0x0, 0x3}]}}}}}}, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x2, 0x200, 0x8, 0x2, 0x0, 0xffffff81}) 17:12:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)="bb2f6e696e65ddc656a4be1ed410e0cd39b9ab50c6c3eaddd3c2a84440ce89af833fea11322c2e89a44e3cdc4a5275d76cd84e6e26f07cf202719ffd607af149cea80c39b7192d3e296e4862934c352ddf333145d44e7ea7edc54c406bd420e67a75ae582c8fe4d0fdf72c9f0d8bbb6c9dc2ab5ff57645dfc294e7bdebb08b4884f49bb2cb0a44c71aa06be87697d2e8b80b0d0057a9f91ae5278a9b79530c935440dee2fb188eb8988689dc513149ccf72647896ece9dfc1f911cb0293a49c0ddb729b06f509f5e3a00b1787227e286a84cdff158c60e75ea40953b6bdb21233893", 0xe2) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000080)={0x51, 0x7d, 0x2, {0x0, 0x4a, 0x3, 0x9, {0x0, 0x2, 0x2}, 0x1000000, 0x0, 0x20, 0xffffffff, 0x7, 'mounts\x00', 0x7, 'mounts\x00', 0x7, 'mounts\x00', 0x2, ')#'}}, 0x51) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:19 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) 17:12:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r1, 0x80}, {0xffffffffffffffff, 0x1080}, {r0, 0x224}, {r2, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x3, 0xb, 0x24, 0x67, 0x0, 0x9, 0x2, 0x0, @broadcast, @remote, {[@generic={0x82, 0x4, "dd65"}, @noop]}}, {0x14, 0x0, 0x0, @multicast1}}}}}, 0x0) 17:12:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) fcntl$getflags(r0, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000280)={0xffff, 0xc8, 0x5, 0x1}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) sendfile(r1, r3, 0x0, 0x240f) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbfd, {0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000051}, 0x4000084) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x4, 0x70bd29, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/164, 0xa4, 0x2120, 0x0, 0x0) 17:12:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {r0, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:19 executing program 0: setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@v1={0x2, "2f1a38"}, 0x4, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000002c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6, 0x0, 0x5}, 0x14) splice(r2, 0x0, r3, 0x0, 0xe8ba, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'syz_tun\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x48000) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {r0, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:20 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0xfffffffb, 0x1, 0x2, 0x5, 0x81}) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x2) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/mnt\x00') setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e20, 0x8, @remote, 0x1}, {0xa, 0x4e21, 0x4, @ipv4={[], [], @loopback}}, 0x8, [0x2, 0x8001, 0x6, 0x9, 0x3ff, 0x0, 0x16852207, 0x4]}, 0x5c) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @loopback}, {0x1, @local}, 0x64, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge0\x00'}) 17:12:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x20001084) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9bb6}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000c041}, 0x40) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) uname(&(0x7f0000000080)=""/55) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0x200208, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {r0, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) fcntl$setown(r2, 0x8, r4) syz_emit_ethernet(0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="001800140000002fc4fac524414a154b000107040003"], 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0xe162, 0x20000800, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 17:12:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='&}*\x00', 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file0\x00', 0xaa) syz_emit_ethernet(0x26, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8e07000000000000000018002e8d00e92e9078ac141400ac1e000107040003"], 0x0) 17:12:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x80000001, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x0, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:21 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) modify_ldt$read(0x0, &(0x7f0000000080)=""/124, 0x7c) 17:12:21 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:21 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0xfffff256, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = dup2(r3, r3) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000fddbdf251300000005001301000000000600bd0005000000080001000100000008000100ffffffff08000100ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000084) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:21 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='sysfs\x00', 0x848000, 0x0) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:21 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='$/\x00'}, 0x30) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48841}, 0x58080) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x4, &(0x7f0000000300)="1124fd38a61316cd9ea3d80852290209d58f42542e990f6d634402d1439af4f7e98427dfffc8bd8e2ec424f2b6e1a1e16709b901d1f5d14d0fd82fe8c5d0dff77ac70eb40625a176803b3a4aa9b5139d818c71355a3e") ptrace$cont(0x20, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x1218010, 0x0) r3 = socket$inet(0x2, 0x80000, 0x2) ioctl(r3, 0x401, &(0x7f00000000c0)="bf1c6dc567eb42c8f9755dc93c9becf28fb6804b57ea1ed09c46f9000e0d29f4ec4fb726886d95e8bb261d59213177a438b278551c1f28a455c38871cf2ee64b00f3038f157a7b27eb1af114a3abb28f") preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x95) r1 = syz_usb_connect$cdc_ncm(0x1, 0x7d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x38, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0xff, 0x40, 0x31, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2000007, 0x3, 0x2, 0x5}, {0x6, 0x24, 0x1a, 0xcf8, 0x2}, [@obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf0}, @obex={0x5, 0x24, 0x15, 0xe5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x7, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0x15, 0x52}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x40, 0x7, 0x10, 0x2}, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="050f560005071002101e689511d9b7f9e40004050010051410043f5af89ca2685c27b4a71b17fca5f12c4224100a40260010000f00010030c00000c00000283fff0007100208b3018000"/86], 0x3, [{0xf7, &(0x7f0000000180)=@string={0xf7, 0x3, "68386e67ada8ce95379aa42caab4e012e2145524e852c8dad126e626f23e421af8f5da10780d9a87d873eb750f6f7aba78d7d94017c0ece2aa0e1014e894bcc36ab6913d7b8a801ea6b80450f5b91c850e3b55139baf1faeb0f7276bd80a6c5d364b4197d45970329fc19393d88095899292065c619cd83e140acc168d5cd17bc89ffc64599f42028b8b4849ffe6c7061f87d7c56707b4180679e8394966b7bf24c3fd4d530130c1aa50c1d4cc1ce5586a745421b4f2b8380649ede2f802d12b9c4ef962e39c6e8f1b7d758b2b11ee5bbd78899a80ddee7e98480c7a43c66faee0b809758b3faa7467485104b76fb907f78e106224"}}, {0x70, &(0x7f0000000280)=@string={0x70, 0x3, "5d67d4a6c2888397c6850f400906f5b721433b6905d22ec5bdf24595b9fa15f5f0963557c9a5d60d8ca9cbf0ad859b1835bff1b4f6423a2c064a917c197c16f00e1c87bbd7d8c072eb50c5c680cd54e5623f88d75b13cac8aa383a2aefcdb2fa32d06b37bc395f6c794704d248f2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2804}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x23, 0x73, {0x73, 0x4, "bbb7cb4283a84221a1f56840921f0401f0738c36488bb4803cea4670c55aca468e437273d1abba716f84417f1f1c7038b098aa644888f3adcde69e00148fa7b8fbf6a4885da8d390aad7331045540d197e176b9f5b0e7a79a454c729fdb5965356d53a3bdefb1172acfb946db219c3b052"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x20, 0xe, 0x89, "a28fa60714f87987e38162d8022f0de188487a03cda9e1b435f5f9d160bea90b421016bb40254e59665be312875c325b548322c32d1eaa8255ea91413f9bfc421c78104f51b31f624eb3a6c44c392f58e008c026675627dd854c4a9e4db4906299cdad19186d49d67d4f987b1ad70d92a7b82689cb975585353a3150928c0c64edc81828c46903056f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x9b0b, 0x6, 0xffffff7d, 0x3, 0x7ff, 0x1, 0x6, 0x2, 0xab8, 0x8, 0x6, 0x80}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xfff}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) umount2(&(0x7f0000000800)='./file0\x00', 0x4) 17:12:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:22 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r1, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r2, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[], 0xff01) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r2, 0x0, r3, 0x0, 0xe8ba, 0x0) ioctl$FICLONE(r0, 0x40049409, r3) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:22 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x300, 0x0) fcntl$addseals(r0, 0x409, 0xe) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44009000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0xfff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008014}, 0x800) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:22 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0xffffffffffffffda, 0x7, {{0x9, 0x3b, 0x0, r3}}}, 0x28) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:22 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/236) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:22 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r1, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r2, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) [ 2432.077334][T28547] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 2432.357306][T28547] usb 4-1: device descriptor read/64, error 18 [ 2432.757248][T28547] usb 4-1: device descriptor read/64, error 18 [ 2433.037238][T28547] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 2433.317216][T28547] usb 4-1: device descriptor read/64, error 18 [ 2433.707189][T28547] usb 4-1: device descriptor read/64, error 18 [ 2433.837227][T28547] usb usb4-port1: attempt power cycle [ 2434.547051][T28547] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 2434.637150][T28547] usb 4-1: Invalid ep0 maxpacket: 56 17:12:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r1, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r2, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:25 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x102c, &(0x7f00000000c0)={@dev={[], 0x40}, @random="6ea7b84ccbc6", @void, {@ipx={0x8137, {0xffff, 0x101e, 0x81, 0x11, {@random=0x400, @broadcast, 0x1}, {@broadcast, @random="4e863b591cdc", 0x4}, "04ecc47562ba7c3fcb8e5233b022bf649220818e5ad7f58a3cf7de5343f98620def3b99249f268057d2bb0b13651a35a2c8a65f0b6529c472d294661af8f1589da414a5797c6f24fe779088e2164ac03fa6016e3efbfa0f4e997a4b00f608950eb8f40ade57cff4b19107ef326ca79f64167d9257d1ba15489e6448df0141ca23aacd8e2e2fa666c16855d3f8e1062b7995091cfcdc8656c49400dff57b68af59d2a3feb075075bd6305a749d9f5ea295197d90615aee940c6af0f663c6758c693a7adbae5f8a3d59327c01a89c5688b834c36a835a866504c650c5103be0964fa46216aeb908b6b3b0000016074fd5d8d1f013b6f9f7abe1fac9ce84e8c44db26f025b5590ee2f248ae9b50068a64c7a8ba6da68ccc708585f5bc1b6124a504bee98259d7c655d5c3febb499821c0702f0fcf99a210b30510db1e2458679850bef8a6b1491846d488b5e9808e67a3b772d5ee621ea69ac7379423f8bff60561da0309c11d8d096b6155e5ed8e9015549c49da1aee9e5c6a06e6d45dd30c24c568bfe4bd92a41d6e6ce797e04ef9e07f2bcc38237e974b6a6cd86ef72b99caa682a9da47a12b29d7e877de84e05a70177aa8b1ab7634e51bdd16a2768a3364391b241e4598d108bbb04badabdfdc206dfbbac6d9855e6a97671603fbb19e9b98975a6cd8547823a001d37dcf58dc82b2f39635e085312a730ea48e3b824bcb56053fb2c87217d4165b3ec8c755ff90fecfcf2044f9822d16095c7f4d30c7160f13aa2480071e22eedc6b71d844f4924dbd0bb548602e7fad52b468d3a7aecb92b515a6f20b885dcbdc7c3ef540b50d61a52a06f537847263b190780c9ba31fa7a3374a501d9ae6665689c7d31a7e5b98815c926499121745623fa828e715b1f44755dc230c56a4d995b7970bae7666504fcdaf9a0f2eeb4a98b34947706482bbc17624cfea71e632e47466905bd89cc406998cc9064120126e8c27eee56aab5ba6ba5697287680ff2c5c09c840042aa5a1f5499c603a2591a1f4d89ec0fb7e5a1ad49ca8d3ebcb811cc555920c145634e8282a3aa1b9e46de00fd3d585e2d21fdc32813c31fbef8e79b5ee67306c741dedde46c8775c579ac66aa5052eaec624a67c8a063c9c58c03dc97609129853995b4a525a286d6e6f54e9bd75964d598c93df75a1d9ec99bbad53b5c948a50c58b1b650159186467d7779648c8185903352cbe05f031977bb114de17f97006ac86210ddd71d8d206b5b12a529f7c083198204b6692beee8db441d89404aa786e00416ee7e33c05cb4b5b4dbf07347c62549f67ef9b3560374ff8133d8af141bf590afd9427684381dc6076d2587603977c8105ba9570fad8167537ab67efbbe47a580d5443584e086e500baddd565c9926585b3dc407da8927839d52797a07baa2752f71b3f1f5537598bbc812bd6bad8ddc36fcb65ca90cce4bf94b32ff5fa4cc88dddf8711716cca41b2b799b95a690410c23de997f1707e5741684e14f1cc1de6c560f65a733bfd741c528a8ad31eaf4c823a6d34c0d7043d1b8165218ff4c23c9bffbd2045fa75f3c8e371413fb1198647fc32d669da2bb4041ba8b12835f03720fd9e2302f8018919a1147ad0f7e728791e4f63f7cfcd7cdebe91e8a0d4024374c1697aa9c3b8facf131ee15393bf5aa09fa07908b3930f3a91ca581a86c504fecb67e26b9b504788ecf7bcfbbbf2cdb00f6dd5cea8fa68edb87a4e2f9bad45a75f4bb6f5510c1107c61cb30f0059d81a4e19bd95e763d7c0c68543cb619601420c20a2cc84146c280468b1a5c3c204b22e18c255239acbf1b1759c89bc1726a8d760d85ddff590cad7a1eda50a1061e25056ef1164328aee46c7dc63b48868ba88419bf10b8fcbe12d68060aa36957a1529fa302850842dd4d23cfee21a121e02c460b8b9ee8016a63df92438dc7ea506f1f6c193d95d4ea4bfa48931e9f0de2cf61f8401630d60456f68523629dc8d784b753af16d4a8e9aadaa9a476bc8c5e2ba5165afd0e5954281377717a11f9ad8260230664a8f447639d6fb6debf246c09a814e0e03b2957f2ba135b4fa3730afefcff5e2cb03e5f826cfe6971ecf0ab31d84fdc846a14bb8d34727fb7bbe8ac3a1e3a44a992e4a50c6095210f41c8c00d7a2f88e132a196c80b01b62ff10df0ed4190ea0c7c27a9a305aa70fedecfa8d9866c443194119e4a278934063d2cd13e486bb074452d3c32c75dc22f622db635a894f78fb43e28cb9d14658a0cd3967e902c25289f1d1e6aa77fc0ad1888d955549506881db40af00a8f6d7c0dd82ea678ef0859ead15cad632f371006a5b9d77080d8e38f489c73f554b1a73f514bdc575378ce7d824e527bf84131596329cddf3a9fac9ae10b7425bdc853b33eb6bb5065ed6f2a29dab949a36c33a6adf95ab2b62d8c6861e7b8a4dd20c064f7109ed011ef1c944f44f0b3d2495b86c460a9120fe76fa5c9ef740d3df6409a561eea95d00f99f138d35d65d556720b20ba05b4c7fdfd9461f7c3fdb438d069f258708682e31bf06d33511015887b24ffc958cfad2c3a540514a15ff15663cc8edf06bf55154eaa71ca18885714e14be47c2cf54dbcbc855ce348f5c66e2bf78c6bdfe34e8c5b677504be0f68760b8b5edfc7215ca03984b721772c5d3392b1caa6f217a9b8a1541f65808c944b8492a6af8f8ed6bf0deab5b8fe8b18395781f8f610c691f50b6e6d8f544059093a0fe9e98d68585f089a6ebfa668769baa98fab5c970d1cf97ef682e2f3413ef6975a35b0cc6dc04c560848daa4b9d31342e070d18c6dbe3c36142ade20147ebcfde47c6728720282fe2a8a63b75d744e7146e4927fcb126cc089f64ca2db1b4b2dce871b400e0cd0de34560e6c4d74f687bb8b32a38cb2c96e1ebc59533a492e7f4c60c008577632e45486fed647b653bfe3feec6482dd9dc78b387719fc973436467b0a7469bd97f6365ff0e9b080ed0d9e82e8a5739e75fa13a6953de16d5bfe4c799e5ff7c3fbf0cfe4d0fbfb58877097c3c21581b692c613e6a37219d5c02525aa43d6e6beb4cb2f2699d09c09a78a173d4f7eb3f5b042b16f8705c5d37ab75483eaeb5be11a94997392c78b5e3060d966879b98d70fe25b8c957163913a43372500a5e8769ed4bfa5828bea18fed419449d3ebdf35ffa6cd31f0d982ad47d9d7de8d99afbf630bfdc6a336b2ef1b211a241dd5fffea5a2210b1233c7189e4a4e2c28629c5db1ad14039a77e60567f183a3d229ee4fe727ce0eba9a311af606651375d0664784f8c9947a725474f7ef1554ec127484076d8a4923cfbdd6ec006ed8f0c63f8d7f96582794bf860a0d99735256874635dab836b364d3e17a1a0193fdd35255278bb1a90e671816e74fa24d381068e298202c405f6d254830bd66c2c4fbde7455bd2175dfca38880118912161539273ba85ce8d0af1e42ea1e66d2d90da35a7fbe0611e6fee46ba793f27d11821fd3219892e5e454894feb16e54ed6d99d659c705b5573fe5b459cbd56eea7477b40728bdfcb17ae4bcfa362293e123d8baaadd10b55fbbbd0912da2f30dff8a51f9ebb2dd09b5216fc3ffcef050aa78c663508890451d77388cf71b1890007acfa22244d29db4347ae674f8b1b4c806aae2eb3b07bb5784a47cb6538fd137dea41c429a8c7a6aba5b25e24434fa587ec0c4a9476b003c5cf0b04a4fb4a5986d5b1fcfb960f0b1245466448d6f61b37533744542920292d884c2349f5d2c4be369e7eec1967873e320bab0eec05be4dcd97dc00ed789c3db3d88a842eed55891d19a850ce60b8f77f83abcb658041d8b7ff6bf31dfbcd8ba5f9f2ff7bde8bb7f8042cf7ad2aca624e052c6a6e06b1b7179e2cf116776b6e04fe2d65caea910eb5a53f7628441f8e5183006c2e301317d2e39f53dba0565e84a55772d7a678d90f0815bf0837add0081a30be4f777f7eae53313804b519c7caccdf360a857d845119e7232e31cdb8fdacac73a523e90a6624540f70477203f1f93e54811f55207c49d42e6a7dada641ccf5034f10db91178a012735a68e49d2589179456d63c36dec0ae036a7bb1609861392ef397671f9621fbea8aa12a59a3b4bdc3a6aa9ed5141873b8be72ed3b7b95719505ae63a8eace5f3e4d30bf1b09680a2edf16a9a50321bd36e77c1cffd71bf66848db6565f4ca717f716884da7058db964e8d298500e2536bb44af225f97741d010fdc5f0a4d2ba8b94629217a54fc6c1cab3ec22ffa265d2d56c6d8835d3edadc8dbf8cdd3a0aec97ae13d9c6d98428fd4f9176aa569e251258bb4842a3574dd00537431eb703f61016978c26c2937fe6208f917be06cba66530a526cb98e4d9ae7f3076aaae0ecd87561b37d576871e28fa850be7d4d020c31b266c0ec2f60e872332deb2716f4d3ca396abf64a724441f0970b0a6453f07d0f895361245808e5004f03992e483f4988f3e9ed8f7d52bef41136c1b966cd873ed5a53f17ac6e786fb149b800537a7415f691b832e800663d8c08c52d69ecb8b8ea1b41ebad3e2938946a6aac69283723d80cb0216aaa0de149c084c483d270238dd841b4e64bf701025dfa4524e66d462376e72d169efc5ce12fd7939450040845b3d2553d871cae90c69fbfb03d5c9848aa10dd15dc82206cca6858ac94d50a5936d6294f9a94f2859661649ac10dfe4514245a2c31c5bbd3f473baea110da88d581433d017697e7a72fa8d18331d1b11f408a2f49282bf6a8bc9a211920f7f3b3367db396a1f5a77b345dc128b25280471c186ef707515b4235f0e61f2c71aa4184f022e69bb39da7c3f1ee49f41198c36215584015fbe4561a10c602c5c2517cdb4b4cacf904f9a747c02b06a45a77ef4382560be64cb7775e6fae6fb554e7a13610866d90d204e05a9d7a0c3549c5610a558800315656f732a19b0d4a4e884716ee9505d427500dfe280ae0e749a7c308dfe778df595d617756dfee2585a829e0c59c31b4d5f05cbfe36d1e181c4234f1bdd831d9dc65493e85cf697b9789820c506455eb8e7866195dad81efd59e5c98fb2bf9d28be788578b5cf4f0c00233e8b652a3d2f8bab77c72d467f74a0c032a7daf49acb56a07a155f60eda08aa446c8f64fbd6e7b8d3e2b776c8b744d1ba8cca96a0e6436c51c1d282e3816daac2ea63563efc4ea469f949f70635b40dc104186009172b55099830bc44acfe63f57cf062e33809034f00fb0dae783775cec443bd2f2ca165b81494d2273866b138db72e33e8e297a929e65648239eecf9715dd34da8caa42b596afcc81dd2def0b735fe616504646908a17358fa5c97d27101eb3c0f5154acc298494d354d4940bc483a6deffca7de8f17c9e872f84fec3ad0f45a2a59d967caf867238a9a6bdf643ac91cad563230be4051852dbb9284484230b1533f01a80b2518ac48418b31267e75fdb69f2a1b72ca9d9b3c952f760b6ca104269a10bb830a5b7e4b87b9539387e56211495c1c403ac69dbc86e834b423ded2d1ddda46f697d80c4196cd83f2d21b43ff00e9cc2681b8ea3b365beed189d36729ab97dfb95a7fb07e0be999f143119e6a0fec284a269b3ee166e1db48fac498b1f3eb1bfd922042e967beabc4c77da5f14d41caa05e5cd8479c8adcd513a69fa9fd97bb09384848103d420448738c3c09e1a5216b784f9b09375e15120cb9ffc02449c60b14029fb52073648625cbbbcd5fecc828c449b393ddcb3e79e1a9f9d1ba731cc589fec53dc072624d4337ce674aa7df10a2982a7726f07b85bdbacd3113"}}}}, 0x0) 17:12:25 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x5, 0x21f6, 0x9}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 17:12:25 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x80000000]}, 0x8, 0x800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x28a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:25 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = gettid() r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x1, {{0x5, 0xeb, 0x1, r0}}}, 0x28) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='net/llc/socket\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x82) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0x3, '0'}, {0x5, 0x9, "cfb3d8b1f05c90"}]}, @lsrr={0x83, 0x2b, 0xb1, [@broadcast, @loopback, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @local, @multicast1]}]}}}}}}, 0x0) [ 2434.787096][T28547] usb 4-1: new low-speed USB device number 11 using dummy_hcd 17:12:25 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) syz_io_uring_complete(r1) r2 = syz_io_uring_complete(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmmsg(r2, &(0x7f000000b4c0)=[{{&(0x7f0000000080)=@generic={0x3, "2535cc86506c0d889eca862243ad2798b596e68baac7fdc0ae1fd1b0b420919218c4c2f707b33be3f99a1349fb17bb7cc9dd500f03092edd4dd572c3db988701c0326fe61ce953bedd54f23f9a690068470433a1f70d6d68c2c21512569f13bd50d2168412caedb4308bf4203f70e135450c0aa0aa9cac9db7999fc83ba7"}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="7fdc4041602bd69a22c186d1c1ccceb1892ba8b6f1da5b819f99e286ab4281586e1aef7a32545d143664b1b67422bc5f8be19b2df7b735732b8b8fe3ecb01c394faf477b87aa64d02158e823cb09c0b46b7dae7178cdd1745a3b349e9168620c4f077ae2deeba3e31e21ce08de176b3b5db963b8e05e2de1ffdbf4a944ac995516725f7d7e1088f3482c8a5bf0656ee1bdff7da0b5dcd1e463448a1259a66180d4703753", 0xa4}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000000000)="ef9955ea0c1d4cdadc1c187b2e1233fac9c3f61a590ba67b74fb4c28b9dc1b4f4017aaf00e6e9c956cd476a252a56a8c812d87ef7f64c1056316efea0552", 0x3e}, {&(0x7f00000001c0)="1dbdffe3e1d3ebb6acbee3986221bcfc9a5b486c62276ec1b103ee4b69024c596b882f3640c090efb27bff0553c3c1c1f46ff9a4ab0c9bc9363104dd", 0x3c}], 0x5, &(0x7f00000006c0)=[{0xe8, 0x115, 0x3e8, "c40681996c518d565ee118b438d11b7ad369c94f6ec5ac949c4a9afa7f0c0d7e3030363cecd631177cc5d81cd2535b2e495122151034ab0e70063e7ee183f596e3f030815a54fe9e2dd876699e2838bce50b42524c530bcd9657a778e2d82e3ec100c98d79dc3ebd8593fe02bd91dce26483a186d7a57201e0aaa6457760d676af516568829ee8f83a2d91fb538a1012e64fc8a72be199a686fd2d8a6fd1b236b02777e1b1ed8438b5e59d38e4d09e7d53df0d0b5f5d6a7d96a4809266448c7f946e2956fcd1ab321f7f35b89d6d91038cbd4bd6aa"}, {0xf8, 0x111, 0x80000001, "3d63581fbc3f76d8955a4344c781f9e4453af7842d8714d61c3db9e5896c50ace99659bf37ed2ce9db3c9ae76c5a86839e1fbbb180d6414b1ed32855860e884537a065ebac4420095a6e1d40087c2fcdd3f4ec22f830c86e3a491d14757c2ec2217f2e04624cc83aeb0933266dd5a4e0f18341775027a025c470a346e77ed55954d7f010d191870c03925d42892d138c92ce37ff704ffb7b8f6b23716cbbc8a1f07ebf01f3b007da11c7429e51fe7bdac35dbf04f2fd6bc0d56377877f5dbb44868cabd99ae015bb9378e467c9d5d8a7f4e94224bea02c0cc4c9e8b79b26ec5495ddf8aa0107"}, {0x70, 0x102, 0x1, "d35ec2ace7ddc87ef95c52d0189ba43787860eccc5b8ca0acecc89c08cbf6a31367d7b0210cbae126d022fb9e71a276370c7677e74acebd5dc7f53a9cf8fbeb8d726b316be1ace00d492e959ca05bda8409ab917faec3868b9e0852b44d278"}, {0x30, 0x117, 0xffff, "983f0dcff38f94e85b1b9cdcd50903804f1853c58d4508ee35125259ea01df04"}, {0x98, 0x29, 