pipe_to_sendpage+0x23b/0x300 [ 850.858668][ T2780] ? sock_fasync+0xf0/0xf0 [ 850.863060][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 850.868669][ T2780] ? atime_needs_update+0x378/0x570 [ 850.873837][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 850.879794][ T2780] __splice_from_pipe+0x2d3/0x870 [ 850.884800][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 850.890413][ T2780] generic_splice_sendpage+0x172/0x200 [ 850.895839][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 850.901351][ T2780] ? direct_splice_actor+0x25/0x120 [ 850.906513][ T2780] splice_direct_to_actor+0x496/0xb00 [ 850.911950][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 850.916952][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 850.921958][ T2780] ? security_file_permission+0x128/0x300 [ 850.927654][ T2780] do_splice_direct+0x279/0x3d0 [ 850.932470][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 850.938003][ T2780] ? security_file_permission+0x128/0x300 [ 850.943727][ T2780] do_sendfile+0x89d/0x1110 [ 850.948235][ T2780] ? compat_writev+0x390/0x390 [ 850.952969][ T2780] ? security_file_permission+0x128/0x300 [ 850.958669][ T2780] ? vfs_write+0x427/0x4f0 [ 850.963073][ T2780] ? fput_many+0x42/0x1a0 [ 850.967384][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 850.972567][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 850.977819][ T2780] do_syscall_64+0xcb/0x150 [ 850.982290][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 850.988158][ T2780] RIP: 0033:0x45de59 [ 850.992021][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.011606][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 851.019981][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 851.027920][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 851.041499][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 851.049466][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 851.057411][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 851.065356][ T2780] [ 851.067660][ T2780] Allocated by task 2780: [ 851.071966][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 851.076721][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 851.081548][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 851.086903][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 851.092337][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 851.097780][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 851.103209][ T2780] __iterate_interfaces+0x1fc/0x390 [ 851.108372][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 851.115275][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 851.120478][ T2780] __run_hrtimer+0x405/0x7a0 [ 851.125047][ T2780] hrtimer_run_softirq+0x320/0x450 [ 851.130134][ T2780] __do_softirq+0x22e/0x569 [ 851.135577][ T2780] [ 851.137871][ T2780] Freed by task 2780: [ 851.141821][ T2780] __kasan_slab_free+0x168/0x220 [ 851.146723][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 851.152058][ T2780] kmem_cache_free+0xac/0x5c0 [ 851.156714][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 851.162244][ T2780] __iterate_interfaces+0x1fc/0x390 [ 851.167418][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 851.174317][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 851.179479][ T2780] __run_hrtimer+0x405/0x7a0 [ 851.184043][ T2780] hrtimer_run_softirq+0x320/0x450 [ 851.189118][ T2780] __do_softirq+0x22e/0x569 [ 851.193849][ T2780] [ 851.196171][ T2780] The buggy address belongs to the object at ffff8881c7798000 [ 851.196171][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 851.210735][ T2780] The buggy address is located 0 bytes inside of [ 851.210735][ T2780] 240-byte region [ffff8881c7798000, ffff8881c77980f0) [ 851.223803][ T2780] The buggy address belongs to the page: [ 851.229404][ T2780] page:ffffea00071de600 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 851.238471][ T2780] flags: 0x8000000000000200(slab) [ 851.243464][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 851.252028][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 851.260595][ T2780] page dumped because: kasan: bad access detected [ 