0x800, "813d78a9746162513f23a345b6bc652ed1a7fd12694f085e43c3cfbb0e3087ccc153ac3e77cc9b0419c3068ff4ac01210e1890a9c693e8e16c0a44b81402902b43373e02a0bf3b43c786d8d8fee468766c630b5bbd950796d97082621f627b26c00bc68779937d8b70f51bb59e1d03e71fe0e60b3578525426c53ce06095df17f610f5afdc"}], 0x318}}, {{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1ff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="4390556ee598354e242de22d2284c2f13a4d368c2f56eace927af3164518d75e4090f62e448cb959b8b5efebafc82e91bb1a3cde8ee81a38f1152d861816e33073f812c3e90abb69ffaf239ec825233f3c35279bc6717c52c639ca1d3d6f6946f2a45565ce3083eaa888df898ff2fbdd6f883fc43e1ae67fd63138b0f2b33ef9f5060a71c0b4f3fb5e2699f20af140753b0c174bb6169b38c9d3ef4cbc083ba3b5efb4db84e91e9595989e77e8a9906b757affc14de5eba99429a7a881d26f5df6b62c2e37f3345c1e7beeb51ca84f24ddf8e623855d34f32c18848540d35e00a0ed5a887c2e3a9c70087fab084dd07c26", 0xf1}, {&(0x7f0000000400)="c005304b6a657beb3ced09b455455e985d822644b802e4692628cc5c", 0x1c}, {&(0x7f0000000440)="2a0fc13d0aaef78ba4da09618b7033aa885d47f28e05190102e30ad0a1690f5c7fefd14c24", 0x25}], 0x3, &(0x7f0000004400)=[{0x10, 0x112, 0x6}, {0x1010, 0xff, 0x6a85, "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"}, {0x70, 0x105, 0x5, "35243e7ef8f57f94484e9ac459f87ec24b315720bf4d33eea2b25f5ce21beb69c0aa6c5395196aa85aa19eca922245c20f6f671c8700d2ea6e129e71f69529a0ec9c1573117e6e118b76543ec2f667a44b721fb188abc4ad1006"}, {0x38, 0x10b, 0x20, "a7003f00c79c1150c569f89187f4f5c30011a38d98ecc7c2cab7d1eba1bfbfe963"}, {0x1010, 0x102, 0x4, "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"}, {0xd8, 0x84, 0x9, "310148b65a9bfe95f4b4557160ec286ea323c86a49dbf02152cf15f636933a91cf4e52e35dbd1c6311c7bdea5ba393cd00ce8c02da5a179f3244fa1c5c794f54d87ba4b5506baa5714a8f6b94f07a9771908164c8b4f3420687f5a34b8383fc628df937179b5ca7159d92df20eed278c31fa2b7369893f4be9d421dd24863385c20c7ce414981930dfe39474a2e8ed29e6600dcdc362baa850dea0f5b774c0f1ca2de54cddac60cac574b67746c7248fc469ad290c9a22aaba7a4eddab3c5905404a81"}], 0x21b0}}, {{&(0x7f0000000540)=@generic={0x21, "64bb289f9f8dc68f860e657fbd7e1d628112be89bfd0b7f2202e78bb1edf74e5d2e8e98f6f2f92edfa685c4507cb2409ff867c082ae523b6d6ac100920eb08a7a201859d908e52ebf3d175877b026868c87d05027dd3df4d66d996f0ae9b443ab8370b8acccedff2fac9bbee94f30996b1c5d9eeca34276fb033b710d30e"}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)="458f607cf331ac40c492c86bc030bc0252cbfaac41a127de97f9fcc16357de7e4f169afaca7900f41dc4271a880f5df3200ad132e83672f3a8756eadb759d65f2946a28a8bfa4f83234fee6fc735452f9e96c4f40235295050e09c9183da1babcfb278bc8689d2d09312d05608f114a1dd06b64630e274f7a3225a49b3f2aaba26a2332d7a98b00ba44271d56c1568c91bf6cc6865db46ee2a90012f5e1f41f43035fe", 0xa3}, {&(0x7f00000004c0)="f0eeea5646d3eae3e5835acabb2fd3fce0d8c918c81e88b78c3ceb", 0x1b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="e0d879ba6eb48f3a0ea23d3f328b2fc9547a143720a0944fe335d676702e4bc49b1f5888e894bf73f6a4789215c52c0f4ec0706e7b7a0ed085b93e6df078dcf2c1e29cd19606c0a4fee18ef570a8861ea1b0bb360fe3f9274b2dbb1cff11b61d152b338e90b1aac2db0c33fe0b9136eb4fc157f51a569c5fcd7b2271652c308f5022c4c28533fd8caf94f0f99e34f109d22af96589cf4c92bbeecbe45d818f5d09882063ba636e8c25847ce9155fb7c5df813a5c88021d880b674601300403521b2955", 0xc3}, {&(0x7f0000000b40)="6f8ecebebc640d5e2d25ae8d2f9bbccd23368d7eb075b9447b3ba69f50f2f98b058dd2dc96c9f861d26735b17bd59853900f90f5ed66ea4e4bbe840671ce5ed23858ac2b7254202ca1770a87c42f1e2adc2ed99b69cdc641f1af86d29776b8335e1d0eb3edc8969fa607e27a943e5bd07e4fe32537658c7e2272171ae5796e01f717fb6bddf4449d89e513adea4373988c5e358c3379e9421d0e99a41924fe8ce8fba41f0d0883d8a8a7cbb0706e46c7bd348fa9ec25f9d54d257f43cbeda7df", 0xc0}, {&(0x7f0000000c00)="02a2922198e341625e87c93a74d6431c1011e42b4b74b59b9a96ba9645d19e5db69b0d85846027560549", 0x2a}, {&(0x7f0000000c40)="e1bda2c07e46631653d589069bc26ce6f63e93dc992e37a2f8acc88ad70d39e21f98d57149485f5ce150749cfcf7d101fdc1cc5172b3aae294cb1b4330d4cc1437d43f4b991d53cb32667a050783c7adf56e16463b1d485e45eee0de4f25c0098c5ffbe058ededd13746ba7b5d314587f4f724a504cfa80c2f1c3f8702f695f9288f530de6dae4868e915d294e7e214054d81a9e550b616d", 0x98}, {&(0x7f0000000d00)="df386d31fb3ee27455d228da62606abd8c6759f702d29a0172cb6605190b7288aedb3ac493dbcc317a957e37cf9c43c624385802063bb3d9073c01eb25e59be5f0b14668b5afb5446870920bfd8ba423fe2f1dd0fb19d425aa05818cb26a156656d1a59d8f6c1dcc18d39a1e3ca275528a93d935645bbdcad5be8ad89a02a397e0fcb5180846c4b9b54e", 0x8a}, {&(0x7f0000000dc0)="3248ce8c4c5d40376ecf2dc66be77c5066b47a6e0285c71e93b8b09736cf343a409d543ba6ea373ba05d58bc34af7c0a9011e8b4629086e53500d55c486c224cb1611736be5be52f985b1eb844654c1af6e6d3ea1719fe69be8276d51bbe132347d6bb907afc829b", 0x68}, {&(0x7f0000000e40)="ead6de3cb7eec342d9ffe7d2b250e4ce07043f59ac2bdbf1fcad963f6953ea0ee6aaf3547bda6af282bc8683d331ab366b4092a7f7c891452024936d22b0ea7f1e422b1eded67fbe5b62942980551fd9106cc87f0d97fcb5ca6a204860ccab20215db42f94e29e510d42a3b6", 0x6c}], 0x7, &(0x7f0000000f40)=[{0x20, 0x1b, 0x6, "3cda215772c7e36e25c3f8d9a1f399ea"}, {0x78, 0x1, 0x2, "cea395489370c65c476f973eaa94a6565687d2177a8adf3eab9633f106014e112898cb98bdf06f4ba4bb54956297a29dbf608319f8431dd70298c5d0e019188476cf767c23c8dd6f8a800e1af979ebee44f73d05c86ecc6700a3c22e6b6b82d0e1e81b"}, {0x100, 0x116, 0x0, "6319ec644710b96fc745050729a96e1e68c94a5cc794c820662b09254d9e9f9a0cb941216ea0cbc94fca67d497c48cc294e64fb4020d78cb56513b3ae89ed71308184716ba8d96b203f765f827b2ac6f34a90dd983d47e596fbe2e1bce35d6f922dcee389b1b86424000f349381690fe9f2ab9663aa688f75bc12dbe2908cf1c48b195ba3e630d52bc8bd15958260f0baa925e1cfadfdda773f1a2b7e7dd45c1a57298aa375845fed7d937ee536c22e3cd93d6742783ebeba035e5c038489d076c581fb6c62737b6890943e5c3f8f70ab5213577f5c5ded6c218dc61db32c87478fa143a8fd7bc40dd7e2b6de5e940"}, {0x108, 0x111, 0x1, "34374f7df328e2e6da8456a806aeb4db2209b8bd00e145439fbfd69c82b117c8837ab484343a80061d2cdae3accac9f6c27476479a4f01b243789c079e3827e7080fcd21b2bb72957ffd69b26bcbfa422c6cf94e0ce6adcf999243985514901eedcd4434dea170b20da9f4ac3525632777c36e757b61b1eb1e8a8577056e715127aae69eb4f1faf022e73fea0ed7342dc701bf6620d1606168d628286113f8d2dacdfd7737fc8fca06f4f2457b35fc80835e6b37f475427770dcb8f29725f01ef837eb1ee74fc035dbd6792a83dd3a4df959d484e208a1c0ecd3efe84cb248f2642a9a588bdc653078190f19e95fc83d781494c201"}, {0x20, 0x17b, 0x5, "1e5dc01d9ba936b533e0"}, {0xb0, 0x10b, 0x33c, "2426c7c50c526278e7e15f2059b67af5349f86137a541554988a93fb5060d092a6654df4846293c8eca18770d90d66a6f34e08b28f4f1e26f46660e684ae9656ce2ab5329af6fc49c6bbfdd95452c4dcd623f5f7eea3fc093afc6a708974568b8e319c100c15166d6b2c40f82543cebe3cb8fc42aa2a7686e040d6e94d63da2e856902ea5d3d34da79a97f90b6be1317ef38d3f4b024a63038d7df78c7c4"}], 0x370}}, {{&(0x7f00000012c0)=@ll={0x11, 0x1, r5, 0x1, 0xbc, 0x6, @local}, 0x80, &(0x7f0000006780)=[{&(0x7f00000065c0)="fd5e725ee5ae9965cc40e99b81f73c27a20b80f5398c1c9b52b2023ba07b3eecf446471d679fcc8a86290db049f6edd58fbb84d8bc5f9afa6ea6cc8862493ddbac3824b96a9efabb7f9c25dcfce9f3c23cdf6de8e32f31b2b5d5aa2f0d72b00cd8cbb8a0b6ff7d73ef7650310b9cd07ea76ac44eb9c6c0cda956143746fea92aff7b612318a2927402cc01cf3b95d6822c91d6", 0x93}, {&(0x7f0000006680)="68e99b32859e69da60baa0bbc3c6b140087afbd07cacf0b70f1756842b6eb6a50f96434faf8310738efa9ee837e0d123394aab5fd707a4f2f2cf4e1792a65ff68fb482dbe3e7e5e027bbc74b219e09713273fdf9f4c4789679920e0b628148fe6a219115178faa0ece34347b7c8f970f86d253d6fb2ac5587aec83d6208c70e51d243aa871d0713187f13a3196e9e8b5412c8f2bef61144d33c982d348e28b0d39f1e7ef05", 0xa5}, {&(0x7f0000001340)="deb9e89b028b41c8b87d190d5e3eba3a4e23a5545db473e4d50657", 0x1b}, {&(0x7f0000001380)="9ca241b28c8337f73e81585cb421fe07748557", 0x13}, {&(0x7f0000006740)="b3", 0x1}], 0x5, &(0x7f0000006800)=[{0x90, 0x113, 0xc0000, "d2b5fa2730a58a4ee7802f889f85322a65e41fb00f4c300893c0024a6551dc8b152a8357b4b933332fd58abc3833c5f548264d5f311e6e09938b7e2d34b9f8da5195642b0e66cf27b69a9aa64aea92739c5123ef51c966d1261e92575b1a34e4fdd067b8ab60e7f69985ec01ae1b9014e57ae9f41837319172a65c83c277"}], 0x90}}, {{&(0x7f00000068c0)=@ax25={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000008b80)=[{&(0x7f0000006940)="6a17db9b228619632f245c6b0aecd2bc980a46cd6e27083e1896fb5d908ebbd2acaa9168b56dc6041be3d8b9fa0fcad8ae81456f0be85ecaa6b46ac794d22f252ecd4c82", 0x44}, {&(0x7f00000069c0)="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", 0x1000}, {&(0x7f00000079c0)="2527c927b65f5c13eba60ceae95fb4adb9639e83a078bdb35e7261d972ecea73e7afa5200532483c4439ad72bc7064077e050ca8500a88f74257d73bb2d96f5e18141e437dfb", 0x46}, {&(0x7f0000007a40)="192bce465818a8d409a25e97fca54a1399acbca0e975c78c717040f24324a00e82f987cd629612685ea627ebfd91f8b6782500d85643ed30a60185dc2a233f734f9c3f1595ea892a240ceb22cc9eb8ffcf80e2b6bb88520a90918d046171f806ed25ec270fae51f22484df64f5e1d695bc43e43cb324e287ad70fef728f7508f47d8652d9cb66d5e252d0aa0eeb2081c2813993ebeb435a5abd602f0c0d5a89a557c71a6d475d29b3edbcef1fd136244ed624b49893c01122ae6a9251cb0a2d4f986c4dc5a9ad615c62ad457c5b90bb483eaf58dc74750aa2a1e1af8498863a311de17f6c87226b5922526d4f8af7090daf9a04506aca6b320ac5592e4736b57f9028677a651ee81364430978f51ae9ee9209b57def79b4d666c03fd1f3be89ea141424f7150a47d9468e9c18e425751962446074379233ab1c7ad72fed3030c43549d4ac46872fd230f9c715127ab4e1cc1e571a09b18064b0d63247d589a9586ccd0fb744467ebce50eb3527cb55ef46645910c40e15a41d38311b6fa24969ff099bb0563bf09dc17d49e3dfe39e587cf53ed792a505f66b61b9c444d4141bace5a8fedb7948b5f9de0d3fa64c7600acf74f1ade5ec24efdc0762a5a95a648e558a249bc333cf92d0e6f0b8cfadd9cf5f5297679ee44fead4790f586655e7e907634dda126dab7bc457b2db25e618f9fb598639b4b59dd11fd25756f0f03bef111eff748e70f601a83730dd5ebba27d614cf7718ec77164a5efa8ff4a33c55aad30afa0b8bb0ffebe90c7cbad3995a007bb42e39e5385323b46e1c0acb8790ff08e1b66c4af828475917b7fbf6155be37e0676b92381871c678d972cf834c47aeb083e89486f22a8a9a45fcac76b3342436dba713bd1d85b0f432f59c8dad7e8cd32bba7d777734a44242fac6858c18fffe1f2f4436b969e475a74071f57eef5bc0ad4c21bcf290256848663fcd4e39c8f9c64872d84d94787e36eb19e526425981e5ec82f51e7d3dd246b0b312a628cca94556d9fbbea692c069703dc8924755b23c52ce74c692bb8e87fa78f8187922ab4f291d6cc858ebe363c035bf9b60c105b6cd86de698b9e0ef2389d254f1203c5a79344afa3a46c3a990bd78bfb3ad9af02912ef023d401fb5bf49ff58c03f9f61d1425c35da1d06e156041e76aa3818717ca15f9aca78498867cc7a5b6189a04ee76313fd18d59cecfc2a674d0f5d6af5acc8a7a4b7cb4cfe1de9da961ee41542e6352495d68eaca7c49ab2650d758592df0a15b9654145d0d171b11a70fc2ed57535ca11283af8b72302af759c162c49a65a67418fa63ab8ac9bb26e73b0db2daa70db221b37657b01defd925ab06c8b10a8ee19532a32bd0b3a068e99c87ea9e36dddd36e1f04f8940e559b2a6c277beb915e3c7c68b310e67ba235051ab333b66b31ddb8cbe47c2c54bbaa2e6c3a298f6cda8cc5639cfedc88795ba6ae5c2a39cb9bbbe4582f0a4ab92f1b3a4ac38617ad71432848b5cf368a9b14b5a9d710691856edaf84d1143c25a77de836737d03f81c14f120993394b565ae155fd17b0dc7fb3dacc89ebff876d0384c72799897ce7273189c49aac1e7e58f24232de10e993fbdef16c5dbf2c0262f41f2ee104e71e52481c09b286297340d658929b3cbc44368dc19af62da9df8411a79dde541c02ef3588252afb319180a591b1ca302cadbee5df634d2e4a4cf77e85fb819b6f3e0fdcac5dbc546c84a31d49d1e26fc4c79c674626d6117d314de7666fa3a50bae4511eb34434a5fc66172a294e196f2efdf4dbc3c2271805d2902ac22588f5d23b5be00e4f6ae029289f46be099eb0bdf1b3d34c470baf7bdbde813fccbbf3681d828ec17d9b167be392a705df18f4b6685bad544e4dd31213c08910cd9d3d5064c018686d50bccca62e0f13eb650fdac4a2a2b056d536f0ae1cbb26bb3e537aae94f68cb7c248cbcbc15989ccf2cde1c9acb9dc45d96839a7983cbe1357f3fe9b7cfe0ecc8525f218e76ee153c052aaa7c04187a2f12d800ede467dfaa6552a5f0de026a2162e55f859cbbac8c54855be46c8f56e4fda1b672868c311c96baa6e93b9a9f551bcbf3aee5cfea19e4edb88b68c766c9f60f92e58a6592ffd311105df07ba323fd2c8ed85daa53c70701bcc0d8c176b67375472032d5772f474d6708d9b167c6ec3ca74464005efd0f8d1f45692468a5049debb834fb34919479ed644dd06095245b50974a600e8b028d03c8ba293ba11a96b160dfecf80caaa52f3e4c4616535c8754719da3d4383086f2e1c8bfde499a47876d59b4a3c7bd2e9668a063eae335eb04c55ca1751f40aef3692ec2697017b78e7060b1c10e49f3e24f1f56eab7b64034e5c4213cf7d6f4aec4b01cf2309aacd6f011de15e57b86fbe99e1dbba36a6932f233e18f9086d51680cd57ee59b8dfe8e45cc44535f94bbc8d6e212a03036bfaa8b4b95a42063aa685eaa7f85e811e3ee7ce04b0eef1034000977279fce37940694e1d00dfbc27479e2f9b71c0ddccb0908ffb88a7e309e0e2590dfc61e814f5fcb1e4afa75be50c4ce83cfe8611293425ca5f81fa6c3d9cebf1b6e0bd019940f90206eda4565c1654ba64a6720255a9480dba13a396b0d225b3ee6c75f0e108341374ce8eff9a747cfa886897d3a9b0572dcffc6395643ca0f2bdb68c5c2cd18bd93a4e9ec39c39c3ad64d4a5eae398ecd9497d2455d2771c55469c1ae7d5e0b8e0beb34049a079ad24544bc7f8e78c3d86d0fb00cced40a05b36e20e0d551fb7f1409476d317c11614938b1f12755afea4afa574d831be55e998d402e6658c0e7cf993620405d6882b328eb0869de58e74a5fec981efe27666c7704abda29ca5c5d340b619ab8f542911918cc4f45734d12dc766326228259089bcd4b63d525d4c2c77dd3d3eee4d71bfe2ea13ae877c78f2f1466202de47e787920a5204d819e5b47976e824c905a36880e6cc948ecb6ea506c0c576ba06c05d9893ae813e06e251711ab55371aae72aa4efeb48013b098a9415dc66934e2e525f44c48afe24578cccfbf0a4a995d55b62cb1a37e506871ddbe308a0f087a40e09f9014b8ae35cd7c47fa159ab313590f7b6b19946c095d8bb5df568eec5f34aa7984f4d6929e15b193b97bfcf195029808c4584c2697ca51841957980617a0f86b0fa173aa7a019cee613cb9aed284308fbba74d5ecc03df7dd55f654e5df15fa4500bb83b9bfa19dc5be20a4928368f80af784a2be73ebc8bc3d05951d61d4b4fbf607e69b2650be4e4b58e2f57d8ee365a4af11bf1181626118f9cc5c7e9bb2f6560e573c35d344f7710888b8ffdfd6131880fc961e96937a8a282550782d5574500d0dccd86f84b2f80d04d992422e76606f21be026b0954249635daa8d39c8cf4e144c31fb931f00ae8a37b8b1cd8707df8a0c883e97729398d90ab5cb61864545b30e70d64b2323f2ef5aaec5a701c5eaa83889d708b6b20837f5f2f9206f897b9dd5a456467baf869e5d95e5bd28b420f9486e9ddceae9fc460b1d706b5dca917109ba3bb33dbdddf4d2dd64ea571a4930413e11d3e14b89ad7f033c46df0c1ab2dc6ab738e418ddfa3893a2adde32c8cf90a8aaab26aa30ec10fc97566f550073ca3ff1852abc3fe1ba9b0fce3c77141068b4acbc5867009aedc8e5191c9db30ad8ea8a4e36676ef71e78efd5c39943b9ccbd2249cc6e7637eff80602a93b5b526c2796f4cad16197c4e6209ba2a68b731defaafd5c7151022a5635f16d4a3b2bc6dea7a48469312e3b79a9bbda03b7c6dbdc6110f93f2d9209af31d272a754612967cfd606f5df2834403ddacd508e3269f9c142577a8e925c60884fe2ead8cb175ea1e9b30bea23e6689c471f230a8f4e6e4d98a44118bb8043bada0a7063023fc13a6d9bf53496a361d39c1d0149e1d97b98f9e4c8cde56e12be047a6bd2f8650fbb59cef7e63cc1d812b7b1f9a087bc3af66d173ba6c9596c3e1b32d2095a6da6593e64a1a7218213949f1ac8a1270b9491759f815446f95a947adddeebbf8a6a509a1d9421ae6c71f974d5c3eb12d6dbca072495cdbc550fd89325cf517e54c7d7ffa5af79bf60258786b12185863aaae321b89b2ab36ee232705a0225f42583fa8ee21100805a02446c4cb73b571cdff4ceb51405f6f52534d9203be82a8a3810b1880ac8b92106ad9304fbb71ec312d0077fa8783530b615951fcd216bfff0f10d71d84adc2c808370b5e8dcf4ab3e0f372bfd6f48cd73a165166e3757c149026d9852cc5073321041e1eafb6f8a7e59ad0133ce3e4c6fc25ae263b45852b0c7bb1dd6b8289433babfc965140b813d18710cd62fdb2ebbf981402d96762b1381711c9dd9045e3e2966cf52cc52c80b82442761e7b33ef37ef26aac39abe14747ce337d7527245d45ec95270e2cfd9c3d32e6a742a1b1a9b8d881f076c87c8e13ae2001900550f7bdb6c6ee9ee126ff72fdaad59c89bcf77cf7dbb29550c62b300eddf87de54f7db06fe76f128ea8d13f53f6e2abed49401c6009ffc21341a72e2a36240b246fe4fbf87264f4b4e8ad82dd1ffe42b7b1270957cf604d234659079bd8e1403d1c5051b83cab413e5aa9ee4d7fc3db75326172f0baf113a3d253e294a05c2baac1772f7c68ce341333225afbadc5e5d500a50583e9364b24d65a555fa2e05c037f894990aa70951e5113f21f35ac6915891d839daaa2302b692326cb7cf6fa1544ca0319a54bbce4e479ab25b335595947191934d733550b1303791d3a5cf88b1411909bf3b38e132679412c970062e439e262bf58671f743cb9f50c2acce3047ac46069d12177330272fb2ae9c6cae9718f13ef88cf480c88803dd79f51f71f9c519697bf7dd9a0e458a0d08f323e7640e4f88e4ed22f9cf8f96c5de81891185f42b4f124f51198ef0caf52c003e06134477821c8c3e2497bbfac278d98bda2dd38adba7855e687ce2a7abf360394ae1f4fc1acba619f66c15538d05f7f44367876cdbea8f6483082c72298a8a65320cff6504fb750f9be4c44d3e206757e06dcae38097fa0550f37a761d5081b158db9951f695ecbdb950e432064f7808995950c8d38858696dc6a795a51c8eb3fc889e62f1a87dda27d2de7e743788085cc8c585bfb1ed2a2df8a6db07a51099b44fad76b72fea80be0c3ed355e024f28f718f4a12b246c73a1b1542a01e359a811bf7445a1976798a34683e417c8c2cb29289bf6e341542111170ac56539870535121a440043f928bbe72c26d44d055962d485d08db55cff2d39362b52042bb943c2171b35e19bbd8e2702bbcf5451083159f1fd3e0f67a50948eebd56fd29217a995a2f896c0da5adb2ff3858b8b3e9e32ccfbea81cccf0473801a82eb20b6c8e7694d7d7bd6a0a8ad7b1f259bcb4cac204cbefc3b4ac05e16bcf21f3e0482d2f2ee5050769ccc49b683f423ab6485832dd0b4d5b149f0a363efc919f28d2f5bbf608fc482a992a69304c0dfbaef396013fb86398e8bcf0d5a088e394095d55867291dc44316af7793adfcc535aae0c1acd436716e393c65df4b60c6b0b6c64b1149b914bcd5598dcc4d720a7f8dd6fecdcc28deaec534b7d1df1a9974c211c124242cfcd16976035149028ffc131121947a2b638b4d20c4e352958bed4b0ea9345364428f5d4d13ce62e43551ee72f33072281ec5759cec001222da5961f3b7ac06ce0860d58732d8a86c65ca8f448becb30f1ef0646ae890553cfc78bf62a29c8245d0c7b4b69e940a45e91464324cbd02a85fbcdcf03f9968603", 0x1000}, {&(0x7f0000008a40)="15fe0a7cecb78796f580a118f7af8b9eeb0b68dca07e5c505493c5e2ff793e4af777819eb808bcb306cc8b77ccf01f6d086d32c4c6a53f72c9ad3052e5b6a1011366f790081ae8e17b3d19746ae90987633235aa9a5be587792e209bb4d56e703bc5afedadc5e2bf28d5a1151b04eb9401fabea2d417d2643102561e29e89337a5f8d30cdc15c78ed1796404352217d2eea96b9e3deea0b976eaa2c50a", 0x9d}, {&(0x7f0000008b00)="750df1b315b4e0c0b3cf3b6a885b0dfda80288e661699568758390103026afc6f9eea84dc31854f0fd1443e53af66861486415b64f22db2f698a384feb00e3ad295bd80f3035e82e0196b52c281dcde459feae98b113697b78a31f6cf6", 0x5d}], 0x6}}, {{&(0x7f0000008c00)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000009cc0)=[{&(0x7f0000008c80)="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", 0x1000}, {&(0x7f0000009c80)="e50bd133ee71ae65b2b7f5eac94949d77885c8e497c26da5b1ff18d0c642b8997d28e0ee019eb421b898", 0x2a}], 0x2, &(0x7f0000009d00)=[{0x70, 0x1, 0x0, "3213abd837277ce895ad3ce0f8cc67a2371cd0040c71f1383a4c643dcf9cf745524dd6b6447b96a0a8a6ceca4d53dfc3add99f1c81378665dbc0de9dfbbd49e308d55fb5d6c1a9de2c5388d3477cfb25a7704f3a3816c682e205c76fce8e"}, {0x20, 0x3a, 0x63, "afd669731120c74d15"}, {0x50, 0x109, 0x3ff, "d2b498ebf2ccf10046f758a0dd6e092afa6d6f76654b51963ecff26cf253ca912226eab2f90d7e119f7f952594eed29291c3674e3cc608518f"}, {0x10, 0x113, 0x17}, {0x98, 0x0, 0x80, "df65baa2c1f21529af11df81f7e04eca76cb414b04a1144acec8431d1c04749f87b836634aab21e654276ecf3645500ad5f8f563417fd29608cac9bcd8bb2bade95ac3ea61487df7125255f6432bafc0b77e4b74eabea6dfc1d0c499537b42c058d3358644d9a3f4109a1eb83c707e6d67b7eb325a5867f344dfcc9449aab8d1105174da46e3"}, {0x108, 0x110, 0x6, "4d55237cc0b114498758ca463e3d6502bc6a16ffeaa058c64ba2677a084d12ecea9229b702b1cc8efcc2eb2594b285eab7d44a882c7591cfab13182ed23002a4da5038e370b66b449f8796ef6d689365baba889445a4166bbff5bfed4fd5ab01ae6807646e9582fedba5f50ac511f72de7f6ae8ff1f7ecf5d0bff71bb2adf9970af1660e308f6c9a099ccd413e84c75b74c319c773c6814addd5727c858a3bba589f9f57e386fb066240f8e3ad076746b72f13ae7fb93b15d60c0c83f908d8908154ca8cd6313ca7dd1e2489e5b4d914736f74363d33087d584799a83015e8e77258ec064c86913d71397a0db9db24a02600"}, {0x10, 0x10e, 0x8}], 0x2a0}}, {{&(0x7f0000009fc0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f000000b440)=[{&(0x7f000000a040)="89f0acfe958571f380cd220682c2a52e830dda5d470eb8ecb52f1cee67f348354556a0f2b0976cc8d383e852f4d882cac2906fcfcec0a9a93e02363aaed766a10119acfdca82c0881ea8cc31c7818c5d5f3bf610c6f6531d313961dd4abbff6ec3b948bc2276b61c4fb8e25201de6b06d5aab231ff9c8e9a82bee8ec3cc81797f920b723927760dd747ce102d8d98e3a34914f587e9aadccc0814592e95c6b9711745d", 0xa3}, {&(0x7f000000a100)="06ee93aa8f4d961174313f59b211d49d6715f0414e1a48ee7fa317", 0x1b}, {&(0x7f000000a140)="f53bf78b7eeb5aecb8bd9f1b6a337e50dfb4ba78d7517ed6469b64b5ada4b470a0a8bb37b16d6de664e008b1530ae6fa991c6360848e33993c773598bbd1d963d9f42dc66730751d9e803b5ece38b1637de0f95bb226ace3d7465bf8aac5ce32307d94fcc659232c8886ac85a5c3c308aa9bcac6203b772d31c06dcc757a618020429bef8d0e44e5a615805e81990bfa52edfe813933f2548a91c7ca9bc53eb37adcf53ebd8a00ac7fb13507bcd6a5324f4b2db8cd1c46", 0xb7}, {&(0x7f000000a200)="0300b85b9569054925ba0f138e94ff55f7e9c8fbc59173cb5bd094dfc0808a6fc9fca2c7f70a13062ff371d7ec0588a94abb6cbc760c365280758316a96bf38c1c3a4236869a07832d590cdc371eda400a3151113398a85c4a271beb86648886fedda0318ff214f97b2d3f589c5cacb818e940e85e0d1040009fbdad73cf265dc3b6b8bb509d2aaccbe31abfa309a648fa2ea094615ab7a38003f7a4d7523bc3092012a74d25d3f117378fbaa4052a70ef8b0e92ad418a1d83e1835897956503936660ca64ea08c9a08663b2ad25a6f0c113f8eef991c385624e6d975a6e29c1b8094f2d98a07fc4e17f4e5c39", 0xed}, {&(0x7f000000a300)="bf4bd8752285c132c9ab6dd979679fc8e67b5d5dc856cabb13013cb66e3bb897b7c690282a632aaef364bd464d3d6b", 0x2f}, {&(0x7f000000a340)="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", 0x1000}, {&(0x7f000000b340)="4a4ef83d30c282f4c8edafb68fd4c1ac2dd8c8614c55f4931e30b36366feb7fcd60551cec02a2bbb39a8862d053d883cc38bcefccae2e903a2b31dfb0b51debf323ede24190eac6ae2cd20a77afe7f06cacc413dfa191726cedeaca8ddc6ea95257e9dba293cc68f7ab00a07d2d017768ac02851ff2a1252facaf17a4ff93f926ed57b5254e61133e2f2ec85508884a2fad639c42f5c54a310bd37afd717f2c0005ffb16d4bc7e0ee9bcf6755d82e7d666d0f67bf6a7070ad642384e0573ce7e03678588052e071f017a7c4cf9533b00869f", 0xd2}], 0x7}}], 0x8, 0x20000800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xff01) preadv2(r6, &(0x7f000000ba40)=[{&(0x7f000000b6c0)=""/92, 0x5c}, {&(0x7f000000b740)=""/154, 0x9a}, {&(0x7f000000b800)=""/240, 0xf0}, {&(0x7f000000b900)=""/121, 0x79}, {&(0x7f000000b980)=""/160, 0xa0}], 0x5, 0x1, 0x2c41, 0x8) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:25 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) [ 2435.266984][T28547] usb 4-1: device not accepting address 11, error -71 [ 2435.274038][T28547] usb usb4-port1: unable to enumerate USB device 17:12:26 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) read$FUSE(r1, &(0x7f0000000080), 0x1000) 17:12:26 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e25, @rand_addr=0x64010101}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x810) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400425}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x20040840) 17:12:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820208}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x52}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 17:12:26 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:28 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:28 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=0x401, 0xffffffffffffff46) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r6, 0x0, r7, 0x0, 0xe8ba, 0x0) r8 = syz_open_dev$char_raw(&(0x7f00000004c0)='/dev/raw/raw#\x00', 0x0, 