851.267014][ T2780] [ 851.269315][ T2780] Memory state around the buggy address: [ 851.274915][ T2780] ffff8881c7797f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 851.282942][ T2780] ffff8881c7797f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 851.290969][ T2780] >ffff8881c7798000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 851.298993][ T2780] ^ [ 851.303045][ T2780] ffff8881c7798080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 851.311083][ T2780] ffff8881c7798100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 851.319131][ T2780] ================================================================== [ 851.329209][ T2780] ================================================================== [ 851.337380][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 851.345698][ T2780] [ 851.348069][ T2780] CPU: 1 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 851.359601][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.369753][ T2780] Call Trace: [ 851.373034][ T2780] dump_stack+0x1b0/0x21e [ 851.377334][ T2780] ? show_regs_print_info+0x12/0x12 [ 851.382546][ T2780] ? printk+0xc0/0x104 [ 851.386619][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 851.391473][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 851.396290][ T2780] print_address_description+0x96/0x5d0 [ 851.401890][ T2780] ? devkmsg_release+0x11c/0x11c [ 851.406845][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 851.411757][ T2780] ? ___preempt_schedule+0x16/0x20 [ 851.416837][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 851.421657][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 851.426907][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 851.432332][ T2780] __kasan_slab_free+0x102/0x220 [ 851.437248][ T2780] ? cmp_ex_search+0x6d/0x90 [ 851.441817][ T2780] ? __start___ex_table+0x7170/0xa620 [ 851.447152][ T2780] ? bsearch+0x9b/0xc0 [ 851.451187][ T2780] ? search_extable+0xf0/0xf0 [ 851.455830][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 851.461787][ T2780] ? __stop_notes+0xc/0xc [ 851.466090][ T2780] ? search_extable+0xaf/0xf0 [ 851.470752][ T2780] ? __rcu_read_lock+0x50/0x50 [ 851.475509][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 851.480584][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 851.486532][ T2780] ? __start___ex_table+0x7170/0xa620 [ 851.491868][ T2780] ? __start___ex_table+0x7170/0xa620 [ 851.497206][ T2780] ? kasan_report+0x27/0x50 [ 851.501688][ T2780] ? ex_handler_refcount+0x130/0x170 [ 851.506937][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 851.511754][ T2780] ? __start___ex_table+0x7178/0xa620 [ 851.517091][ T2780] ? fixup_exception+0x92/0xd0 [ 851.521823][ T2780] ? do_trap+0x148/0x340 [ 851.526043][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 851.531650][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 851.537604][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 851.543551][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 851.548903][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 851.553979][ T2780] kmem_cache_free+0xac/0x5c0 [ 851.558620][ T2780] ? kasan_report+0x27/0x50 [ 851.563090][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 851.568001][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 851.574126][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 851.579383][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 851.584039][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 851.589639][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 851.595670][ T2780] ? wait_woken+0x250/0x250 [ 851.600158][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 851.607145][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 851.613523][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 851.618948][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 851.623770][ T2780] ? local_bh_enable+0x20/0x20 [ 851.628499][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 851.634097][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 851.639084][ T2780] ? _local_bh_enable+0x30/0x30 [ 851.643913][ T2780] ? memset+0x1f/0x40 [ 