0x101082) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4335d854d4b038ca81795deae1e6e98edb4a189fa04e29bf5fe505121840c3c45c34771d26d10a10b6b970f3be451608005400", @ANYRES32, @ANYBLOB="0b002b006d6f756e74730000000000828c547214bb57677fbaf20ecb37e50bc10227c1964e6988556bb69c198fe98825283d6c4cd76aeb5a24e7811320389aab605cf2531ddc0ee896c1391a34a28c92c96d133c840297dfe34023123d748ff7bee48ba8994d384d671a992ccb4fa16cdbdcea01e21166a9cbdafb25543e6aec916b0460ad4a613021d362a36444c499ed500a247f80a64d4fbe53d64a38f5492b03385e723a00"], 0x200}, {&(0x7f0000000280)={0x15c, 0x29, 0x12d, 0x70bd27, 0x25dfdbfc, "", [@nested={0x149, 0x59, 0x0, 0x1, [@typed={0xd4, 0x4b, 0x0, 0x0, @binary="134b7eff14826e9d5a68ad78f8296956d928c55bd73923f62f0a13b834cfff027762903ab7f14cab5861009b7e24b7880aa1b4e069e5b67587bfbd18f2d7845f927c8d091f4e4d21f1da99373d3ca3e953dfd58d2d802827689e80a9dcb030903bdd0b620121b7081ea204eb8517ead1123e9874663b2c25be2909ce16b1ec3b6745fbf7d1922cfbf3e8543d68d4e507e655daf7703c9c6a4fb7132dafc590efe492557c4106a4345779393262112e7e2871d34caa223efe398ae3a2621fadc631f32d749fcbc2414bc4626195df6e3a"}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="662f001da439c1b03fde64b171640f3b115e820682194adf035cd879dd9370a781cbe997093eedceafff9b6d48abaf3217b8f12b059aa55ef93cdf024c5d1255dfee120af21447f46af91dd003592464b3efb6145f20c10949711ca715"]}]}, 0x15c}, {&(0x7f0000002880)={0x308, 0x3a, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @generic="d1bd3eeaf6a1e58db318f6234f1de8615afc85629a3996ebbc6db312ab4f023ce49ad9b2f1f4da83aef91055067a1e8cc56960bc5519973f53b9f83b75147160b6332bd3c51f0000000000000031a5d10a7120aa3c489971525556470159c1ddc0a1477f5429afeea73e3fb84950efe421685462dccef3cf9c4b8eff30d8000000000000000000", @nested={0xf0, 0x38, 0x0, 0x1, [@typed={0x4, 0x5d}, @generic="275b9fcac5003b829e3c0063174cb31da19d166d3b6d83d0bc4b1c0907ed66ae5d66d5612151ebcf6da6fd00a38cec7fac8411f5bb00e061c4af99a7c9e858a4539bebc49c8fc6fa2183436b349c42f36b8c0e57bd2a43ccef2a1a6fa2c9e692cb5610d74dc51c989ae0865e7138e4ef136742d49cde48ea80df1e24337c98d4a9f48db214e3553ae58d87656a2dc6126c413ca7f80337383b391a458b2f81c956ea90c1dc47d51638fd050d6d872bb393466e6864f80412aa1651a62124a66624a84ff14a0636adbeeba2f31290564d", @generic="a4b106408a46e2f51f3b83a32d04478406fdc5571bda6b59"]}, @typed={0x8, 0x48, 0x0, 0x0, @uid}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private2}, @nested={0x24, 0x6a, 0x0, 0x1, [@typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0xa, 0x6a, 0x0, 0x0, @str='ramfs\x00'}]}, @generic="593f6aac93b604e30db89a402be4a59e70b15155db53bfa67b7b82234dcdc0d1e8b011655e0829", @generic="4fbec535996dce7755cd747eeb05202b631a13e3bebf17aa3304405de98cecd80c0d904aa2942b176e6e576724dd025367070845dcdb6a47f091f0948440b09adb7b", @generic="af01beb37d492c5678af582f767a842b9a9f96605cdf0952c7d35a613562e8e491da6b078239a81c1c21d4a4e1b3ae15263028732723b743262be289ce9d66289ae22a3eca66c3acc744261857a7c6ff1ddae500d380ecfd7a554589f157df4399ba697bb1c6fe566fbe3404a4b4450d8c90e13a8f301adf9c3f268f7d600634ba5cf43a9e08ced24b81e091e2f0faf3f300a9a02d5cf6560fb1cb2aa6cc2a8cac9ad8362c7a1af244cb57fb", @generic="5e5e9b93a8dc9da22fd774df02687e2828b52e9a62f8b08035fa2ad6f564e3e5a4ca"]}, 0x308}, {&(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x410}, {&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0100003700000129bd7000ffdbdf255544cd963646c482ba9b135c69970117ade73e4dc8178ae1b5038f548af5cb836f74fea2f07ac657387daa1f859925ab37580a609d73eaa23de8b7d237a8a7017abe37e7b0c2f63b6f7e8643a803ebbc1e09a676285862067b98314329cec4f52df8302ee5f1a419efc17a4e710d76a28c26d9f960f6d232dbfd325ade4a69fa43fa1a0671452275e2b30c0fbf7ca208002f000400000008001600", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="735064ea1c1fc02dd6d138367acd8b86444b9a5a7cc6d6e67594b4c16ce1dfa9c320b4bb22a34994c357e6259126252431a2c9cc4509aaca43eefe628e13c6380820aefac9666b319271d34e08e72bd4deeea065b0d448e5bcfca4f1a6b37132188d0bde85ba0fe7034ae00e555556b3c2dcb3d9b2ef76aa5e0456a6d28806f4268f3f8303d662d4c0b189b750fff59c0d2b0cc196908bb680dd54ae00"], 0x15c}], 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000e6ffffffffffffff59a55e20069d3725a000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x24000004}, 0x4000000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:28 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000001480)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/41, 0x29}, {&(0x7f00000013c0)=""/186, 0xba}], 0x8, &(0x7f0000001500)=""/26, 0x1a}, 0x10040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001580)={r1, 0x6, 0x1159, 0x9}) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000015c0)={0x0, 0x5, [], [@ra={0x5, 0x2, 0x8000}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x7, [0xda4, 0xc82, 0x9]}}, @enc_lim={0x4, 0x1, 0x8}]}, 0x38) sendmsg$IPSET_CMD_HEADER(r3, 0xfffffffffffffffd, 0x0) 17:12:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:28 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r3, 0xec, 0x5, 0x7fffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:29 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000002c0)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="eccf1c00000000000000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', r5}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfd, "776dbdd1b97ad7afb997cb0b6c3959be4d9024943d16d6c659f911a920d3549014e45df056a3dec0ece248c933152ff8f15b8360390e7f50336552b3f6dd48ab7e626e8156720e1de2772e19f185785f8642dbed56a4317ba1be0512ac2c1cef49d7e3dd8ec0597723e992c3c81bcebf763e1bb02aa8c447b66207d6919408205161c7eb5bb8f14089009dcc3c7882f0ec4c1287d46405f42cc8a7229c0f5b8bb27e6c371296ca4fd868de510aea0493e059f335978a3ed2e493080640892e0b21b838e8812f4c0ed13810", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x4040901) 17:12:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:29 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') ioctl$TCSETX(r0, 0x5433, &(0x7f0000000080)={0x0, 0x2, [0x7fff, 0x9, 0x1f, 0x1, 0x4], 0x6754}) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:29 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000e8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000200)={0x1, &(0x7f00000001c0)="6393b0086c75974b990b0820ba9c3ef66c418227bb55a3386a07da1e3fa6945e1b667f2bc5ec756e7c4bd7abdf922408b3bcdde506d5c75030"}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6ad, 0x7fff, 0x8000}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xfffffffffffffef4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:30 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000004c0)) fcntl$dupfd(r0, 0x0, r1) r3 = dup(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = dup2(r4, r4) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000012c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, 0x1}, @clear_death, @acquire], 0x5, 0x0, &(0x7f0000000400)="ed201fce1d"}) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4028f5a2", @ANYRES16=r5, @ANYBLOB="00082cbd7000fedbdf25070000001400040065727370616e300000000000000000000c009900000800000300000008000100000000000c0099000800000002000000080005000b00000008000100000000000800010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40010) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) syz_usb_connect(0x0, 0xbd5, &(0x7f00000006c0)=ANY=[@ANYRES16=r9], &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x71, 0xc7, 0x4, 0x8, 0x5}, 0x127, &(0x7f0000000540)={0x5, 0xf, 0x127, 0x6, [@generic={0x20, 0x10, 0x1, "cc73ff9903376a41258502e062d8ab3bc56fcb09b8ac7a171169d4debe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x1, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x7, 0x9}, @generic={0xc5, 0x10, 0x4, "243917b159916d5ba83c03839c7cf9e73d6abcc14cf715d13388d9a7ed5e7b745267c2f6e6d21eed18603e69688a7ab9544d737e96f6f59aad5c631b66a153dcda2bf9af351d5748dda0b1d883eeba5536d4c697dd5404a201a1a406edefbf18f15cb1c57e6ac7a9f011023c82852836b6bb670542cf624a740c88208eec8653e00329950c323be5a02883e042602923f40194bfc2da805b22a9bbff0994b7ac0c11191ed8c046cb7b0896a7a9902242ad6e987188e228eff822a10dbc821402a930"}, @ssp_cap={0x20, 0x10, 0xa, 0x20, 0x5, 0x7ff, 0xf00, 0x100, [0x3fc0, 0xc000, 0xff0f, 0x3f, 0xc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x9, 0xf00, 0x7fff}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x3d, &(0x7f0000000180)=@string={0x3d, 0x3, "0c16f6e39e79f4c34beebee118913b4229c0437add0b338fb2e5d967663d83e218a99f0a83ac8b72ee052c103057261d55e7ed7372364de48dc5a6"}}, {0x18, &(0x7f0000000700)=@string={0x18, 0x3, "354d4f458ac918abb4bf010300f4cd152dfefa0c736a"}}]}) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000480)='vfat\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:30 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0x60458000, 0x80000001, 0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x98}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xff6f92787cfff545) r8 = openat$cgroup_ro(r3, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:30 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:30 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:30 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) [ 2440.676545][T28547] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2440.946451][T28547] usb 4-1: device descriptor read/64, error 18 [ 2441.336425][T28547] usb 4-1: device descriptor read/64, error 18 [ 2441.606395][T28547] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2441.886366][T28547] usb 4-1: device descriptor read/64, error 18 17:12:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) [ 2442.286339][T28547] usb 4-1: device descriptor read/64, error 18 [ 2442.406428][T28547] usb usb4-port1: attempt power cycle [ 2443.116276][T28547] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2443.286366][T28547] usb 4-1: device descriptor read/8, error -61 17:12:33 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x7, 0x4) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14183e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) ioctl$TCSBRK(r1, 0x5409, 0x3) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:33 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, r2) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0x0, r6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, 0x0, r9) getgroups(0x3, &(0x7f00000002c0)=[r2, r6, r9]) r12 = getgid() r13 = getegid() getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010001000000000002000500", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="040002000000000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32=r13, @ANYRESDEC, @ANYRES32=r14, @ANYRES32=r15], 0x74, 0x1) 17:12:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) [ 2443.506235][T28547] usb 4-1: device descriptor read/8, error -71 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:34 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa000, 0xe1) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:34 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r3, 0x0, r4, 0x0, 0xe8ba, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x200}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6fb}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7f}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffffc}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000810}, 0x8000) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r7) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0x100000001, 0x2, 0x8}) 17:12:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:34 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f00000001c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x100, 0x0, 0x2}, 0x14) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180), 0x3) splice(r1, 0x0, r1, 0x0, 0x290, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x6) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r1}) 17:12:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:35 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000280)={0x0, 0x7, 0x9}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x9a78, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = dup2(r4, r4) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="a000009687bc97bd80bc7fe161d414a3aca21163d21421fcd2a133469c4d9ca8f4a4e5cc2a4dc339acb5f4c1", @ANYRES64, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x200000c5}, 0x8890) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x20004015) 17:12:35 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r3) request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', r3) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ff, 0x21f6, 0x0, 0x40}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000948) 17:12:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xe8ba, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000003180)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003340)={&(0x7f00000033c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000002a80)=[{&(0x7f0000000000)=0x1, 0x2}, {&(0x7f0000000080)=0x2, 0x2}, {&(0x7f00000000c0)=0x1, 0x2}, {&(0x7f0000000100)}, {&(0x7f0000000140), 0x2}, {&(0x7f0000000180)=0x2, 0x2}, {&(0x7f00000001c0)=0x2, 0x2}, {&(0x7f0000000200)=0x1}, {&(0x7f0000000240)=0x1}, {&(0x7f0000000280)=0x1}, {&(0x7f00000002c0)=0x2}, {&(0x7f0000000300)}, {&(0x7f0000000340)=0x1}, {&(0x7f0000000380)=0x2, 0x1}, {&(0x7f0000000f00), 0x2}, {&(0x7f0000000400)=0x2, 0x2}, {&(0x7f0000000440)=0x2, 0x2}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=0x2, 0x1}, {&(0x7f0000000540)=0x1}, {&(0x7f0000000580)=0x1, 0x2}, {&(0x7f00000005c0)=0x2}, {&(0x7f0000000600), 0x2}, {&(0x7f0000000640)=0x2, 0x5}, {&(0x7f00000006c0), 0x2}, {&(0x7f0000000700)=0x2}, {&(0x7f0000000740)=0x1}, {&(0x7f0000000780)=0x2}, {&(0x7f00000007c0)=0x1}, {&(0x7f0000000800)=0x2, 0x2}, {&(0x7f0000000840)=0x1, 0x1}, {&(0x7f0000000880)=0x2, 0x2}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=0x2}, {&(0x7f0000000940)=0x1, 0x1}, {&(0x7f0000000980)=0x1, 0x1}, {&(0x7f00000009c0)=0x1, 0x2}, {&(0x7f0000000a00), 0x1}, {&(0x7f0000000a40)=0x1, 0x1}, {&(0x7f0000000a80)=0x1, 0x2}, {&(0x7f0000000ac0)=0x2, 0x1}, {&(0x7f0000000b00)=0x2}, {&(0x7f0000000b40)=0x1, 0x2}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0)=0x1, 0x2}, {&(0x7f0000000c00), 0x1}, {&(0x7f0000000c40)=0x1, 0x2}, {&(0x7f0000000c80)=0x2, 0x2}, {&(0x7f0000000cc0)=0x1}, {&(0x7f0000000d00)=0x1}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80)=0x1, 0x2}, {&(0x7f0000000dc0)=0x2}, {&(0x7f0000000e00), 0x1}, {&(0x7f0000000e40), 0x1}, {&(0x7f0000000e80)=0x2, 0x2}, {&(0x7f0000000ec0)=0x2, 0x2}, {&(0x7f0000003140)=0x2}, {&(0x7f0000000f40)=0x1, 0x2}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0), 0x2}, {&(0x7f0000001000), 0x1}, {&(0x7f0000001040)}, {&(0x7f0000001080), 0x2}, {&(0x7f00000010c0), 0x2}, {&(0x7f0000001100)=0x2, 0x1}, {&(0x7f0000001140)=0x2, 0x1}, {&(0x7f0000001180), 0x1}, {&(0x7f00000011c0), 0x1}, {&(0x7f0000001200)=0x1, 0x1}, {&(0x7f0000001240)=0x2, 0x1}, {&(0x7f0000001280)=0x1}, {&(0x7f00000012c0)}, {&(0x7f0000001300), 0x1}, {&(0x7f0000001340)=0x2}, {&(0x7f0000001380)}, {&(0x7f0000002400), 0x2}, {&(0x7f0000002440)}, {&(0x7f0000002480), 0x2}, {&(0x7f00000024c0)=0x2}, {&(0x7f0000002500), 0x2}, {&(0x7f0000002540)=0x2, 0x2}, {&(0x7f0000002580)=0x2, 0x2}, {&(0x7f00000025c0)=0x1, 0x2}, {&(0x7f0000002600)=0x1, 0x1}, {&(0x7f0000002640)}, {&(0x7f0000002680)=0x1}, {&(0x7f00000026c0), 0x2}, {&(0x7f0000002700)=0x2, 0x2}, {&(0x7f0000002740), 0x1}, {&(0x7f0000002780)=0x2}, {&(0x7f00000027c0)=0x2}, {&(0x7f0000002800)=0x2}, {&(0x7f0000002840)}, {&(0x7f0000002880)=0x2, 0x2}, {&(0x7f00000028c0), 0x1}, {&(0x7f0000002900), 0x1}, {&(0x7f0000002940), 0x1}, {&(0x7f0000002980)}, {&(0x7f00000029c0), 0x1}, {&(0x7f0000002a00)=0x1}, {&(0x7f0000002a40)}], 0xd, 0x66, &(0x7f0000003100), 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) 17:12:35 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:36 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64=r3], 0x208e24b) 17:12:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000080)=""/250, 0xfa}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000200)=""/124, 0x7c}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000380)=""/89, 0x59}], 0x8, 0x0, 0xffffffff) 17:12:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:36 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0xfffffffd) 17:12:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:37 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:37 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r2 = socket$inet6(0xa, 0x2, 0x0) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, [], 0x3c}, 0x4e23, 0x1000, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x2e, 0x0, r3}, {0x1, 0x4ccd549, 0x7f, 0xff, 0x100, 0x200, 0x9, 0xff}, {0x1f, 0x4, 0x9bc, 0x101}, 0x600000, 0x6e6bb0, 0x1, 0x1, 0x0, 0x3}, {{@in=@remote, 0x4d6, 0x2b}, 0x2, @in=@remote, 0x3505, 0x3, 0x0, 0x2, 0xffffffff, 0x17, 0xf3c}}, 0xe8) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x7, 0x200, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) r4 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="dcbae74d6ac289d2d6f559270530a9867dbbc90c659e0a00ba7038e7f9ee43a9b51fa4dbcbd955fb9cfe9d13428c23a4399db1e827a469843f8c7ee4859b20ad9b0f77f60917d4116fae0419ee862218f72367063f772a31326832d3", 0x5c, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') 17:12:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:37 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) syz_io_uring_complete(r0) r1 = syz_io_uring_complete(r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x409}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40090) 17:12:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:37 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r3, 0x7002) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:39 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0xa6, 0x9, 0x7, 0x6, "91746dd445358bf995fbd5dfd5c2ddd50ed7b8d274793ddc27d07a7be56e8bf1"}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) recvfrom(r1, &(0x7f0000000000)=""/54, 0x36, 0x12121, 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:39 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r3, 0xd4a, 0x9, 0xdc45e5b}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:39 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'wg2\x00', {}, 0x3}) 17:12:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x0, r3}) 17:12:39 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x0, r3}) 17:12:39 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x0, r3}) 17:12:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:39 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r2}) 17:12:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') fcntl$setflags(r0, 0x2, 0x1) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x80000, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x101000, 0x0) 17:12:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1}) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:41 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:41 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:12:41 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e1f, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = dup2(r3, r3) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0xffffffffffffffff, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44004d7c5cd4d66c43d8d4b70b397f2f0c95e36b16e14000000061d199b8df2257a618ebc7600bccad1d5900ca9336bac8aa1c63c7c05e2f0c01db60826c977401bb7190a7c61ef9b4235b60a463be5edb4810fa005fd964fd4202bb0de3fec7bc2c1e96227305166acc55bdb60622801287d2018855c0e5c6ef4c0dc07901b649cdbd4339e668b3c8cc0deb9ba9c4e3da37f11dfa611800f25136d918c5075c29e046e212dbe5451326e81d782cfb0ea6d19f1acb5906f1d3d4ae89d179c0f4af11761e8174338faf813b9e566bd6728453d5b5e60ac916ebdc", @ANYRES16=r4, @ANYBLOB="000325bd7000fedbdf254b0000002c002c8008000000090000000800000000000060080000000200000008000000050000000800ca322f6800000400870087d8b84ecd9d22c8d290e3498c8281f1bc9beaa5c5c8e26bbe1b2d7317adb3aa3e5e5df6ef276c7166bb6b33075844912804c41f918a05a416789bf43bd618b7797b8cf03624e24a54c6bff8c86eba7b65669c248a376d2c1d2cb6112477abe3e6a42ba0abef69a2a33e0a58446e831e25dbcd7361e0d2b85dbce449f4b9012433dd1b6d3cb203e8ead89e7a9923e500"], 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) write$FUSE_IOCTL(r5, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0xffffffc1, 0x0, 0x81, 0x6}}, 0x20) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:41 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000040)='./file0\x00', 0x2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) socket$nl_route(0x10, 0x3, 0x0) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:41 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x3d) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000fbdbdf2501000000050029000000000005002f0001006ec70ce860426a2d0000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"/906], 0x380}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) r5 = dup3(r0, r3, 0x80000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0717648900000000000016"], 0x3}}, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x5c, r6, 0x10, 0x70bd24, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48004}, 0x8041) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x1, r3}) 17:12:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:42 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') fstatfs(r0, &(0x7f0000000000)=""/29) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000080)) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:42 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x0, 0x1, r3}) 17:12:43 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x0, r3}) 17:12:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) pipe(&(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d, 0x1, r3}) 17:12:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d}) 17:12:43 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xe8ba, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r4, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r1, 0x80}, {0xffffffffffffffff, 0x1080}, {r0, 0x224}, {r2, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:43 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d}) 17:12:43 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) [ 2453.536962][T29371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29371 comm=syz-executor.0 17:12:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 17:12:44 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x2d}) 17:12:44 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x40, 0x0, 0xffffff81) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) io_setup(0x7fffffff, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000140)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r7, 0x7, &(0x7f0000001700)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x5, r8, &(0x7f0000000080)="2586de706b011a6b8a31e48b86e86bf811dea2cc5cbffcc727643ed3ebf878128b55218f5e110bf18821", 0x2a, 0x80, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f0000000200)="feb111f510773aed00cbc7642725655b0d7c60ee566d50c9bef7e66dc992078e4f24d782a975c3811ae55bc0cfd9711a6f6defb38d5a0dab64b4e0d4ae2d0d95e26b64141968f748d4ce28769eecfcd88b22a9f7f5e502a8", 0x58, 0xffffffff}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)="4fca717423fcde6748bb502a0736c3a38959bc0d0d32e92c4f009c79b167668e9e1c0df8ed3bcdfe8183672f233914c8f4cffa7301e7188210ff6c0ece4e843a5770428cddda326a63c80223dbf6700aa149c5a6d9bc3297d52fc31b1f6174fce72ee02d59ed4c9ec3be15f09304b08b289b6fc152ec", 0x76, 0x8, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000380)="08b1cb54f26d4ebfbea53e002ec732284cf07597b8b6259b0389fe0a20376849573b9b169d074805e08508066c87fa559ebfcc5b6bbebfe0bc115737b21995e614e19cec671cf65eaef2a13a9b3a25763e76ef944a379ad0311eee74ed99f62efc65b8644f83ffcf4cc319a5f1e6b8ab67427f37a7b8520fbc86f50eb37430cb11cbbd362a0eee8f3d1ea07e4035f784a1316d32c014c7b273d16eed6bc18166d40e244a0974af6e", 0xa8, 0x0, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000480)="4d6188cad7021052f94a7e2998af61a5d6c4d76e05005eef51d7559205551d4b539ed5b5798ff870f4fce1c1050906283e5fce844bcafca99727355434d272d154c7fed8cbe088ea1c6edb642192f5d65369c54b1215a1db4ed95a4ca9abb11c6e25f8c83f69c954a514954b1b88aebd9f1ce5d34de6c277cebda0546731990f3798feecbf55fc00678301a91420f4f2120506dacac56c58fd4d2c12a14c156407841257a4faa1152917e23c285eb689c3a1b15ef4d7d13ca4a9ed0dcf360666a5b34561fa99fe670dfef1ae", 0xffffffffffffff62, 0x9, 0x0, 0x3}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f00000005c0)="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", 0x1000, 0x1f, 0x0, 0x1}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000001640)="3fd4acf7e92522d2ab834936e02db8c49023f694779967ead14b9968e34ca1597cac1a912d384dc7b4182491ad512b3415d56509dd3c70dbd5af40a0e463d9bb0846c597f65b57da5e01c1c018ea6a3f9ec40990e8f35f8fccc0813621e76a66145f3758cd00b6c456d18851e1d84160543c46d6619173ed854b531df8", 0x7d, 0x3, 0x0, 0x1}]) 17:12:44 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:44 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:44 executing program 4: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) recvfrom(r0, &(0x7f0000000080)=""/142, 0x8e, 0x102, &(0x7f0000000180)=@generic={0xb, "286bb8c308df20c0f793a19a51333cdd40333082b3cb5b2f11df752dbd8d5fb5b4b2871e529f61d48d835d8b75431bf0dcdd5a3406275e13e747a069c9c17c2ea9ce880dbb3b522c2aac344bbcd4300c3e6af150b677720466a2917be4ee3eb43c34b78762b975a93785ab0ff841395d059b2531cbab7b67d69c6907a63c"}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth1\x00', 0x7}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETMODE(r5, 0x4b3a, 0x7fff) 17:12:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 17:12:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030352c6d6f64653d30303130303030303030303030303030303030303030302c6d6f2cc5f864653d303030303030303030303030313737373e3737373737372c6d6f64653d3030303030303030303030303030303030303077b534352c6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030342c736d61636b6673666c6f6f723d242c5c295e2e2c2c6673757569643d32383439656566652d303163662d636633312d646139332d3030371734c076b91e071566636f6e746578743d756e636f6e66696e65645f752c7375626a5f757365723d252e27252c7365636c6162656c2c686173682c65755b24e796c97a19a5c207931ffb7f7f072b0ab7e45d5e66b5f77b5a77467259df88e0e0d903d66e84208c568f812c0d0b071a3a25b6434e75c5d1896e7af1d09879dc2b89bd5dbe6787954190e7dca9dce11b6dce35b51b996020e1c314b99e5b60b2cfa009404489c1fb1e8060a16893c12bd3f7c9b8169dcd49628aa91c3ba231f2dfb146b29ff8bb3552709664abf2236c3c1bc9c89f630fe7e21bc22b44832be13adad7089286e78938e322b08a290fbc191ad29503e7b5cbd9f1c7d9b66522062ab53cbe3002f54c01bc8c1f2261de951b0756ff9362535cf359f3ba2cdb12ae7d47f6e9100c77a5632e18848466706e3a581defc87400facf86ea259537b81059139f8bacc47c2f2d5df37312c848ced2f52975f59005fe771838379c5f6b368b871e0631ca7de04a10b4ba3b4b0f18a2f0c4044d9e4ac1275d6c91f276f370269f034e4cd82321c2e61cf18e935d8b0ee5fb5ab9b0dfce8467bf2cda20c8652197c957db63c627ae0c0504f80b6df20206f9c47fe7285670f96e26b937fcce28afa2fc89820823cce8211352c0d3bade82", @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 17:12:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400000, 0x0) 17:12:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 17:12:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) 17:12:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) 17:12:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) r1 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000200)) 17:12:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) socket$inet6(0xa, 0x2, 0x0) 17:12:46 executing program 4: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) recvfrom(r0, &(0x7f0000000080)=""/142, 0x8e, 0x102, &(0x7f0000000180)=@generic={0xb, "286bb8c308df20c0f793a19a51333cdd40333082b3cb5b2f11df752dbd8d5fb5b4b2871e529f61d48d835d8b75431bf0dcdd5a3406275e13e747a069c9c17c2ea9ce880dbb3b522c2aac344bbcd4300c3e6af150b677720466a2917be4ee3eb43c34b78762b975a93785ab0ff841395d059b2531cbab7b67d69c6907a63c"}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth1\x00', 0x7}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETMODE(r5, 0x4b3a, 0x7fff) 17:12:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0xffdf]}, 0x8, 0x400) 17:12:46 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000001c0)={'dummy0\x00', 0x8}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000240)=""/105) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r1}, 0xaa1, 0x0, 0x5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:46 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r2, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r3, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x2}, 0x4) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:47 executing program 4: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) recvfrom(r0, &(0x7f0000000080)=""/142, 0x8e, 0x102, &(0x7f0000000180)=@generic={0xb, "286bb8c308df20c0f793a19a51333cdd40333082b3cb5b2f11df752dbd8d5fb5b4b2871e529f61d48d835d8b75431bf0dcdd5a3406275e13e747a069c9c17c2ea9ce880dbb3b522c2aac344bbcd4300c3e6af150b677720466a2917be4ee3eb43c34b78762b975a93785ab0ff841395d059b2531cbab7b67d69c6907a63c"}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000200)={'veth1\x00', 0x7}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDSETMODE(r5, 0x4b3a, 0x7fff) 17:12:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:47 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @loopback}, &(0x7f0000000180)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r4, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40080094) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:47 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:12:47 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:47 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000180)={0x7f, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x2b}, 0x81}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x10001, @empty}}]}, 0x110) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) 17:12:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:48 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:49 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r3, 0x0, r4, 0x0, 0xe8ba, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080), 0x4) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:49 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x1, @private1, 0x1}, {0xa, 0x4e21, 0xfff, @ipv4={[], [], @multicast2}, 0x2}, 0x400, [0x8000, 0x6036, 0x9, 0x2, 0xffffff32, 0xfffffffc, 0x1000, 0xc9c0]}, 0x5c) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4041) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:49 executing program 3: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:49 executing program 3: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:49 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x68, 0x2, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x200, 0x70bd2b, 0x25dfdbfe, {0xa, 0x33, 0x0, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}]}, 0x40}}, 0x4044014) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000819b70075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000900)={0x16c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:49 executing program 3: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:49 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x1, @private1, 0x1}, {0xa, 0x4e21, 0xfff, @ipv4={[], [], @multicast2}, 0x2}, 0x400, [0x8000, 0x6036, 0x9, 0x2, 0xffffff32, 0xfffffffc, 0x1000, 0xc9c0]}, 0x5c) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4041) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:49 executing program 3: r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:50 executing program 3: r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:50 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x40, &(0x7f0000000000)="942b08f49280f75a5bdf0cf68745a23f0801e2757d791b7fc1d2002db8af2fc6241bbafaa00c27b6c5e18bb1595acae56cc1f260622057387a79232ef9de7b9d", 0xa9, 0x0, &(0x7f0000000140)="4c5e34aec35eb08e01965c05d36bff780e20f95f6ca9e12e882dd6848b4f495680e7b5c77def515a9f9fad4e54350a341fce570e07b4e97cf9138c9962bde2e7b17fbae16dfc397852736e0acbbd00113013b47173ec337ab023a0d7b37030a122059b3bcb03bde0105e031fe6cc46127dd73609e4af87c9c6727ead4f648a4338362620621eb8b99b76ac7482885f7e457c7c34f9c35b9550c525fd4f3f823ff10e28edf35453d333"}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6ea05997318582ba55db158c8ab17ca089b90d374512fec181eafc4bea32c90e36150c8998c814824c7eb52deb725b43abd17b05208d1551fb58b450546564b21d8e9c3fa884c47ab4be9221e2acbe4376e7de9554bf2904625a4e37962951a6ab878ad292dedfff9349db2f8b79ef3896252a292b2b65f5015eae95916bbb106f06422d27c9cd19f7e4a367f8"], 0x208e24b) 17:12:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:50 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x1, @private1, 0x1}, {0xa, 0x4e21, 0xfff, @ipv4={[], [], @multicast2}, 0x2}, 0x400, [0x8000, 0x6036, 0x9, 0x2, 0xffffff32, 0xfffffffc, 0x1000, 0xc9c0]}, 0x5c) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4041) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:50 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:50 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0xfffffffa) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x1, @private1, 0x1}, {0xa, 0x4e21, 0xfff, @ipv4={[], [], @multicast2}, 0x2}, 0x400, [0x8000, 0x6036, 0x9, 0x2, 0xffffff32, 0xfffffffc, 0x1000, 0xc9c0]}, 0x5c) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:52 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:52 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x1000000000000006, 0x40100) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040), 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000940000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xe8ba, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff01) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0717648900000000000016"], 0x3}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c8, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x19c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x410}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c06}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @mcast1, 0xfffffff7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xa0cd, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x1, 0x4) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:52 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:53 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:53 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:53 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:54 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:54 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x40000000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x0, 0x0) 17:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:12:54 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680), 0x0, 0x0, 0x0) 17:12:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680), 0x0, 0x0, 0x0) 17:12:54 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:54 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:54 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680), 0x0, 0x0, 0x0) 17:12:55 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20044080) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x24000094) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x8000, 0x1, 0x6}, 0x3ff, 0x800}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0) 17:12:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0) 17:12:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10100c0, 0x0) preadv(r0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0) 17:12:55 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:55 executing program 3: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:55 executing program 3: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:55 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:56 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x48000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x840) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000080)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:56 executing program 3: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:56 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa1ebbbbbbbbbbbb91000d0081003500000d020000202c030000ef55fb7eda16a4fe17472e4b35c274872aa8530700000000000000ce4284a0bf32be470000000000000000000000000000000000000000001bc9ffffffff5e68cbffff"], 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000001c0)={0x7fff, 0xe6e2, 0x12d0, 0x706c, 0x10000, 0x8001, 0xfffffffffffffffd}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000240)={0x1, 0x1, 0x8, 0x3f, 0x3, 0xc}) fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) 17:12:56 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:56 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:56 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:57 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x458, 0x3f3, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x1, 0x1c, [0xfffffffa, 0x7, 0x9, 0x2, 0xfffffffe, 0x8, 0x5, 0x8, 0x0, 0x92b, 0xe3, 0x8, 0xfff, 0x81, 0xfffffffb, 0x6, 0x8, 0x81, 0x5, 0xc6d0, 0x400, 0x4, 0x100, 0x77b, 0x81, 0x1, 0x1ff, 0xfffffffa, 0x1, 0x1, 0x10001, 0x80000000, 0x8, 0x9, 0x5c08, 0x83, 0xff, 0x7, 0x92b, 0xf293, 0xd3, 0x54, 0x1, 0x1000, 0x0, 0x4, 0x1, 0x1000, 0xb62, 0x3, 0x0, 0x0, 0x20, 0x101, 0x0, 0x9, 0x0, 0xfffffff7, 0x613, 0x95b, 0x4, 0xff, 0x5, 0x8000], [0x5, 0xffff7962, 0x3, 0x8, 0x2, 0x7f, 0x3, 0x3, 0x200, 0x1f5, 0x90f, 0x3, 0x17, 0xba6, 0x800, 0x0, 0x80000000, 0x9, 0x2, 0x850a, 0x40, 0x0, 0x9, 0x6, 0x80000001, 0x1228, 0x100000, 0x3ff, 0x5, 0x8, 0x5, 0x4, 0x2, 0x3, 0x5dda, 0x5, 0x7fffffff, 0x6a, 0x2, 0x10000, 0x3, 0x6, 0x6, 0x6, 0x200, 0x4, 0x8, 0x8, 0x8001, 0x5, 0x9, 0x73b3, 0x527e, 0xffff, 0x81, 0x6e, 0x3271353c, 0x1, 0x8, 0x0, 0x800, 0x9, 0x0, 0x7], [0x8, 0xaf4b, 0x80000000, 0x872, 0x6c, 0x0, 0x7b, 0x6fa7, 0x1, 0x20, 0x6, 0x400, 0x5, 0x200, 0x2, 0x800, 0x6677, 0x3, 0x16, 0x200, 0x400, 0x7, 0x81, 0x200, 0x5, 0x1, 0x4, 0x0, 0x8000, 0x4, 0x1ff, 0xcd4a, 0x7, 0x325, 0x9, 0x0, 0x7ff, 0x9, 0x3f, 0x6, 0x6, 0x3, 0x2, 0xfffffbff, 0x6, 0x5, 0x0, 0x3, 0x400, 0x3, 0x7fff, 0x5, 0x2, 0x80, 0x1000, 0x1000, 0x0, 0x1, 0x2, 0x3, 0xa00, 0x9, 0x1, 0x6], [0x4, 0xfff, 0x1fa3cac1, 0x2, 0xfff, 0x8, 0x7ff, 0x10001, 0xff, 0x1000, 0x101, 0x8, 0xffffff03, 0x7ff, 0x1, 0x6, 0xc0, 0x4, 0x4, 0x1, 0x4, 0x4fbf, 0x9, 0x1f, 0x6, 0x1000, 0xffffffff, 0x5, 0xfff, 0x1f, 0x400, 0x8, 0xb64, 0x101, 0xff, 0x1ff, 0x2, 0x80, 0x1f, 0xffffffc1, 0x31a1, 0x10001, 0x9, 0x7fffffff, 0x1, 0x80, 0x7f, 0x9c, 0x10000, 0x4, 0x80000001, 0x6, 0x7, 0x7, 0x3f, 0x4, 0x1ff, 0x4, 0x7fffffff, 0x2, 0x1000, 0xfffffff7, 0x6, 0xe5], 0x36, ['\x00', 'net/ptype\x00', '/dev/ttyS3\x00', 'net/ptype\x00', '/dev/ttyS3\x00', '/dev/ttyS3\x00']}, ["", "", "", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$TIOCSBRK(r1, 0x5427) 17:12:57 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:57 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x900, 0x0) 17:12:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:57 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = signalfd4(r2, &(0x7f0000000080), 0x8, 0x80000) ioctl$TIOCSCTTY(r3, 0x540e, 0x3f) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:12:57 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:12:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x300, 0x0) 17:12:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001400)=""/4087, 0xff7}], 0x1, 0x74, 0x0) 17:12:57 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:57 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:57 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) 17:12:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:58 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/50, &(0x7f0000000080)=0x32) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:58 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) setsockopt$inet_buf(r1, 0x0, 0xb2ddebd6e4f1f76d, &(0x7f00000002c0)="9bef9fed42df310760628e8f47040ede1bd73ddba4487f54cca4996276e06bdccb687cd965cf73fd16099f9720084c80de022f5c8d", 0x35) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x4, "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"}) 17:12:58 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) 17:12:58 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:58 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:58 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:12:58 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/50, &(0x7f0000000080)=0x32) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:12:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:59 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:12:59 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffff000) 17:12:59 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {0xffffffffffffffff, 0x8300}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:00 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {r4, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:00 executing program 5: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/50, &(0x7f0000000080)=0x32) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:13:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:00 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:01 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040), 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0ca1174ca8210f6a7c940b3a4681c3ef9a92e610406bb4703c101d62b994e1339558a969806be6b3c07cb459ba7d693757dcc037e75ffa9a3688dc25ecec03", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="537078bc008000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf2505000000140006006261746164765f736c6176655f3000002a00070073797374656d5f753a6f626a6563745f723a6175646973705f7661725f72756e5f743a733000000014000200fe8000000000000000000000000000aa2400070073797374656d5f753a6f626a6563745f723a6574635f6d61696c5f743a73300008000400ac1e010114000300ff01000000000000000000000000000114000200fe80000000000000000000000000000c"], 0xbc}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x4044001) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 17:13:01 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r2, 0x4, 0x20, 0x8, 0x4, 0x64, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x40, 0x2, 0x3c6}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:01 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x7ffff00c) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x0, 0x0, 0x0) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 17:13:02 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 17:13:03 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r4, r3, 0x0, 0x7ffff000) 17:13:03 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:03 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, 0x0, 0x20001ffd, 0x1) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x7fffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x3c, &(0x7f0000000080)={0x26, 0x4, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:03 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x224}, {r1}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 17:13:03 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x1, 0xe4, 0x22, 0x0, 0x7d, 0x901, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x5, @perf_bp={&(0x7f0000000180), 0x1}, 0x49e03, 0xb7, 0xfffffc01, 0x7, 0x6, 0x401, 0x1000}, 0x0, 0x10, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$setregs(0xf, r1, 0x15e4, &(0x7f0000000080)="857d7659d70fe812938518eef3f1a344be55baff1a0bad8a5a670a83b0574d2bbd2a1dbfa75b2bd767d245ca95204a84f2e9b69681e15fc8b9a8a8732e92fec3b1c4b9f0f22d55f34ad8421c7b925e30defb45c0cb3c587bafa23f5e0976a43e09fdfd5cc2b8c7e1d598301ea148559280fa661c045a4f19bf87f6bd2b89f9a9c7edd87f040ba1c75530dbbc1946d831294d7666209442a9888ad8b74c13a5aa3d50f494c1c719c36157c295de9874ee5989c8a62b602573694ec955c36bc270f13a9aea") write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:03 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x4040008) 17:13:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:03 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:03 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x7ffff000) [ 2472.853590][T29854] FAULT_INJECTION: forcing a failure. [ 2472.853590][T29854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2472.869768][T29854] CPU: 