851.647861][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 851.653373][ T2780] ? lock_sock_nested+0x25a/0x320 [ 851.658450][ T2780] ? xas_load+0x468/0x4c0 [ 851.662757][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 851.668441][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 851.674041][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 851.678854][ T2780] tipc_sendmsg+0x51/0x70 [ 851.683155][ T2780] kernel_sendmsg+0xe2/0x120 [ 851.687720][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 851.692537][ T2780] ? __receive_sock+0xb0/0xb0 [ 851.697180][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 851.702865][ T2780] ? __receive_sock+0xb0/0xb0 [ 851.707516][ T2780] sock_sendpage+0xd0/0x120 [ 851.711996][ T2780] pipe_to_sendpage+0x23b/0x300 [ 851.717071][ T2780] ? sock_fasync+0xf0/0xf0 [ 851.721461][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 851.727058][ T2780] ? atime_needs_update+0x378/0x570 [ 851.732309][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 851.738254][ T2780] __splice_from_pipe+0x2d3/0x870 [ 851.743594][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 851.749194][ T2780] generic_splice_sendpage+0x172/0x200 [ 851.755574][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 851.761084][ T2780] ? direct_splice_actor+0x25/0x120 [ 851.766245][ T2780] splice_direct_to_actor+0x496/0xb00 [ 851.771581][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 851.776575][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 851.781756][ T2780] ? security_file_permission+0x128/0x300 [ 851.787636][ T2780] do_splice_direct+0x279/0x3d0 [ 851.792507][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 851.798030][ T2780] ? security_file_permission+0x128/0x300 [ 851.803752][ T2780] do_sendfile+0x89d/0x1110 [ 851.808224][ T2780] ? compat_writev+0x390/0x390 [ 851.813736][ T2780] ? security_file_permission+0x128/0x300 [ 851.819425][ T2780] ? vfs_write+0x427/0x4f0 [ 851.823807][ T2780] ? fput_many+0x42/0x1a0 [ 851.828100][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 851.833276][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 851.838529][ T2780] do_syscall_64+0xcb/0x150 [ 851.843002][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 851.848860][ T2780] RIP: 0033:0x45de59 [ 851.852722][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.872294][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 851.880782][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 851.888724][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 851.896674][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 851.904613][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 851.912555][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 851.920506][ T2780] [ 851.922804][ T2780] Allocated by task 2780: [ 851.927111][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 851.931840][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 851.936654][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 851.941655][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 851.947075][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 851.952498][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 851.957934][ T2780] __iterate_interfaces+0x1fc/0x390 [ 851.963099][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 851.969997][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 851.975172][ T2780] __run_hrtimer+0x405/0x7a0 [ 851.979737][ T2780] hrtimer_run_softirq+0x320/0x450 [ 851.984817][ T2780] __do_softirq+0x22e/0x569 [ 851.989319][ T2780] [ 851.991633][ T2780] Freed by task 2780: [ 851.995594][ T2780] __kasan_slab_free+0x168/0x220 [ 852.000517][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 852.005853][ T2780] kmem_cache_free+0xac/0x5c0 [ 852.010522][ T2780] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 852.016045][ T2780] __iterate_interfaces+0x1fc/0x390 [ 852.021207][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 852.028109][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 852.033283][ T2780] __run_hrtimer+0x405/0x7a0 [ 852.037836][ T2780] hrtimer_run_softirq+0x320/0x450 [ 852.042910][ T2780] __do_softirq+0x22e/0x569 [ 852.047373][ T2780] [ 852.049669][ T2780] The buggy address belongs to the object at ffff8881c7798280 [ 852.049669][ T2780] which belongs to the cache skbuff_head_cache of size 240 [ 852.064205][ T2780] The buggy address is located 0 bytes inside of [ 852.064205][ T2780] 240-byte region [ffff8881c7798280, ffff8881c7798370) [ 852.077301][ T2780] The buggy address belongs to the page: [ 852.082905][ T2780] page:ffffea00071de600 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 852.092061][ T2780] flags: 0x8000000000000200(slab) [ 852.097062][ T2780] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 852.106131][ T2780] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 852.114690][ T2780] page dumped because: kasan: bad access detected [ 852.121078][ T2780] [ 852.123547][ T2780] Memory state around the buggy address: [ 852.129167][ T2780] ffff8881c7798180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 852.137199][ T2780] ffff8881c7798200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 852.145229][ T2780] >ffff8881c7798280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 852.153254][ T2780] ^ [ 852.157286][ T2780] ffff8881c7798300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 852.165343][ T2780] ffff8881c7798380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 852.173394][ T2780] ================================================================== [ 852.183471][ T2780] ================================================================== [ 852.191588][ T2780] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 852.199894][ T2780] [ 852.202217][ T2780] CPU: 1 PID: 2780 Comm: syz-executor.4 Tainted: G B W 5.4.71-syzkaller-00273-g0dd22903aee4 #0 [ 852.213667][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.223702][ T2780] Call Trace: [ 852.226985][ T2780] dump_stack+0x1b0/0x21e [ 852.231283][ T2780] ? show_regs_print_info+0x12/0x12 [ 852.236458][ T2780] ? printk+0xc0/0x104 [ 852.240492][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 852.245308][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 852.250123][ T2780] print_address_description+0x96/0x5d0 [ 852.255635][ T2780] ? devkmsg_release+0x11c/0x11c [ 852.260547][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 852.265375][ T2780] ? ___preempt_schedule+0x16/0x20 [ 852.270450][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 852.275267][ T2780] ? kmem_cache_free+0xac/0x5c0 [ 852.280095][ T2780] kasan_report_invalid_free+0x54/0xc0 [ 852.285526][ T2780] __kasan_slab_free+0x102/0x220 [ 852.290445][ T2780] ? cmp_ex_search+0x6d/0x90 [ 852.295002][ T2780] ? __start___ex_table+0x7170/0xa620 [ 852.300355][ T2780] ? bsearch+0x9b/0xc0 [ 852.304392][ T2780] ? search_extable+0xf0/0xf0 [ 852.309050][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 852.315006][ T2780] ? __stop_notes+0xc/0xc [ 852.319304][ T2780] ? search_extable+0xaf/0xf0 [ 852.324645][ T2780] ? __rcu_read_lock+0x50/0x50 [ 852.329375][ T2780] ? trim_init_extable+0x3e0/0x3e0 [ 852.334700][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 852.340684][ T2780] ? __start___ex_table+0x7170/0xa620 [ 852.346034][ T2780] ? __start___ex_table+0x7170/0xa620 [ 852.351387][ T2780] ? kasan_report+0x27/0x50 [ 852.355859][ T2780] ? ex_handler_refcount+0x130/0x170 [ 852.361109][ T2780] ? ex_handler_fault+0xa0/0xa0 [ 852.365944][ T2780] ? __start___ex_table+0x7178/0xa620 [ 852.371281][ T2780] ? fixup_exception+0x92/0xd0 [ 852.376008][ T2780] ? do_trap+0x148/0x340 [ 852.380215][ T2780] ? schedule_preempt_disabled+0x20/0x20 [ 852.385812][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 852.391763][ T2780] ? csum_partial_copy_generic+0x1fcc/0x3f00 [ 852.397709][ T2780] slab_free_freelist_hook+0xd0/0x150 [ 852.403049][ T2780] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 852.408126][ T2780] kmem_cache_free+0xac/0x5c0 [ 852.412769][ T2780] ? kasan_report+0x27/0x50 [ 852.417256][ T2780] tipc_mcast_xmit+0x10a8/0x16c0 [ 852.422165][ T2780] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 852.428284][ T2780] ? __check_object_size+0x2e5/0x3b0 [ 852.433537][ T2780] tipc_sendmcast+0xc00/0xeb0 [ 852.438179][ T2780] ? tipc_send_group_unicast+0x7d0/0x7d0 [ 852.443779][ T2780] ? __ext4_handle_dirty_metadata+0x2d8/0x900 [ 852.449819][ T2780] ? wait_woken+0x250/0x250 [ 852.454288][ T2780] ? ext4_get_group_desc+0x253/0x2a0 [ 852.459547][ T2780] ? __ext4_journal_get_create_access+0x300/0x300 [ 852.465926][ T2780] ? __ext4_get_inode_loc+0x499/0x1030 [ 852.471366][ T2780] __tipc_sendmsg+0x120d/0x2d30 [ 852.476186][ T2780] ? local_bh_enable+0x20/0x20 [ 852.480929][ T2780] ? ext4_chunk_trans_blocks+0x280/0x280 [ 852.486525][ T2780] ? _raw_spin_lock_bh+0xa4/0x180 [ 852.491519][ T2780] ? _local_bh_enable+0x30/0x30 [ 852.496342][ T2780] ? memset+0x1f/0x40 [ 852.500291][ T2780] ? selinux_socket_sendmsg+0x10b/0x320 [ 852.505805][ T2780] ? lock_sock_nested+0x25a/0x320 [ 852.510808][ T2780] ? xas_load+0x468/0x4c0 [ 852.515101][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 852.520786][ T2780] ? __ext4_journal_start_sb+0x3ad/0x420 [ 852.526383][ T2780] ? tipc_recvmsg+0x17c0/0x17c0 [ 852.531199][ T2780] tipc_sendmsg+0x51/0x70 [ 852.535496][ T2780] kernel_sendmsg+0xe2/0x120 [ 852.540057][ T2780] sock_no_sendpage+0x13f/0x1b0 [ 852.544891][ T2780] ? __receive_sock+0xb0/0xb0 [ 852.549536][ T2780] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 852.555231][ T2780] ? __receive_sock+0xb0/0xb0 [ 852.559888][ T2780] sock_sendpage+0xd0/0x120 [ 852.564360][ T2780] pipe_to_sendpage+0x23b/0x300 [ 852.569177][ T2780] ? sock_fasync+0xf0/0xf0 [ 852.573556][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 852.579172][ T2780] ? atime_needs_update+0x378/0x570 [ 852.584336][ T2780] ? page_cache_pipe_buf_confirm+0x113/0x210 [ 852.590281][ T2780] __splice_from_pipe+0x2d3/0x870 [ 852.595274][ T2780] ? generic_splice_sendpage+0x200/0x200 [ 852.600871][ T2780] generic_splice_sendpage+0x172/0x200 [ 852.606295][ T2780] ? iter_file_splice_write+0xf20/0xf20 [ 852.611816][ T2780] ? direct_splice_actor+0x25/0x120 [ 852.616980][ T2780] splice_direct_to_actor+0x496/0xb00 [ 852.622318][ T2780] ? do_splice_direct+0x3d0/0x3d0 [ 852.627311][ T2780] ? pipe_to_sendpage+0x300/0x300 [ 852.632322][ T2780] ? security_file_permission+0x128/0x300 [ 852.638015][ T2780] do_splice_direct+0x279/0x3d0 [ 852.642835][ T2780] ? splice_direct_to_actor+0xb00/0xb00 [ 852.648346][ T2780] ? security_file_permission+0x128/0x300 [ 852.654043][ T2780] do_sendfile+0x89d/0x1110 [ 852.658514][ T2780] ? compat_writev+0x390/0x390 [ 852.663244][ T2780] ? security_file_permission+0x128/0x300 [ 852.668942][ T2780] ? vfs_write+0x427/0x4f0 [ 852.673324][ T2780] ? fput_many+0x42/0x1a0 [ 852.677632][ T2780] __x64_sys_sendfile64+0x1ae/0x220 [ 852.682797][ T2780] ? __ia32_sys_sendfile+0x240/0x240 [ 852.688048][ T2780] do_syscall_64+0xcb/0x150 [ 852.692519][ T2780] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 852.698378][ T2780] RIP: 0033:0x45de59 [ 852.702240][ T2780] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.721995][ T2780] RSP: 002b:00007f01309ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 852.730391][ T2780] RAX: ffffffffffffffda RBX: 0000000000027ec0 RCX: 000000000045de59 [ 852.738347][ T2780] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 852.746297][ T2780] RBP: 00007f01309ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 852.754248][ T2780] R10: 0000000000200fc0 R11: 0000000000000246 R12: 0000000000000027 [ 852.762200][ T2780] R13: 00007ffe3e93871f R14: 00007f01309ed9c0 R15: 000000000118bf2c [ 852.770160][ T2780] [ 852.772458][ T2780] Allocated by task 2780: [ 852.776755][ T2780] __kasan_kmalloc+0x117/0x1b0 [ 852.781485][ T2780] kmem_cache_alloc+0x1d5/0x250 [ 852.786311][ T2780] __netdev_alloc_skb+0x1d8/0x710 [ 852.791304][ T2780] __ieee80211_beacon_get+0x628/0x11b0 [ 852.796727][ T2780] ieee80211_beacon_get_tim+0xb7/0x500 [ 852.802171][ T2780] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 852.807594][ T2780] __iterate_interfaces+0x1fc/0x390 [ 852.812767][ T2780] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 852.819686][ T2780] mac80211_hwsim_beacon+0xa1/0x180 [ 852.824859][ T2780] __run_hrtimer+0x405/0x7a0 [ 852.829512][ T2780] hrtimer_run_softirq+0x320/0x450 [ 852.834603][ T2780] __do_softirq+0x22e/0x569