0 PID: 29854 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2472.880252][T29854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2472.890296][T29854] Call Trace: [ 2472.893589][T29854] dump_stack+0x14a/0x1ce [ 2472.897905][T29854] ? devkmsg_release+0x11c/0x11c [ 2472.902851][T29854] ? show_regs_print_info+0x12/0x12 [ 2472.908036][T29854] ? avc_has_perm+0xd5/0x280 [ 2472.914420][T29854] ? avc_has_perm+0x176/0x280 [ 2472.919182][T29854] should_fail+0x6fb/0x860 [ 2472.923668][T29854] ? setup_fault_attr+0x3d0/0x3d0 [ 2472.928899][T29854] ? memset+0x1f/0x40 [ 2472.932883][T29854] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2472.938276][T29854] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2472.943841][T29854] ? memset+0x1f/0x40 [ 2472.948804][T29854] ? unwind_next_frame+0x1c90/0x2330 [ 2472.956358][T29854] ? __rcu_read_lock+0x50/0x50 [ 2472.961104][T29854] skb_page_frag_refill+0xf9/0x370 [ 2472.966327][T29854] tun_build_skb+0x157/0xbe0 [ 2472.970905][T29854] ? unwind_get_return_address_ptr+0x130/0x130 [ 2472.980084][T29854] ? tun_get_user+0x34e0/0x34e0 [ 2472.985186][T29854] ? stack_trace_save+0x1f0/0x1f0 [ 2472.990200][T29854] ? __kernel_text_address+0x93/0x110 [ 2472.995695][T29854] ? unwind_get_return_address+0x48/0x90 [ 2473.001307][T29854] ? arch_stack_walk+0xd8/0x120 [ 2473.006131][T29854] tun_get_user+0x619/0x34e0 [ 2473.010710][T29854] ? kstrtouint_from_user+0x22d/0x2b0 [ 2473.016076][T29854] ? tun_do_read+0x1ed0/0x1ed0 [ 2473.020812][T29854] ? __kasan_slab_free+0x1f2/0x230 [ 2473.025906][T29854] ? __rcu_read_lock+0x50/0x50 [ 2473.030650][T29854] ? perf_trace_ext4_mballoc_alloc+0xa2a/0xbe0 [ 2473.036883][T29854] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2473.042970][T29854] ? __rcu_read_lock+0x50/0x50 [ 2473.047710][T29854] ? proc_fail_nth_write+0x18f/0x250 [ 2473.052969][T29854] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2473.058162][T29854] tun_chr_write_iter+0x121/0x1a0 [ 2473.063163][T29854] __vfs_write+0x59d/0x720 [ 2473.067828][T29854] ? __kernel_write+0x340/0x340 [ 2473.073754][T29854] ? avc_policy_seqno+0x17/0x70 [ 2473.078600][T29854] ? security_file_permission+0x128/0x300 [ 2473.084334][T29854] vfs_write+0x217/0x4f0 [ 2473.088736][T29854] ksys_write+0x18c/0x2c0 [ 2473.093128][T29854] ? file_open_root+0x450/0x450 [ 2473.097966][T29854] ? __ia32_sys_read+0x80/0x80 [ 2473.102719][T29854] do_syscall_64+0xcb/0x150 [ 2473.107204][T29854] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2473.113080][T29854] RIP: 0033:0x4168c1 [ 2473.117227][T29854] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2473.136925][T29854] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2473.145314][T29854] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2473.153282][T29854] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2473.161413][T29854] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2473.169799][T29854] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 2473.177747][T29854] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:03 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {r4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:03 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {r1, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:04 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:04 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x7ffff000) 17:13:04 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:04 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r4, 0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:04 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:04 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2474.002273][T29876] FAULT_INJECTION: forcing a failure. [ 2474.002273][T29876] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.016212][T29876] CPU: 0 PID: 29876 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2474.026627][T29876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.038564][T29876] Call Trace: [ 2474.042959][T29876] dump_stack+0x14a/0x1ce [ 2474.047751][T29876] ? devkmsg_release+0x11c/0x11c [ 2474.052869][T29876] ? show_regs_print_info+0x12/0x12 [ 2474.061334][T29876] should_fail+0x6fb/0x860 [ 2474.068279][T29876] ? setup_fault_attr+0x3d0/0x3d0 [ 2474.073390][T29876] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2474.079110][T29876] ? build_skb+0x29/0x450 [ 2474.085017][T29876] should_failslab+0x5/0x20 [ 2474.092110][T29876] kmem_cache_alloc+0x36/0x260 [ 2474.097390][T29876] ? copy_page_from_iter+0x3f3/0x660 [ 2474.102936][T29876] build_skb+0x29/0x450 [ 2474.109657][T29876] tun_build_skb+0x47b/0xbe0 [ 2474.116187][T29876] ? tun_get_user+0x34e0/0x34e0 [ 2474.121375][T29876] ? stack_trace_save+0x1f0/0x1f0 [ 2474.126773][T29876] ? __kernel_text_address+0x93/0x110 [ 2474.132835][T29876] ? unwind_get_return_address+0x48/0x90 [ 2474.140014][T29876] ? arch_stack_walk+0xd8/0x120 [ 2474.147584][T29876] tun_get_user+0x619/0x34e0 [ 2474.153822][T29876] ? kstrtouint_from_user+0x22d/0x2b0 [ 2474.159467][T29876] ? tun_do_read+0x1ed0/0x1ed0 [ 2474.165131][T29876] ? __kasan_slab_free+0x1f2/0x230 [ 2474.170829][T29876] ? __rcu_read_lock+0x50/0x50 [ 2474.176120][T29876] ? perf_trace_ext4_mballoc_alloc+0xa2a/0xbe0 [ 2474.182517][T29876] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2474.188575][T29876] ? __rcu_read_lock+0x50/0x50 [ 2474.193850][T29876] ? proc_fail_nth_write+0x18f/0x250 [ 2474.199560][T29876] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2474.205216][T29876] tun_chr_write_iter+0x121/0x1a0 [ 2474.210326][T29876] __vfs_write+0x59d/0x720 [ 2474.214715][T29876] ? __kernel_write+0x340/0x340 [ 2474.219536][T29876] ? avc_policy_seqno+0x17/0x70 [ 2474.224978][T29876] ? security_file_permission+0x128/0x300 [ 2474.230673][T29876] vfs_write+0x217/0x4f0 [ 2474.235104][T29876] ksys_write+0x18c/0x2c0 [ 2474.239499][T29876] ? file_open_root+0x450/0x450 [ 2474.244345][T29876] ? __ia32_sys_read+0x80/0x80 [ 2474.249173][T29876] do_syscall_64+0xcb/0x150 [ 2474.253680][T29876] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2474.259990][T29876] RIP: 0033:0x4168c1 [ 2474.266628][T29876] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2474.293938][T29876] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2474.305530][T29876] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2474.320333][T29876] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2474.331267][T29876] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2474.342996][T29876] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 17:13:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {r4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:04 executing program 3 (fault-call:3 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2474.351064][T29876] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:04 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:04 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:05 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:05 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2474.876134][T29890] FAULT_INJECTION: forcing a failure. [ 2474.876134][T29890] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.899903][T29890] CPU: 0 PID: 29890 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2474.913904][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.925256][T29890] Call Trace: [ 2474.928720][T29890] dump_stack+0x14a/0x1ce [ 2474.933977][T29890] ? devkmsg_release+0x11c/0x11c [ 2474.940047][T29890] ? unwind_next_frame+0x1c90/0x2330 [ 2474.956745][T29890] ? show_regs_print_info+0x12/0x12 [ 2474.964625][T29890] should_fail+0x6fb/0x860 [ 2474.971607][T29890] ? setup_fault_attr+0x3d0/0x3d0 [ 2474.976629][T29890] ? fib_table_lookup+0x1aac/0x1c60 [ 2474.983513][T29890] ? unwind_next_frame+0x1c90/0x2330 [ 2474.991464][T29890] ? dst_alloc+0x137/0x4f0 [ 2474.996938][T29890] should_failslab+0x5/0x20 [ 2475.003892][T29890] kmem_cache_alloc+0x36/0x260 [ 2475.009605][T29890] ? __rcu_read_lock+0x50/0x50 [ 2475.015160][T29890] dst_alloc+0x137/0x4f0 [ 2475.019511][T29890] ip_route_input_rcu+0x16c1/0x3540 [ 2475.025439][T29890] ? ip_route_input_noref+0x110/0x110 [ 2475.031444][T29890] ? ipt_do_table+0x189b/0x1b10 [ 2475.036424][T29890] ip_route_input_noref+0xbd/0x110 [ 2475.042243][T29890] ? ip_mc_validate_source+0x350/0x350 [ 2475.050270][T29890] ? tun_sock_write_space+0xc1/0x1b0 [ 2475.055736][T29890] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2475.061913][T29890] ip_rcv_finish_core+0x1fe/0xee0 [ 2475.070681][T29890] ip_rcv+0x254/0x320 [ 2475.075479][T29890] ? ip_local_deliver_finish+0x210/0x210 [ 2475.083750][T29890] ? ip_rcv_core+0xa30/0xa30 [ 2475.094206][T29890] ? ip_local_deliver_finish+0x210/0x210 [ 2475.103002][T29890] __netif_receive_skb+0x20a/0x4f0 [ 2475.108860][T29890] ? build_skb+0x29/0x450 [ 2475.115435][T29890] ? nf_ingress+0x530/0x530 [ 2475.122753][T29890] ? skb_put+0x114/0x1e0 [ 2475.139264][T29890] ? ktime_get_with_offset+0x186/0x1c0 [ 2475.153064][T29890] netif_receive_skb_internal+0x1cc/0x220 [ 2475.165826][T29890] ? netif_receive_skb+0x2b0/0x2b0 [ 2475.173504][T29890] ? _local_bh_enable+0x30/0x30 [ 2475.180703][T29890] ? unwind_get_return_address+0x48/0x90 [ 2475.191142][T29890] ? arch_stack_walk+0xd8/0x120 [ 2475.202433][T29890] netif_receive_skb+0x14a/0x2b0 [ 2475.212017][T29890] tun_get_user+0x2926/0x34e0 [ 2475.220054][T29890] ? kstrtouint_from_user+0x22d/0x2b0 17:13:05 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xecba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e21, @local}}) 17:13:05 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:05 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x1080}, {r4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) [ 2475.228587][T29890] ? tun_do_read+0x1ed0/0x1ed0 [ 2475.244033][T29890] ? __kasan_slab_free+0x1f2/0x230 [ 2475.260285][T29890] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2475.272460][T29890] ? __rcu_read_lock+0x50/0x50 17:13:05 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2475.280847][T29890] ? proc_fail_nth_write+0x18f/0x250 [ 2475.296161][T29890] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2475.302693][T29890] tun_chr_write_iter+0x121/0x1a0 [ 2475.311288][T29890] __vfs_write+0x59d/0x720 [ 2475.317401][T29890] ? __kernel_write+0x340/0x340 [ 2475.323333][T29890] ? avc_policy_seqno+0x17/0x70 [ 2475.329901][T29890] ? security_file_permission+0x128/0x300 [ 2475.337469][T29890] vfs_write+0x217/0x4f0 [ 2475.342466][T29890] ksys_write+0x18c/0x2c0 [ 2475.348970][T29890] ? file_open_root+0x450/0x450 [ 2475.353933][T29890] ? __ia32_sys_read+0x80/0x80 [ 2475.359357][T29890] do_syscall_64+0xcb/0x150 [ 2475.364411][T29890] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2475.370857][T29890] RIP: 0033:0x4168c1 [ 2475.375105][T29890] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2475.398908][T29890] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2475.407579][T29890] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2475.415545][T29890] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 17:13:05 executing program 3 (fault-call:3 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2475.431066][T29890] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.443421][T29890] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002 [ 2475.451648][T29890] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:05 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x8300}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:06 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2476.159025][T29927] FAULT_INJECTION: forcing a failure. [ 2476.159025][T29927] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.171882][T29927] CPU: 0 PID: 29927 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2476.182391][T29927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.194747][T29927] Call Trace: [ 2476.202733][T29927] dump_stack+0x14a/0x1ce [ 2476.207070][T29927] ? devkmsg_release+0x11c/0x11c [ 2476.212003][T29927] ? show_regs_print_info+0x12/0x12 [ 2476.217189][T29927] ? fib_result_prefsrc+0x87/0x4a0 [ 2476.222388][T29927] should_fail+0x6fb/0x860 [ 2476.226790][T29927] ? setup_fault_attr+0x3d0/0x3d0 [ 2476.231894][T29927] ? fib_table_lookup+0x118a/0x1c60 [ 2476.238205][T29927] ? dst_alloc+0x137/0x4f0 [ 2476.242608][T29927] should_failslab+0x5/0x20 [ 2476.247205][T29927] kmem_cache_alloc+0x36/0x260 [ 2476.252230][T29927] ? __rcu_read_lock+0x50/0x50 [ 2476.260658][T29927] dst_alloc+0x137/0x4f0 [ 2476.265253][T29927] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2476.276656][T29927] ? ip_route_output_key_hash+0x220/0x220 [ 2476.282942][T29927] ? __kasan_kmalloc+0x12c/0x1c0 [ 2476.288349][T29927] ? kmem_cache_alloc+0x1d5/0x260 [ 2476.294998][T29927] ? dst_alloc+0x137/0x4f0 [ 2476.299463][T29927] ? ip_route_input_rcu+0x16c1/0x3540 [ 2476.304814][T29927] ? ip_rcv_finish_core+0x1fe/0xee0 [ 2476.310618][T29927] ip_route_output_key_hash+0x151/0x220 [ 2476.317252][T29927] ? ip_route_input_rcu+0x3540/0x3540 [ 2476.323410][T29927] ? make_kuid+0x222/0x380 [ 2476.327818][T29927] ? __put_user_ns+0x50/0x50 [ 2476.332385][T29927] __icmp_send+0x10c6/0x23a0 [ 2476.337647][T29927] ? icmp_out_count+0x90/0x90 [ 2476.344020][T29927] ? percpu_counter_add_batch+0x12d/0x150 [ 2476.356123][T29927] ? memset+0x1f/0x40 [ 2476.360271][T29927] ? ip_route_input_rcu+0x1a1d/0x3540 [ 2476.365898][T29927] ? __ip_options_compile+0x197d/0x1ab0 [ 2476.371622][T29927] ? ip_route_input_noref+0xc4/0x110 [ 2476.376898][T29927] ip_options_compile+0xe6/0x180 [ 2476.381958][T29927] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2476.387488][T29927] ? tun_sock_write_space+0xc1/0x1b0 [ 2476.393166][T29927] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2476.398331][T29927] ip_rcv_finish_core+0x751/0xee0 [ 2476.404061][T29927] ip_rcv+0x254/0x320 [ 2476.408037][T29927] ? ip_local_deliver_finish+0x210/0x210 [ 2476.413646][T29927] ? ip_rcv_core+0xa30/0xa30 [ 2476.418385][T29927] ? ip_local_deliver_finish+0x210/0x210 [ 2476.425230][T29927] __netif_receive_skb+0x20a/0x4f0 [ 2476.430857][T29927] ? build_skb+0x29/0x450 [ 2476.435300][T29927] ? nf_ingress+0x530/0x530 [ 2476.439793][T29927] ? skb_put+0x114/0x1e0 [ 2476.444018][T29927] ? ktime_get_with_offset+0x186/0x1c0 [ 2476.450111][T29927] netif_receive_skb_internal+0x1cc/0x220 [ 2476.456560][T29927] ? netif_receive_skb+0x2b0/0x2b0 [ 2476.461672][T29927] ? _local_bh_enable+0x30/0x30 [ 2476.466501][T29927] ? unwind_get_return_address+0x48/0x90 [ 2476.472132][T29927] ? arch_stack_walk+0xd8/0x120 [ 2476.477068][T29927] netif_receive_skb+0x14a/0x2b0 [ 2476.482076][T29927] tun_get_user+0x2926/0x34e0 [ 2476.486743][T29927] ? kstrtouint_from_user+0x22d/0x2b0 [ 2476.492096][T29927] ? tun_do_read+0x1ed0/0x1ed0 [ 2476.497072][T29927] ? __kasan_slab_free+0x1f2/0x230 [ 2476.502468][T29927] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 17:13:06 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002abd7002ffdbe2020000000800010000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:06 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:06 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:06 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {r4, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:06 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {r1}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) [ 2476.510315][T29927] ? __rcu_read_lock+0x50/0x50 [ 2476.515266][T29927] ? proc_fail_nth_write+0x18f/0x250 [ 2476.521084][T29927] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2476.526404][T29927] tun_chr_write_iter+0x121/0x1a0 [ 2476.531632][T29927] __vfs_write+0x59d/0x720 [ 2476.536747][T29927] ? __kernel_write+0x340/0x340 [ 2476.542212][T29927] ? avc_policy_seqno+0x17/0x70 [ 2476.547087][T29927] ? security_file_permission+0x128/0x300 [ 2476.552818][T29927] vfs_write+0x217/0x4f0 [ 2476.558398][T29927] ksys_write+0x18c/0x2c0 [ 2476.566642][T29927] ? file_open_root+0x450/0x450 [ 2476.571495][T29927] ? __ia32_sys_read+0x80/0x80 [ 2476.579809][T29927] do_syscall_64+0xcb/0x150 [ 2476.584323][T29927] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2476.590417][T29927] RIP: 0033:0x4168c1 [ 2476.594491][T29927] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2476.615574][T29927] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2476.626793][T29927] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2476.635183][T29927] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2476.646951][T29927] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.655177][T29927] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003 [ 2476.665383][T29927] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:07 executing program 3 (fault-call:3 fault-nth:4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:07 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:07 executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) 17:13:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) 17:13:07 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) [ 2476.742986][T29946] FAULT_INJECTION: forcing a failure. [ 2476.742986][T29946] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.757793][T29946] CPU: 0 PID: 29946 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2476.769677][T29946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2476.780009][T29946] Call Trace: [ 2476.784686][T29946] dump_stack+0x14a/0x1ce [ 2476.789735][T29946] ? devkmsg_release+0x11c/0x11c [ 2476.794805][T29946] ? show_regs_print_info+0x12/0x12 [ 2476.805395][T29946] ? rt_set_nexthop+0x48b/0x1140 [ 2476.812042][T29946] should_fail+0x6fb/0x860 [ 2476.816915][T29946] ? setup_fault_attr+0x3d0/0x3d0 [ 2476.822097][T29946] ? ip_route_output_key_hash_rcu+0x8c8/0x2230 [ 2476.828300][T29946] ? inet_peer_base_init+0x20/0x20 [ 2476.833886][T29946] ? ip_setup_cork+0x4fe/0x810 [ 2476.846459][T29946] should_failslab+0x5/0x20 [ 2476.851671][T29946] kmem_cache_alloc_trace+0x39/0x280 [ 2476.859368][T29946] ip_setup_cork+0x4fe/0x810 [ 2476.864641][T29946] ip_append_data+0x155/0x1a0 [ 2476.870693][T29946] ? icmp_err+0x280/0x280 [ 2476.875221][T29946] icmp_push_reply+0x100/0x430 [ 2476.881171][T29946] ? inet_peer_xrlim_allow+0xf7/0x170 [ 2476.887499][T29946] __icmp_send+0x1b80/0x23a0 [ 2476.892823][T29946] ? icmp_out_count+0x90/0x90 [ 2476.899561][T29946] ? percpu_counter_add_batch+0x12d/0x150 [ 2476.908198][T29946] ? __ip_options_compile+0xf2/0x1ab0 [ 2476.913587][T29946] ? __ip_options_compile+0x197d/0x1ab0 [ 2476.920898][T29946] ? ip_route_input_noref+0xc4/0x110 [ 2476.928734][T29946] ip_options_compile+0xe6/0x180 [ 2476.934859][T29946] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2476.941572][T29946] ? tun_sock_write_space+0xc1/0x1b0 [ 2476.949068][T29946] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2476.954191][T29946] ip_rcv_finish_core+0x751/0xee0 [ 2476.959681][T29946] ip_rcv+0x254/0x320 [ 2476.963752][T29946] ? ip_local_deliver_finish+0x210/0x210 [ 2476.969621][T29946] ? ip_rcv_core+0xa30/0xa30 [ 2476.974217][T29946] ? ip_local_deliver_finish+0x210/0x210 [ 2476.981043][T29946] __netif_receive_skb+0x20a/0x4f0 [ 2476.986337][T29946] ? build_skb+0x29/0x450 [ 2476.990748][T29946] ? nf_ingress+0x530/0x530 [ 2476.995343][T29946] ? skb_put+0x114/0x1e0 [ 2476.999940][T29946] ? ktime_get_with_offset+0x186/0x1c0 [ 2477.006666][T29946] netif_receive_skb_internal+0x1cc/0x220 [ 2477.017701][T29946] ? netif_receive_skb+0x2b0/0x2b0 [ 2477.023612][T29946] ? _local_bh_enable+0x30/0x30 [ 2477.029375][T29946] ? unwind_get_return_address+0x48/0x90 [ 2477.037177][T29946] ? arch_stack_walk+0xd8/0x120 [ 2477.042735][T29946] netif_receive_skb+0x14a/0x2b0 [ 2477.048062][T29946] tun_get_user+0x2926/0x34e0 [ 2477.053009][T29946] ? kstrtouint_from_user+0x22d/0x2b0 [ 2477.058753][T29946] ? tun_do_read+0x1ed0/0x1ed0 [ 2477.065038][T29946] ? __kasan_slab_free+0x1f2/0x230 [ 2477.072419][T29946] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2477.078737][T29946] ? __rcu_read_lock+0x50/0x50 [ 2477.083685][T29946] ? proc_fail_nth_write+0x18f/0x250 [ 2477.091395][T29946] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2477.100513][T29946] tun_chr_write_iter+0x121/0x1a0 [ 2477.107933][T29946] __vfs_write+0x59d/0x720 [ 2477.112535][T29946] ? __kernel_write+0x340/0x340 [ 2477.121916][T29946] ? avc_policy_seqno+0x17/0x70 [ 2477.130533][T29946] ? security_file_permission+0x128/0x300 [ 2477.139912][T29946] vfs_write+0x217/0x4f0 [ 2477.147286][T29946] ksys_write+0x18c/0x2c0 [ 2477.153082][T29946] ? __ia32_sys_read+0x80/0x80 [ 2477.158111][T29946] do_syscall_64+0xcb/0x150 [ 2477.163489][T29946] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2477.171065][T29946] RIP: 0033:0x4168c1 [ 2477.174970][T29946] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2477.206725][T29946] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2477.219010][T29946] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2477.230219][T29946] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2477.238882][T29946] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.246977][T29946] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 2477.255708][T29946] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:08 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000011c0)={0x1, 0x4, 0x1000, 0xff, &(0x7f00000000c0)="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", 0x1000, 0x0, &(0x7f00000001c0)="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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:08 executing program 3 (fault-call:3 fault-nth:5): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {r1}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:08 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) [ 2477.872340][T29966] FAULT_INJECTION: forcing a failure. [ 2477.872340][T29966] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.892202][T29966] CPU: 0 PID: 29966 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2477.903350][T29966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2477.914445][T29966] Call Trace: [ 2477.919457][T29966] dump_stack+0x14a/0x1ce [ 2477.924401][T29966] ? devkmsg_release+0x11c/0x11c [ 2477.930249][T29966] ? memset+0x1f/0x40 [ 2477.934237][T29966] ? show_regs_print_info+0x12/0x12 [ 2477.939802][T29966] ? unwind_next_frame+0x1c90/0x2330 [ 2477.948498][T29966] should_fail+0x6fb/0x860 [ 2477.953255][T29966] ? setup_fault_attr+0x3d0/0x3d0 [ 2477.959256][T29966] ? __alloc_skb+0x88/0x4d0 [ 2477.963753][T29966] should_failslab+0x5/0x20 [ 2477.968415][T29966] kmem_cache_alloc+0x36/0x260 [ 2477.974210][T29966] __alloc_skb+0x88/0x4d0 [ 2477.981338][T29966] ? arch_stack_walk+0xd8/0x120 [ 2477.986178][T29966] alloc_skb_with_frags+0xb1/0x580 [ 2477.991298][T29966] ? stack_trace_save+0x123/0x1f0 [ 2477.996345][T29966] ? __kasan_kmalloc+0x12c/0x1c0 [ 2478.001477][T29966] sock_alloc_send_pskb+0x87e/0xcc0 [ 2478.006686][T29966] ? sock_kzfree_s+0x50/0x50 [ 2478.011735][T29966] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2478.018176][T29966] ? ip_setup_cork+0x4fe/0x810 [ 2478.023023][T29966] ? ip_append_data+0x155/0x1a0 [ 2478.029296][T29966] ? icmp_push_reply+0x100/0x430 [ 2478.039695][T29966] ? __icmp_send+0x1b80/0x23a0 [ 2478.046824][T29966] ? ip_options_compile+0xe6/0x180 [ 2478.052220][T29966] ? ip_rcv_finish_core+0x751/0xee0 [ 2478.060268][T29966] ? ip_rcv+0x254/0x320 [ 2478.065366][T29966] ? __netif_receive_skb+0x20a/0x4f0 [ 2478.070995][T29966] ? netif_receive_skb_internal+0x1cc/0x220 [ 2478.080482][T29966] ? netif_receive_skb+0x14a/0x2b0 [ 2478.086340][T29966] ? tun_get_user+0x2926/0x34e0 [ 2478.093219][T29966] ? tun_chr_write_iter+0x121/0x1a0 [ 2478.099388][T29966] ? vfs_write+0x217/0x4f0 [ 2478.103812][T29966] ? ksys_write+0x18c/0x2c0 [ 2478.108299][T29966] ? do_syscall_64+0xcb/0x150 [ 2478.113416][T29966] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.119588][T29966] __ip_append_data+0x1fb9/0x3170 [ 2478.124609][T29966] ? icmp_err+0x280/0x280 [ 2478.129543][T29966] ? ip_setup_cork+0x810/0x810 [ 2478.134534][T29966] ? ip_setup_cork+0x46b/0x810 [ 2478.146208][T29966] ip_append_data+0x12c/0x1a0 [ 2478.151715][T29966] ? icmp_err+0x280/0x280 [ 2478.156025][T29966] icmp_push_reply+0x100/0x430 [ 2478.161146][T29966] ? inet_peer_xrlim_allow+0xf7/0x170 [ 2478.166763][T29966] __icmp_send+0x1b80/0x23a0 [ 2478.171827][T29966] ? icmp_out_count+0x90/0x90 [ 2478.179305][T29966] ? percpu_counter_add_batch+0x12d/0x150 [ 2478.185562][T29966] ? __ip_options_compile+0x197d/0x1ab0 [ 2478.192248][T29966] ? ip_route_input_noref+0xc4/0x110 [ 2478.198058][T29966] ip_options_compile+0xe6/0x180 [ 2478.203864][T29966] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2478.210601][T29966] ? tun_sock_write_space+0xc1/0x1b0 [ 2478.215858][T29966] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2478.221946][T29966] ip_rcv_finish_core+0x751/0xee0 [ 2478.227263][T29966] ip_rcv+0x254/0x320 [ 2478.234128][T29966] ? switch_mm+0x100/0x100 [ 2478.239596][T29966] ? ip_local_deliver_finish+0x210/0x210 [ 2478.246972][T29966] ? ip_rcv_core+0xa30/0xa30 [ 2478.253716][T29966] ? __schedule+0x920/0xef0 [ 2478.259696][T29966] ? ip_local_deliver_finish+0x210/0x210 [ 2478.265742][T29966] __netif_receive_skb+0x20a/0x4f0 [ 2478.271200][T29966] ? nf_ingress+0x530/0x530 [ 2478.276571][T29966] ? skb_put+0x114/0x1e0 [ 2478.282647][T29966] ? ktime_get_with_offset+0x186/0x1c0 [ 2478.289585][T29966] netif_receive_skb_internal+0x1cc/0x220 [ 2478.296789][T29966] ? netif_receive_skb+0x2b0/0x2b0 [ 2478.302049][T29966] ? _local_bh_enable+0x30/0x30 [ 2478.306878][T29966] ? tun_get_user+0xdb9/0x34e0 [ 2478.313572][T29966] netif_receive_skb+0x14a/0x2b0 [ 2478.321554][T29966] tun_get_user+0x2926/0x34e0 [ 2478.326401][T29966] ? kstrtouint_from_user+0x22d/0x2b0 [ 2478.333298][T29966] ? tun_do_read+0x1ed0/0x1ed0 [ 2478.338697][T29966] ? __kasan_slab_free+0x1f2/0x230 [ 2478.343888][T29966] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.350040][T29966] ? __rcu_read_lock+0x50/0x50 [ 2478.354797][T29966] ? proc_fail_nth_write+0x18f/0x250 [ 2478.360142][T29966] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2478.366541][T29966] tun_chr_write_iter+0x121/0x1a0 [ 2478.373234][T29966] __vfs_write+0x59d/0x720 [ 2478.378019][T29966] ? __kernel_write+0x340/0x340 [ 2478.383289][T29966] ? avc_policy_seqno+0x17/0x70 [ 2478.388636][T29966] ? security_file_permission+0x128/0x300 [ 2478.396250][T29966] vfs_write+0x217/0x4f0 [ 2478.401000][T29966] ksys_write+0x18c/0x2c0 [ 2478.405935][T29966] ? __ia32_sys_read+0x80/0x80 [ 2478.410967][T29966] do_syscall_64+0xcb/0x150 [ 2478.415622][T29966] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.422641][T29966] RIP: 0033:0x4168c1 [ 2478.426523][T29966] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2478.449670][T29966] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2478.459307][T29966] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 17:13:08 executing program 3 (fault-call:3 fault-nth:6): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:08 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2478.467367][T29966] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2478.477616][T29966] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.487398][T29966] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 2478.495442][T29966] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c [ 2478.562718][T29982] FAULT_INJECTION: forcing a failure. [ 2478.562718][T29982] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.563670][T29981] FAULT_INJECTION: forcing a failure. [ 2478.563670][T29981] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.587840][T29982] CPU: 1 PID: 29982 Comm: syz-executor.5 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2478.619177][T29982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2478.630125][T29982] Call Trace: [ 2478.633584][T29982] dump_stack+0x14a/0x1ce [ 2478.639407][T29982] ? devkmsg_release+0x11c/0x11c [ 2478.647049][T29982] ? show_regs_print_info+0x12/0x12 [ 2478.654524][T29982] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.665119][T29982] should_fail+0x6fb/0x860 [ 2478.669614][T29982] ? setup_fault_attr+0x3d0/0x3d0 [ 2478.678565][T29982] ? __down_read+0xf1/0x210 [ 2478.683666][T29982] ? stack_trace_save+0x1f0/0x1f0 [ 2478.690093][T29982] ? ion_buffer_alloc+0x141/0x630 [ 2478.697815][T29982] should_failslab+0x5/0x20 [ 2478.703261][T29982] kmem_cache_alloc_trace+0x39/0x280 [ 2478.709157][T29982] ? arch_stack_walk+0xd8/0x120 [ 2478.714395][T29982] ion_buffer_alloc+0x141/0x630 [ 2478.719408][T29982] ion_dmabuf_alloc+0xcb/0x230 [ 2478.724927][T29982] ? track_buffer_created+0x1c0/0x1c0 [ 2478.732495][T29982] ? check_stack_object+0x5a/0x90 [ 2478.740951][T29982] ion_ioctl+0x2e8/0x9c0 [ 2478.745592][T29982] ? get_pid_task+0x86/0x90 [ 2478.750480][T29982] ? proc_fail_nth_write+0x18f/0x250 [ 2478.757437][T29982] ? debug_shrink_set+0x1b0/0x1b0 [ 2478.765191][T29982] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2478.771084][T29982] ? memset+0x1f/0x40 [ 2478.778024][T29982] ? fsnotify+0x13a0/0x1460 [ 2478.784534][T29982] ? debug_shrink_set+0x1b0/0x1b0 [ 2478.789997][T29982] do_vfs_ioctl+0x770/0x1750 [ 2478.795261][T29982] ? selinux_file_ioctl+0x73b/0x990 [ 2478.802267][T29982] ? ioctl_preallocate+0x250/0x250 [ 2478.809658][T29982] ? __fget+0x37c/0x3c0 [ 2478.816259][T29982] ? vfs_write+0x427/0x4f0 [ 2478.821886][T29982] ? fget_many+0x20/0x20 [ 2478.830313][T29982] ? ksys_write+0x25d/0x2c0 [ 2478.837676][T29982] ? file_open_root+0x450/0x450 [ 2478.848667][T29982] ? security_file_ioctl+0xad/0xc0 [ 2478.856278][T29982] __x64_sys_ioctl+0xd4/0x110 [ 2478.862113][T29982] do_syscall_64+0xcb/0x150 [ 2478.868311][T29982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2478.883682][T29982] RIP: 0033:0x45ce69 [ 2478.888354][T29982] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2478.921330][T29982] RSP: 002b:00007f36e4617c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.933735][T29982] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2478.946883][T29982] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2478.960057][T29982] RBP: 00007f36e4617ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.972842][T29982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2478.985775][T29982] R13: 00007ffe84a5ce7f R14: 00007f36e46189c0 R15: 000000000118bf2c [ 2478.994311][T29981] CPU: 0 PID: 29981 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2479.007858][T29981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.018708][T29981] Call Trace: [ 2479.022003][T29981] dump_stack+0x14a/0x1ce [ 2479.027642][T29981] ? devkmsg_release+0x11c/0x11c [ 2479.034954][T29981] ? show_regs_print_info+0x12/0x12 [ 2479.043087][T29981] should_fail+0x6fb/0x860 [ 2479.049226][T29981] ? setup_fault_attr+0x3d0/0x3d0 [ 2479.055271][T29981] ? alloc_skb_with_frags+0xb1/0x580 [ 2479.060908][T29981] should_failslab+0x5/0x20 [ 2479.067082][T29981] __kmalloc_track_caller+0x5d/0x2c0 [ 2479.073813][T29981] ? kmem_cache_alloc+0x1d5/0x260 [ 2479.078916][T29981] ? alloc_skb_with_frags+0xb1/0x580 [ 2479.085352][T29981] __alloc_skb+0xd1/0x4d0 [ 2479.092668][T29981] ? arch_stack_walk+0xd8/0x120 [ 2479.098382][T29981] alloc_skb_with_frags+0xb1/0x580 [ 2479.104883][T29981] ? stack_trace_save+0x123/0x1f0 [ 2479.113388][T29981] ? __kasan_kmalloc+0x12c/0x1c0 [ 2479.118421][T29981] sock_alloc_send_pskb+0x87e/0xcc0 [ 2479.123950][T29981] ? sock_kzfree_s+0x50/0x50 [ 2479.128516][T29981] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2479.134157][T29981] ? ip_setup_cork+0x4fe/0x810 [ 2479.141273][T29981] ? ip_append_data+0x155/0x1a0 [ 2479.147064][T29981] ? icmp_push_reply+0x100/0x430 [ 2479.152950][T29981] ? __icmp_send+0x1b80/0x23a0 [ 2479.157726][T29981] ? ip_options_compile+0xe6/0x180 [ 2479.163128][T29981] ? ip_rcv_finish_core+0x751/0xee0 [ 2479.168957][T29981] ? ip_rcv+0x254/0x320 [ 2479.173110][T29981] ? __netif_receive_skb+0x20a/0x4f0 [ 2479.178368][T29981] ? netif_receive_skb_internal+0x1cc/0x220 [ 2479.184321][T29981] ? netif_receive_skb+0x14a/0x2b0 [ 2479.190493][T29981] ? tun_get_user+0x2926/0x34e0 [ 2479.195674][T29981] ? tun_chr_write_iter+0x121/0x1a0 [ 2479.201762][T29981] ? vfs_write+0x217/0x4f0 [ 2479.207127][T29981] ? ksys_write+0x18c/0x2c0 [ 2479.211604][T29981] ? do_syscall_64+0xcb/0x150 [ 2479.216439][T29981] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2479.223283][T29981] __ip_append_data+0x1fb9/0x3170 [ 2479.229218][T29981] ? icmp_err+0x280/0x280 [ 2479.233546][T29981] ? ip_setup_cork+0x810/0x810 [ 2479.238892][T29981] ? ip_setup_cork+0x46b/0x810 [ 2479.243646][T29981] ip_append_data+0x12c/0x1a0 [ 2479.249349][T29981] ? icmp_err+0x280/0x280 [ 2479.254136][T29981] icmp_push_reply+0x100/0x430 [ 2479.260191][T29981] ? inet_peer_xrlim_allow+0xf7/0x170 [ 2479.265629][T29981] __icmp_send+0x1b80/0x23a0 [ 2479.270206][T29981] ? icmp_out_count+0x90/0x90 [ 2479.276292][T29981] ? percpu_counter_add_batch+0x12d/0x150 [ 2479.282390][T29981] ? __ip_options_compile+0x197d/0x1ab0 [ 2479.289211][T29981] ? ip_route_input_noref+0xc4/0x110 [ 2479.294735][T29981] ip_options_compile+0xe6/0x180 [ 2479.299652][T29981] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2479.305713][T29981] ? tun_sock_write_space+0xc1/0x1b0 [ 2479.311147][T29981] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2479.316006][T29981] ip_rcv_finish_core+0x751/0xee0 [ 2479.321435][T29981] ip_rcv+0x254/0x320 [ 2479.325393][T29981] ? ip_local_deliver_finish+0x210/0x210 [ 2479.331348][T29981] ? ip_rcv_core+0xa30/0xa30 [ 2479.335919][T29981] ? ip_local_deliver_finish+0x210/0x210 [ 2479.341561][T29981] __netif_receive_skb+0x20a/0x4f0 [ 2479.347127][T29981] ? build_skb+0x29/0x450 [ 2479.351478][T29981] ? nf_ingress+0x530/0x530 [ 2479.355976][T29981] ? skb_put+0x114/0x1e0 [ 2479.360282][T29981] ? ktime_get_with_offset+0x186/0x1c0 [ 2479.369616][T29981] netif_receive_skb_internal+0x1cc/0x220 [ 2479.375406][T29981] ? netif_receive_skb+0x2b0/0x2b0 [ 2479.380494][T29981] ? _local_bh_enable+0x30/0x30 [ 2479.385339][T29981] ? unwind_get_return_address+0x48/0x90 [ 2479.390939][T29981] ? arch_stack_walk+0xd8/0x120 [ 2479.395935][T29981] netif_receive_skb+0x14a/0x2b0 [ 2479.400849][T29981] tun_get_user+0x2926/0x34e0 [ 2479.405514][T29981] ? kstrtouint_from_user+0x22d/0x2b0 [ 2479.410865][T29981] ? tun_do_read+0x1ed0/0x1ed0 [ 2479.418056][T29981] ? __kasan_slab_free+0x1f2/0x230 [ 2479.423668][T29981] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2479.429728][T29981] ? __rcu_read_lock+0x50/0x50 [ 2479.434525][T29981] ? proc_fail_nth_write+0x18f/0x250 [ 2479.439991][T29981] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2479.445270][T29981] tun_chr_write_iter+0x121/0x1a0 [ 2479.450271][T29981] __vfs_write+0x59d/0x720 [ 2479.454659][T29981] ? __kernel_write+0x340/0x340 [ 2479.459482][T29981] ? avc_policy_seqno+0x17/0x70 [ 2479.464330][T29981] ? security_file_permission+0x128/0x300 [ 2479.470019][T29981] vfs_write+0x217/0x4f0 [ 2479.475228][T29981] ksys_write+0x18c/0x2c0 [ 2479.479619][T29981] ? file_open_root+0x450/0x450 [ 2479.484460][T29981] ? __ia32_sys_read+0x80/0x80 [ 2479.489208][T29981] do_syscall_64+0xcb/0x150 [ 2479.493687][T29981] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2479.501472][T29981] RIP: 0033:0x4168c1 [ 2479.505352][T29981] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2479.525021][T29981] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2479.533417][T29981] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2479.541361][T29981] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2479.549417][T29981] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2479.557455][T29981] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000006 17:13:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x1080}, {r1}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) [ 2479.565586][T29981] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:10 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:10 executing program 3 (fault-call:3 fault-nth:7): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:10 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4b47, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4b49, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x541b, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2479.661796][T29998] FAULT_INJECTION: forcing a failure. [ 2479.661796][T29998] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.674441][T29998] CPU: 1 PID: 29998 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2479.684581][T29998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2479.695502][T29998] Call Trace: [ 2479.698803][T29998] dump_stack+0x14a/0x1ce [ 2479.703138][T29998] ? devkmsg_release+0x11c/0x11c 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2479.709553][T29998] ? show_regs_print_info+0x12/0x12 [ 2479.714851][T29998] should_fail+0x6fb/0x860 [ 2479.719269][T29998] ? setup_fault_attr+0x3d0/0x3d0 [ 2479.724289][T29998] ? skb_clone+0x1b2/0x370 [ 2479.728699][T29998] should_failslab+0x5/0x20 [ 2479.733201][T29998] kmem_cache_alloc+0x36/0x260 [ 2479.737964][T29998] skb_clone+0x1b2/0x370 [ 2479.742211][T29998] ip_mc_output+0x4e5/0x9f0 [ 2479.746727][T29998] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2479.752190][T29998] ? nf_hook_slow+0x1a6/0x1f0 [ 2479.756873][T29998] ? __ip_local_out+0x33b/0x470 [ 2479.761728][T29998] ? ip_send_check+0xd0/0xd0 [ 2479.767899][T29998] ? __ip_local_out+0x470/0x470 [ 2479.775018][T29998] ? icmp_push_reply+0x2f7/0x430 [ 2479.780045][T29998] ip_push_pending_frames+0xf3/0x190 [ 2479.785694][T29998] __icmp_send+0x1b80/0x23a0 [ 2479.790288][T29998] ? icmp_out_count+0x90/0x90 [ 2479.794970][T29998] ? percpu_counter_add_batch+0x12d/0x150 [ 2479.800704][T29998] ? __ip_options_compile+0x197d/0x1ab0 [ 2479.808955][T29998] ? ip_route_input_noref+0xc4/0x110 [ 2479.814219][T29998] ip_options_compile+0xe6/0x180 [ 2479.819309][T29998] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2479.824830][T29998] ? sctp_csum_combine+0x30/0x30 [ 2479.829743][T29998] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2479.834778][T29998] ip_rcv_finish_core+0x751/0xee0 [ 2479.839952][T29998] ip_rcv+0x254/0x320 [ 2479.843941][T29998] ? ip_local_deliver_finish+0x210/0x210 [ 2479.849543][T29998] ? ip_rcv_core+0xa30/0xa30 [ 2479.854106][T29998] ? ip_local_deliver_finish+0x210/0x210 [ 2479.859817][T29998] __netif_receive_skb+0x20a/0x4f0 [ 2479.864904][T29998] ? build_skb+0x29/0x450 [ 2479.869314][T29998] ? nf_ingress+0x530/0x530 [ 2479.873788][T29998] ? skb_put+0x114/0x1e0 [ 2479.878003][T29998] ? ktime_get_with_offset+0x186/0x1c0 [ 2479.883432][T29998] netif_receive_skb_internal+0x1cc/0x220 [ 2479.889126][T29998] ? netif_receive_skb+0x2b0/0x2b0 [ 2479.894210][T29998] ? _local_bh_enable+0x30/0x30 [ 2479.899044][T29998] ? unwind_get_return_address+0x48/0x90 [ 2479.904661][T29998] ? arch_stack_walk+0xd8/0x120 [ 2479.909519][T29998] netif_receive_skb+0x14a/0x2b0 [ 2479.914627][T29998] tun_get_user+0x2926/0x34e0 [ 2479.919391][T29998] ? kstrtouint_from_user+0x22d/0x2b0 [ 2479.924758][T29998] ? tun_do_read+0x1ed0/0x1ed0 [ 2479.929937][T29998] ? __kasan_slab_free+0x1f2/0x230 [ 2479.935021][T29998] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2479.941165][T29998] ? __rcu_read_lock+0x50/0x50 [ 2479.945992][T29998] ? proc_fail_nth_write+0x18f/0x250 [ 2479.951256][T29998] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2479.956425][T29998] tun_chr_write_iter+0x121/0x1a0 [ 2479.961430][T29998] __vfs_write+0x59d/0x720 [ 2479.965827][T29998] ? __kernel_write+0x340/0x340 [ 2479.971010][T29998] ? avc_policy_seqno+0x17/0x70 [ 2479.976017][T29998] ? security_file_permission+0x128/0x300 [ 2479.981709][T29998] vfs_write+0x217/0x4f0 [ 2479.985926][T29998] ksys_write+0x18c/0x2c0 [ 2479.990316][T29998] ? __ia32_sys_read+0x80/0x80 [ 2479.995078][T29998] do_syscall_64+0xcb/0x150 [ 2479.999675][T29998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2480.005564][T29998] RIP: 0033:0x4168c1 [ 2480.009648][T29998] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2480.029239][T29998] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2480.038092][T29998] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2480.046037][T29998] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2480.054373][T29998] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.062321][T29998] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000007 [ 2480.074806][T29998] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {r1, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:10 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {r4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 3 (fault-call:3 fault-nth:8): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:10 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:10 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x200, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xffb5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xaacc}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xa6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4a9b}, {0x6, 0x11, 0x101}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x401}}]}, 0x200}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8a8972eca16f9b23, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x40, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast1}, 0x1, 0x81, 0x7, 0x9d03}}) [ 2480.517114][T30025] FAULT_INJECTION: forcing a failure. [ 2480.517114][T30025] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.529880][T30025] CPU: 1 PID: 30025 Comm: syz-executor.3 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2480.540805][T30025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2480.550855][T30025] Call Trace: [ 2480.554182][T30025] dump_stack+0x14a/0x1ce [ 2480.560575][T30025] ? devkmsg_release+0x11c/0x11c [ 2480.566815][T30025] ? ip_rcv_finish_core+0x751/0xee0 [ 2480.572102][T30025] ? show_regs_print_info+0x12/0x12 [ 2480.579980][T30025] ? vfs_write+0x217/0x4f0 [ 2480.585248][T30025] should_fail+0x6fb/0x860 [ 2480.591276][T30025] ? setup_fault_attr+0x3d0/0x3d0 [ 2480.596296][T30025] ? dst_alloc+0x137/0x4f0 [ 2480.601914][T30025] should_failslab+0x5/0x20 [ 2480.606483][T30025] kmem_cache_alloc+0x36/0x260 [ 2480.611495][T30025] dst_alloc+0x137/0x4f0 [ 2480.615719][T30025] rt_dst_clone+0x53/0x670 [ 2480.620328][T30025] ip_mc_finish_output+0xad/0x3a0 [ 2480.625615][T30025] ip_mc_output+0x6d7/0x9f0 [ 2480.630132][T30025] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2480.635612][T30025] ? ip_mc_output+0x9f0/0x9f0 [ 2480.642122][T30025] ? __ip_local_out+0x33b/0x470 [ 2480.648090][T30025] ? ip_send_check+0xd0/0xd0 [ 2480.652656][T30025] ? __ip_local_out+0x470/0x470 [ 2480.657493][T30025] ? icmp_push_reply+0x2f7/0x430 [ 2480.662401][T30025] ip_push_pending_frames+0xf3/0x190 [ 2480.667677][T30025] __icmp_send+0x1b80/0x23a0 [ 2480.672418][T30025] ? icmp_out_count+0x90/0x90 [ 2480.677073][T30025] ? percpu_counter_add_batch+0x12d/0x150 [ 2480.682779][T30025] ? __ip_options_compile+0x197d/0x1ab0 [ 2480.688317][T30025] ? ip_route_input_noref+0xc4/0x110 [ 2480.693664][T30025] ip_options_compile+0xe6/0x180 [ 2480.699386][T30025] ? __ip_options_compile+0x1ab0/0x1ab0 [ 2480.705368][T30025] ? tun_sock_write_space+0xc1/0x1b0 [ 2480.710730][T30025] ? nf_nat_ipv4_in+0x24c/0x3a0 [ 2480.715550][T30025] ip_rcv_finish_core+0x751/0xee0 [ 2480.720737][T30025] ip_rcv+0x254/0x320 [ 2480.724888][T30025] ? ip_local_deliver_finish+0x210/0x210 [ 2480.730616][T30025] ? ip_rcv_core+0xa30/0xa30 [ 2480.735380][T30025] ? ip_local_deliver_finish+0x210/0x210 [ 2480.741083][T30025] __netif_receive_skb+0x20a/0x4f0 [ 2480.746171][T30025] ? build_skb+0x29/0x450 [ 2480.750482][T30025] ? nf_ingress+0x530/0x530 [ 2480.754963][T30025] ? skb_put+0x114/0x1e0 [ 2480.759196][T30025] ? ktime_get_with_offset+0x186/0x1c0 [ 2480.764632][T30025] netif_receive_skb_internal+0x1cc/0x220 [ 2480.770339][T30025] ? netif_receive_skb+0x2b0/0x2b0 [ 2480.775420][T30025] ? _local_bh_enable+0x30/0x30 [ 2480.780339][T30025] ? unwind_get_return_address+0x48/0x90 [ 2480.786555][T30025] ? arch_stack_walk+0xd8/0x120 [ 2480.792409][T30025] netif_receive_skb+0x14a/0x2b0 [ 2480.799566][T30025] tun_get_user+0x2926/0x34e0 [ 2480.804244][T30025] ? kstrtouint_from_user+0x22d/0x2b0 [ 2480.809627][T30025] ? tun_do_read+0x1ed0/0x1ed0 [ 2480.814373][T30025] ? __kasan_slab_free+0x1f2/0x230 [ 2480.819549][T30025] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2480.825596][T30025] ? __rcu_read_lock+0x50/0x50 [ 2480.830331][T30025] ? proc_fail_nth_write+0x18f/0x250 [ 2480.835710][T30025] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2480.840910][T30025] tun_chr_write_iter+0x121/0x1a0 [ 2480.849883][T30025] __vfs_write+0x59d/0x720 [ 2480.854544][T30025] ? __kernel_write+0x340/0x340 [ 2480.859482][T30025] ? avc_policy_seqno+0x17/0x70 [ 2480.864488][T30025] ? security_file_permission+0x128/0x300 [ 2480.870271][T30025] vfs_write+0x217/0x4f0 [ 2480.874508][T30025] ksys_write+0x18c/0x2c0 [ 2480.879343][T30025] ? file_open_root+0x450/0x450 [ 2480.884164][T30025] ? __ia32_sys_read+0x80/0x80 [ 2480.888941][T30025] do_syscall_64+0xcb/0x150 [ 2480.893471][T30025] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2480.899362][T30025] RIP: 0033:0x4168c1 [ 2480.903250][T30025] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2480.923542][T30025] RSP: 002b:00007fce5b35cc60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2480.932028][T30025] RAX: ffffffffffffffda RBX: 000000000118bf20 RCX: 00000000004168c1 [ 2480.939977][T30025] RDX: 0000000000000026 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2480.948006][T30025] RBP: 00007fce5b35cca0 R08: 0000000000000000 R09: 0000000000000000 [ 2480.955962][T30025] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000008 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5460, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:11 executing program 3 (fault-call:3 fault-nth:9): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2480.963903][T30025] R13: 00007fffd6021a3f R14: 00007fce5b35d9c0 R15: 000000000118bf2c 17:13:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40049409, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:11 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {r4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:11 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2a, 0xa, 0x6, &(0x7f00000001c0)) fcntl$dupfd(r3, 0x0, r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r4, @ANYRESDEC, @ANYRESHEX=r5, @ANYRES32=r5], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40086602, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:11 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40087602, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4020940d, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:11 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x80044909, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:12 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x80}, {r4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x200000a6, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x80086601, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:12 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {0xffffffffffffffff, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:12 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xe8ba, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r3, 0x29, 0x0, 0xdb, 0x3, 0x4c, @ipv4={[], [], @local}, @remote, 0x8000, 0x700, 0x9, 0xfffff7c7}}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x80087601, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff000, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfffffdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:13 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184904, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {r1}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x300, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:14 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) ioprio_get$uid(0x3, r1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0189436, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x500, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x5, {{0x2, 0x4e24, @local}}}, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc020660b, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {r1}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x802, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x803, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x4}) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x804, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x8}) 17:13:14 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x10000, &(0x7f0000001140)={0xa, 0x4e21, 0x4, @remote, 0x8000}, 0x1c) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='./le0\x00\x00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='btrfs\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x4000}) 17:13:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x805, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r3, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x400000}) 17:13:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x80}, {r1}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:15 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r3, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x806, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x80a, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x80ffff}) 17:13:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x80f, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x811, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x4000000}) 17:13:15 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r3, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:15 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_iso={0x0, {0x6, 0x1}, 0x3, 0x0, &(0x7f00000001c0)="0f50bff6434ef372f5ba429733f8de5abe31cc7479c40b1c48b92e579c9ff41e18d3975b67fa973c2079ffa5d7378d72a0d57b25881bf54daf3c6a116cca246bc3b5bfd67b2f9bd8461658bebfd2b67e81adf7bb6533c905eadc2e5912c5deac6b8ba80f400a675b66990a30b7b6ebd76549b77f7c48095fe9fc0e2193d967d41edffd0db514e4777ceb22432e21be0f427544bbea40be4588e7f770526a8aa74e7103bd2012841aa05a0c5ac09ed3b54e500a82d79d30e9e9a732349274a95dbf230332357e5b4a6df5e95d9047fd", 0xcf, 0xfffff0a5, 0x1, 0x26, 0x9, 0x2, &(0x7f00000002c0)="31f45c3e88f66b42c2ff1b6a5a4be8baf99a715561ac0b91e7e4809e43a3607727f9e7fbb8bd8057f203189801bfd86c41eb52c29380c28a2aa8a0eaa04bd651c8974491b3e98ecc6c82cceb1bf679b307b8187b42d143772c4d8fd92f2439c1b73542b999e3560db9138ee9bad06c52b77f01af2f15dea8032dc5cccc6c43eebaebb4904b656beb", [{0x971, 0x80000000, 0x4}, {0x3, 0x2, 0x9}, {0x2, 0x10001, 0x1}, {0xfffffffd, 0x1ff, 0x60d}, {0x2, 0xffffffe0, 0x1ff}, {0x7, 0x8001, 0xfffffffb}, {0x7ff, 0x1, 0x3}, {0x5, 0xfffffffe, 0xfff}, {0x7, 0x6, 0x2}, {0x1ff, 0x6, 0x2}, {0x1ff, 0x2, 0x7}, {0x1ff, 0xfffffffb, 0xf470}, {0x8001, 0x7, 0x7fff}, {0x20, 0x5}, {0x3, 0x4, 0x10000}, {0x6, 0xffff7fff, 0x81}, {0x9, 0x800, 0x7}, {0x1, 0x9, 0x7}, {0x6, 0x3ff, 0x3}, {0xb3f, 0x80000000, 0x4}, {0x2, 0x7f, 0x3}, {0x40, 0x8000, 0x80000001}, {0x79, 0x1f, 0x4}, {0x81, 0x30, 0xc7}, {0x8, 0xffffc912, 0x40}, {0x7, 0x4384}, {0x7, 0xfffffffd, 0x2}, {0x4, 0xffffffe1, 0x3}, {0x8, 0x8, 0xfffffffc}, {0x9, 0x4ba8, 0x101}, {0xfffffff7, 0x7, 0xd8e}, {0x80000000, 0x1, 0x7}, {0x4, 0x4525, 0x6}, {0x1000, 0x4919, 0x85e}, {0xc669, 0x7f, 0x1}, {0x7, 0x4, 0x3ff}, {0x3, 0xa9a0, 0x6}, {0x4, 0x0, 0x1}]}) fcntl$dupfd(r2, 0x0, r3) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r4, 0x0, 0xe8ba, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800240}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00003b", @ANYRES16=r5, @ANYBLOB="3a7d2dbd7000ffdbdf25040000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) 17:13:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:16 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x8000000}) 17:13:16 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r3}, {r4, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x818, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:16 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x834, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0x40000000}) 17:13:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x860, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0xfdfdffff}) 17:13:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x4000, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:18 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x4305, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0xfeffffff}) 17:13:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:18 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0xffff8000}) 17:13:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x6558, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0xfffffdfd}) 17:13:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8035, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:18 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c, 0xfffffffe}) 17:13:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8100, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:18 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r0, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x15fd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8847, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r0, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/125, 0x7d}], 0x1, &(0x7f0000000300)=""/156, 0x9c}, 0x44}, {{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/103, 0x67}], 0x3, &(0x7f0000000640)=""/118, 0x76}, 0x600000}, {{&(0x7f00000006c0)=@tipc=@name, 0x80, &(0x7f0000001880)=[{&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/51, 0x33}], 0x4}, 0x3}, {{&(0x7f00000018c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001940)=""/3, 0x3}], 0x1, &(0x7f00000019c0)=""/250, 0xfa}, 0x7}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b40)=""/9, 0x9}], 0x1}, 0x4}], 0x5, 0x2000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001d00)=0x905b, 0x4) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x7fffffff}, 0x16, 0x1) 17:13:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:19 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {0xffffffffffffffff, 0x80}, {r0, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8848, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8864, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x240c}, {r0}, {r1, 0x8300}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x8906, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r4) 17:13:19 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:19 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x4, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r0}, {r1, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:19 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r7 = fcntl$dupfd(r1, 0x0, r2) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1460}, 0x1, 0x0, 0x0, 0x4044}, 0x8001) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x2) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) fcntl$setown(r4, 0x8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0xffff, 0x3c, 0x1, r7}) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f00000000c0)=""/95) 17:13:19 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x2, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:20 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x3ff, 0x40, 0x3, 0x19ff, 0x4, "411b0f61d73a759db7950c03eded7df88ae4bc", 0x1, 0x66}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r2, 0x0, r3, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a923, 0x2d, 0x80ffff, 0xffffffffffffff9c}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 17:13:20 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000080)=0x7f, 0x4) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x800) 17:13:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x3, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r0, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:20 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{}, {r3, 0x8300}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r0}, {r1, 0x8300}], 0x2, 0x0, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r0}, {r1, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x3, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd, 0x80ffff, 0xffffffffffffff9c}) 17:13:21 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x2c, 0x1, 0xb, 0xb, 0x2, 0xffffff71, 0x1, 0x149, 0x1}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x15fd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:21 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, &(0x7f0000000140)={[0x20]}, 0x8) 17:13:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000200)={0x38}, 0x38, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x20, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2401c811}, 0xd4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x7, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x5, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0xa, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:22 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0xf, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:22 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x15fd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0x12}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x11, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:23 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r3, 0x8, 0x9f, 0x7}) sendmsg$DEVLINK_CMD_SB_GET(r4, 0x0, 0x40480d0) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x18, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x34, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:23 executing program 2 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x3f, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:23 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:23 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:23 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x8}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40c000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:23 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x15fd) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:23 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x8, &(0x7f0000000200)="9d20d0b8ed618175d4fa76c4ea0d788d42bf1ea462bd6c1e01f542f132b50ed95090e82f7b7e59849aed2be5ffec2073ad55dfed369ecbc48525c2ad0e990f28f3af73f568042c565ac2e860900361d168a7c025621b531755f5b1e70104c0645e2bc048331b2afaa1a22847ef723ad3ef82110c31f979a362fa171299f1731ac581be686191de460b9208f78157226b66f0188a987fad69c91a1685323896b807b686c7080462492e9a082e5e887f08") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$int_out(r1, 0x2, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) 17:13:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) 17:13:23 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x10}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x224, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x200201, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x1f8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r6, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x5, 0x0, r8}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:24 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:25 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fchdir(r0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x9) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x4, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 17:13:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x0, 0x8}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x20a927, 0x2d, 0x80ffff, r3}) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x5, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x6, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) read$rfkill(r3, &(0x7f0000000000), 0x8) 17:13:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xa, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x0, 0x10}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xf, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:25 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8308}], 0x2, 0x0, 0x0, 0x0) 17:13:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x11, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x18, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x34, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:26 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a1d0cb6b1427c95fb08a9b5ec12bf5dec27b38", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="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"/314], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000bda3016b00", @ANYRES16=r3, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="080029f8dbdf2518000013080001000100000093c602c705b3b72d1f3b6c00b95e0000000000c59a3aef8b8209b6b54e1652e4372d"], 0x2c}, 0x1, 0x0, 0x0, 0x4004880}, 0x24004081) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)={0x1a8, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cfeb3c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68fdede6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e8a8ff7}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bdcdc4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e13a9c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55934e52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4af190bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x443519f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1076cc57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78739891}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffff801}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64708d04}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14315997}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x199f6491}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14ae6478}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ebd5716}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3887e506}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x484ea65d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52510401}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c9ba18e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5f023c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76a19618}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e0cc4af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24004081}, 0x4800) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1ac, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67c42c77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdde9dec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x745b8f0b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5aae6448}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c4f9a21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a5351b7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9f56316}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x492fcf16}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a788fe5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfeaeb74}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c35d2be}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34c810d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x662f9332}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa88e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x167e8fc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f1ac83a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f64559e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb1fb3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aeaec7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x96828de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c58d92c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x244, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdf32d3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f4d534a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5997171d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36aff123}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c6f066b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1957d3ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77dfceee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cb158db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49095ba}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d887d9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb587c8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58a4968b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x270f53f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fc3dc6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4043a631}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe099752}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4442070a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa97b835}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bcd0434}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dbcbe8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x164d33ab}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4647569a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a0b445b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eb19591}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b0294e2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x449a6d77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20048810}, 0x4) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x60, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x1f4, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 5: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r0, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r5, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x8000, 0x80, 0x1000, 0x80000001, {{0x1e, 0x4, 0x3, 0x0, 0x78, 0x64, 0x0, 0x20, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x12, 0x3, [{0x1, 0xc, "6f8f67ebfd59a145bcdb"}]}, @generic={0x94, 0x9, "f74a820c08d249"}, @end, @timestamp_prespec={0x44, 0x1c, 0x23, 0x3, 0x8, [{@multicast2, 0x6}, {@loopback, 0x80000001}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x11, [@dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x2c, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}, @generic={0x0, 0x11, "945929c8df34a3e78743b2b9f99b0f"}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r9, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x300, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2495.622445][T30590] device lo entered promiscuous mode [ 2495.639421][T30590] Y­4`Ò˜: renamed from lo 17:13:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:26 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x3e8, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8310}], 0x2, 0x0, 0x0, 0x0) 17:13:26 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x20a927, 0x0, 0x1, r2}) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x500, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) socket$inet_icmp(0x2, 0x2, 0x1) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x600, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:26 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x16) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000000c0)={0x8, 0xfffffffffffffc00}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:26 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffff000) 17:13:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xa00, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r6, 0x2, 0x80000000, 0x9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff, r7}) 17:13:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @broadcast, 0x0}, &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x6, 0x3f, 0x0, 0x8001, 0xa, @private2, @mcast1, 0x80, 0x8, 0x3}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf250900000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000180080003000000000008000300010000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200697036677265300000000000000000000800030003000000140002006e65747063693000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="4400018008000100", @ANYRES32=r6, @ANYBLOB="140002ff6870766c616e31000000000000000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB="14000200636169663000"/20], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c090) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xf00, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:13:27 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300, 0x8}], 0x2, 0x0, 0x0, 0x0) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x1100, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x1800, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x3400, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x4000, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:27 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xe8ba, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000180)=""/232, 0xe8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000002c0)=ANY=[@ANYRES64=r6], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x6000, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2282, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x0) 17:13:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xe803, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300, 0x10}], 0x2, 0x0, 0x0, 0x0) 17:13:28 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0x4000df5, 0x29f5, 0xea, 0xc}, 0x14) splice(r2, 0x0, r4, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x20002018}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:28 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x14500, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x100000001, 0x28, 0x80ffff, 0xffffffffffffff9c}) 17:13:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xf401, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x8, 0x0, 0x0, 0x0) 17:13:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0xffff, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x1e, 0x0, 0x0, 0x0) 17:13:28 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x8) [ 2498.105397][ T22] audit: type=1400 audit(1596906808.557:29): avc: denied { block_suspend } for pid=30692 comm="syz-executor.0" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 17:13:29 executing program 4 (fault-call:6 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = dup2(r2, r2) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="0a52b0c7b09b8a65ef6b644bc5365699616046e0147b21dd1a3d6eaca412dbab567b2a7ff5021819961668dfd4e266f7f3fbeb7a2cc7705bdcacf73b0378e21640eb4110de2d37ddba52bf17d712bec43be923a0f932a03f319c76fdb78ada4534e97463f783fedeb0bccfbc3b401944c42e33e9cde513c6c87672908176c896df51c780834c63e6edeb8eeaeafc8d6d0bff782902ce975580b7839df02a7aedbd9b604a96e2fd1b181ae2b79f299afeaf135d92bf0eaf2aae4b18e51b73f981aa43059b5608552ed2332071c159db7c83769d98366690d2d255aa2aa1059fc1ca09ee9bfa853da8f0ffd6100e7512f5", @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf250900000010006e8004000100040001000400020018006e800400020004000100040001000400010004000200"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req={0x7ff, 0x9c5, 0x10000, 0x7}, 0x10) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:29 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x10) [ 2498.737610][T30732] FAULT_INJECTION: forcing a failure. [ 2498.737610][T30732] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.765353][T30732] CPU: 1 PID: 30732 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2498.775502][T30732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.785536][T30732] Call Trace: [ 2498.788824][T30732] dump_stack+0x14a/0x1ce [ 2498.793125][T30732] ? devkmsg_release+0x11c/0x11c [ 2498.798033][T30732] ? show_regs_print_info+0x12/0x12 [ 2498.803210][T30732] ? is_bpf_text_address+0x290/0x2b0 [ 2498.808829][T30732] should_fail+0x6fb/0x860 [ 2498.814870][T30732] ? setup_fault_attr+0x3d0/0x3d0 [ 2498.819989][T30732] ? arch_stack_walk+0xd8/0x120 [ 2498.824842][T30732] ? alloc_pipe_info+0xa1/0x3a0 [ 2498.829684][T30732] should_failslab+0x5/0x20 [ 2498.834163][T30732] kmem_cache_alloc_trace+0x39/0x280 [ 2498.839698][T30732] alloc_pipe_info+0xa1/0x3a0 [ 2498.844525][T30732] splice_direct_to_actor+0x94e/0xb00 [ 2498.849870][T30732] ? kstrtol_from_user+0x320/0x320 [ 2498.854955][T30732] ? __kasan_slab_free+0x1f2/0x230 [ 2498.860128][T30732] ? __rcu_read_lock+0x50/0x50 [ 2498.864944][T30732] ? avc_policy_seqno+0x17/0x70 [ 2498.869768][T30732] ? do_splice_direct+0x3e0/0x3e0 [ 2498.874763][T30732] ? pipe_to_sendpage+0x300/0x300 [ 2498.879759][T30732] ? security_file_permission+0x128/0x300 [ 2498.885447][T30732] do_splice_direct+0x28b/0x3e0 [ 2498.890269][T30732] ? splice_direct_to_actor+0xb00/0xb00 [ 2498.895781][T30732] ? avc_policy_seqno+0x17/0x70 [ 2498.900620][T30732] ? security_file_permission+0x128/0x300 [ 2498.906310][T30732] do_sendfile+0x8d6/0x1100 [ 2498.910785][T30732] ? compat_writev+0x3d0/0x3d0 [ 2498.915523][T30732] ? vfs_write+0x427/0x4f0 [ 2498.919928][T30732] __x64_sys_sendfile64+0x1d4/0x230 [ 2498.925104][T30732] ? __ia32_sys_sendfile+0x250/0x250 [ 2498.930362][T30732] do_syscall_64+0xcb/0x150 [ 2498.934854][T30732] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2498.940730][T30732] RIP: 0033:0x45ce69 [ 2498.944596][T30732] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2498.964172][T30732] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2498.972551][T30732] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2498.980493][T30732] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:29 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/220) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:29 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x1000000) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x2, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x840, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040)) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x3, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2498.988438][T30732] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.996381][T30732] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 2499.004844][T30732] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:29 executing program 4 (fault-call:6 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x4, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0x0, 0x0) r2 = getegid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0x0, r4) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0x0, r7) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xfffffffffffffee4) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r10, 0x0, r9) getgroups(0x6, &(0x7f0000000280)=[r4, 0xee01, 0x0, 0xee00, r7, r9]) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="f27c2fc7", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRESDEC=r12, @ANYBLOB="10000400000000002000010000000000"], 0x6c, 0x2) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x5, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2499.106267][T30756] FAULT_INJECTION: forcing a failure. [ 2499.106267][T30756] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.152740][T30756] CPU: 1 PID: 30756 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2499.162912][T30756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.174209][T30756] Call Trace: [ 2499.177754][T30756] dump_stack+0x14a/0x1ce [ 2499.183116][T30756] ? devkmsg_release+0x11c/0x11c [ 2499.188936][T30756] ? show_regs_print_info+0x12/0x12 [ 2499.194128][T30756] should_fail+0x6fb/0x860 [ 2499.198527][T30756] ? setup_fault_attr+0x3d0/0x3d0 [ 2499.203525][T30756] ? kcalloc+0x32/0x60 [ 2499.207564][T30756] should_failslab+0x5/0x20 [ 2499.212063][T30756] __kmalloc+0x5f/0x2d0 [ 2499.216201][T30756] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2499.221646][T30756] kcalloc+0x32/0x60 [ 2499.225513][T30756] alloc_pipe_info+0x1b9/0x3a0 [ 2499.230256][T30756] splice_direct_to_actor+0x94e/0xb00 [ 2499.235623][T30756] ? kstrtol_from_user+0x320/0x320 [ 2499.240730][T30756] ? __kasan_slab_free+0x1f2/0x230 [ 2499.246101][T30756] ? __rcu_read_lock+0x50/0x50 [ 2499.250840][T30756] ? avc_policy_seqno+0x17/0x70 [ 2499.262610][T30756] ? do_splice_direct+0x3e0/0x3e0 [ 2499.267608][T30756] ? pipe_to_sendpage+0x300/0x300 [ 2499.272622][T30756] ? security_file_permission+0x128/0x300 [ 2499.278314][T30756] do_splice_direct+0x28b/0x3e0 [ 2499.283142][T30756] ? splice_direct_to_actor+0xb00/0xb00 [ 2499.288659][T30756] ? avc_policy_seqno+0x17/0x70 [ 2499.293478][T30756] ? security_file_permission+0x128/0x300 [ 2499.299166][T30756] do_sendfile+0x8d6/0x1100 [ 2499.304111][T30756] ? compat_writev+0x3d0/0x3d0 [ 2499.309337][T30756] ? vfs_write+0x427/0x4f0 [ 2499.313735][T30756] __x64_sys_sendfile64+0x1d4/0x230 [ 2499.318911][T30756] ? __ia32_sys_sendfile+0x250/0x250 [ 2499.324864][T30756] do_syscall_64+0xcb/0x150 [ 2499.329339][T30756] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2499.335205][T30756] RIP: 0033:0x45ce69 [ 2499.339247][T30756] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2499.358820][T30756] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2499.367201][T30756] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2499.375141][T30756] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2499.383083][T30756] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.391033][T30756] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 2499.399087][T30756] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:29 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x8000000) 17:13:29 executing program 5: socket$inet(0x2, 0x2, 0x800) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x428022, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000180)) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) fdatasync(r6) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x6, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000080)=""/117) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) getrandom(&(0x7f00000001c0)=""/238, 0xee, 0x2) sendmsg$DEVLINK_CMD_SB_GET(r1, 0x0, 0x40001) 17:13:29 executing program 4 (fault-call:6 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xa, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2499.512610][T30788] FAULT_INJECTION: forcing a failure. [ 2499.512610][T30788] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.528945][T30788] CPU: 0 PID: 30788 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2499.539111][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.549158][T30788] Call Trace: [ 2499.552444][T30788] dump_stack+0x14a/0x1ce [ 2499.556768][T30788] ? devkmsg_release+0x11c/0x11c [ 2499.561696][T30788] ? show_regs_print_info+0x12/0x12 [ 2499.566893][T30788] ? unwind_get_return_address_ptr+0x130/0x130 [ 2499.573023][T30788] should_fail+0x6fb/0x860 [ 2499.577411][T30788] ? setup_fault_attr+0x3d0/0x3d0 [ 2499.582404][T30788] ? __kernel_text_address+0x93/0x110 [ 2499.587757][T30788] ? unwind_get_return_address+0x48/0x90 [ 2499.593359][T30788] ? arch_stack_walk+0xd8/0x120 [ 2499.598178][T30788] ? kvmalloc_node+0xc2/0x120 [ 2499.602825][T30788] should_failslab+0x5/0x20 [ 2499.607306][T30788] __kmalloc+0x5f/0x2d0 [ 2499.611432][T30788] kvmalloc_node+0xc2/0x120 [ 2499.615907][T30788] iov_iter_get_pages_alloc+0xad0/0xff0 [ 2499.621439][T30788] ? iov_iter_get_pages+0xd80/0xd80 [ 2499.626626][T30788] default_file_splice_read+0x210/0x980 [ 2499.632153][T30788] ? kcalloc+0x32/0x60 [ 2499.636199][T30788] ? alloc_pipe_info+0x1b9/0x3a0 [ 2499.641110][T30788] ? do_sendfile+0x8d6/0x1100 [ 2499.645757][T30788] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2499.651095][T30788] ? __ia32_sys_tee+0xa0/0xa0 [ 2499.655743][T30788] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2499.662474][T30788] ? selinux_file_permission+0x2d0/0x520 [ 2499.668077][T30788] ? security_file_permission+0x1e9/0x300 [ 2499.673764][T30788] ? __ia32_sys_tee+0xa0/0xa0 [ 2499.678408][T30788] splice_direct_to_actor+0x3cf/0xb00 [ 2499.683749][T30788] ? do_splice_direct+0x3e0/0x3e0 [ 2499.688744][T30788] ? pipe_to_sendpage+0x300/0x300 [ 2499.693737][T30788] ? security_file_permission+0x128/0x300 [ 2499.699436][T30788] do_splice_direct+0x28b/0x3e0 [ 2499.704274][T30788] ? splice_direct_to_actor+0xb00/0xb00 [ 2499.709794][T30788] ? avc_policy_seqno+0x17/0x70 [ 2499.714617][T30788] ? security_file_permission+0x128/0x300 [ 2499.720308][T30788] do_sendfile+0x8d6/0x1100 [ 2499.724795][T30788] ? compat_writev+0x3d0/0x3d0 [ 2499.729540][T30788] ? vfs_write+0x427/0x4f0 [ 2499.733957][T30788] __x64_sys_sendfile64+0x1d4/0x230 [ 2499.739132][T30788] ? __ia32_sys_sendfile+0x250/0x250 [ 2499.744389][T30788] do_syscall_64+0xcb/0x150 [ 2499.748867][T30788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2499.754728][T30788] RIP: 0033:0x45ce69 [ 2499.758594][T30788] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2499.778170][T30788] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2499.786553][T30788] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2499.794511][T30788] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2499.802459][T30788] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xf, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2499.810504][T30788] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 2499.818449][T30788] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x10000000) 17:13:30 executing program 4 (fault-call:6 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x11, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x1000000000000) 17:13:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r3, 0x0, r4, 0x0, 0xe8ba, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000200)={0x9, &(0x7f0000000080)=[{0x9, 0x8, 0x5, 0x200}, {0x5c0a, 0x96, 0x7f}, {0xff, 0x5, 0x40, 0x4}, {0x3f, 0xf8, 0x2, 0xffffffff}, {0x81, 0xfa, 0xcb, 0x80}, {0x7, 0x9, 0x3, 0x9}, {0x8000, 0x7, 0x4, 0x3}, {0x401, 0x9, 0x4, 0x6}, {0x200, 0x8, 0x4, 0x9a}]}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000040)=""/58) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) 17:13:30 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RESET(r6, 0x5514) 17:13:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x18, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2500.418172][T30818] FAULT_INJECTION: forcing a failure. [ 2500.418172][T30818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2500.436155][T30818] CPU: 0 PID: 30818 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2500.446310][T30818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.456356][T30818] Call Trace: [ 2500.459650][T30818] dump_stack+0x14a/0x1ce 17:13:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x34, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x60, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x100000000000000) 17:13:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x800000000000000) [ 2500.463980][T30818] ? devkmsg_release+0x11c/0x11c [ 2500.468922][T30818] ? show_regs_print_info+0x12/0x12 [ 2500.474117][T30818] ? __kasan_kmalloc+0x189/0x1c0 [ 2500.479048][T30818] ? __kasan_kmalloc+0x12c/0x1c0 [ 2500.483976][T30818] ? __kmalloc+0xf7/0x2d0 [ 2500.488299][T30818] ? kvmalloc_node+0xc2/0x120 [ 2500.492965][T30818] should_fail+0x6fb/0x860 [ 2500.497373][T30818] ? setup_fault_attr+0x3d0/0x3d0 [ 2500.502395][T30818] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2500.508238][T30818] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2500.514019][T30818] ? arch_stack_walk+0xd8/0x120 [ 2500.518887][T30818] ? kvmalloc_node+0xc2/0x120 [ 2500.523932][T30818] push_pipe+0x385/0x740 [ 2500.528160][T30818] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2500.533699][T30818] ? iov_iter_get_pages+0xd80/0xd80 [ 2500.540120][T30818] default_file_splice_read+0x210/0x980 [ 2500.546085][T30818] ? kcalloc+0x32/0x60 [ 2500.551842][T30818] ? alloc_pipe_info+0x1b9/0x3a0 [ 2500.558687][T30818] ? do_sendfile+0x8d6/0x1100 [ 2500.563370][T30818] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2500.568723][T30818] ? __ia32_sys_tee+0xa0/0xa0 [ 2500.573548][T30818] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2500.580411][T30818] ? selinux_file_permission+0x2d0/0x520 [ 2500.586048][T30818] ? security_file_permission+0x1e9/0x300 [ 2500.591758][T30818] ? __ia32_sys_tee+0xa0/0xa0 [ 2500.596407][T30818] splice_direct_to_actor+0x3cf/0xb00 [ 2500.601775][T30818] ? do_splice_direct+0x3e0/0x3e0 [ 2500.606784][T30818] ? pipe_to_sendpage+0x300/0x300 [ 2500.611795][T30818] ? security_file_permission+0x128/0x300 [ 2500.618458][T30818] do_splice_direct+0x28b/0x3e0 [ 2500.623324][T30818] ? splice_direct_to_actor+0xb00/0xb00 [ 2500.628870][T30818] ? avc_policy_seqno+0x17/0x70 [ 2500.633698][T30818] ? security_file_permission+0x128/0x300 [ 2500.639583][T30818] do_sendfile+0x8d6/0x1100 [ 2500.644065][T30818] ? compat_writev+0x3d0/0x3d0 [ 2500.648803][T30818] ? vfs_write+0x427/0x4f0 [ 2500.653192][T30818] __x64_sys_sendfile64+0x1d4/0x230 [ 2500.658363][T30818] ? __ia32_sys_sendfile+0x250/0x250 [ 2500.663621][T30818] do_syscall_64+0xcb/0x150 [ 2500.668098][T30818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2500.673992][T30818] RIP: 0033:0x45ce69 [ 2500.677969][T30818] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2500.698335][T30818] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2500.706728][T30818] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 17:13:31 executing program 4 (fault-call:6 fault-nth:4): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:31 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x1000000000000000) 17:13:31 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x1f4, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2500.715153][T30818] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2500.724335][T30818] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.732493][T30818] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000003 [ 2500.741394][T30818] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2500.796405][T30847] FAULT_INJECTION: forcing a failure. [ 2500.796405][T30847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2500.815159][T30847] CPU: 0 PID: 30847 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2500.825522][T30847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.835795][T30847] Call Trace: [ 2500.839181][T30847] dump_stack+0x14a/0x1ce [ 2500.843621][T30847] ? devkmsg_release+0x11c/0x11c [ 2500.848832][T30847] ? show_regs_print_info+0x12/0x12 [ 2500.854022][T30847] ? __kasan_kmalloc+0x189/0x1c0 [ 2500.858964][T30847] ? kasan_alloc_pages+0x4a/0x60 [ 2500.863910][T30847] should_fail+0x6fb/0x860 [ 2500.868312][T30847] ? setup_fault_attr+0x3d0/0x3d0 [ 2500.873347][T30847] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2500.878698][T30847] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2500.884225][T30847] ? arch_stack_walk+0xd8/0x120 [ 2500.890849][T30847] ? kvmalloc_node+0xc2/0x120 [ 2500.895514][T30847] push_pipe+0x385/0x740 [ 2500.900082][T30847] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2500.905734][T30847] ? iov_iter_get_pages+0xd80/0xd80 [ 2500.911056][T30847] default_file_splice_read+0x210/0x980 [ 2500.919468][T30847] ? kcalloc+0x32/0x60 [ 2500.923520][T30847] ? alloc_pipe_info+0x1b9/0x3a0 [ 2500.928583][T30847] ? do_sendfile+0x8d6/0x1100 [ 2500.933254][T30847] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2500.938868][T30847] ? __ia32_sys_tee+0xa0/0xa0 [ 2500.943589][T30847] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2500.950524][T30847] ? selinux_file_permission+0x2d0/0x520 [ 2500.956388][T30847] ? security_file_permission+0x1e9/0x300 [ 2500.962286][T30847] ? __ia32_sys_tee+0xa0/0xa0 [ 2500.966956][T30847] splice_direct_to_actor+0x3cf/0xb00 [ 2500.972379][T30847] ? do_splice_direct+0x3e0/0x3e0 [ 2500.977601][T30847] ? pipe_to_sendpage+0x300/0x300 [ 2500.982911][T30847] ? security_file_permission+0x128/0x300 [ 2500.988736][T30847] do_splice_direct+0x28b/0x3e0 [ 2500.993565][T30847] ? splice_direct_to_actor+0xb00/0xb00 [ 2500.999095][T30847] ? avc_policy_seqno+0x17/0x70 [ 2501.004140][T30847] ? security_file_permission+0x128/0x300 [ 2501.009845][T30847] do_sendfile+0x8d6/0x1100 [ 2501.014487][T30847] ? compat_writev+0x3d0/0x3d0 [ 2501.019256][T30847] ? vfs_write+0x427/0x4f0 [ 2501.024822][T30847] __x64_sys_sendfile64+0x1d4/0x230 [ 2501.030017][T30847] ? __ia32_sys_sendfile+0x250/0x250 [ 2501.036159][T30847] do_syscall_64+0xcb/0x150 [ 2501.040924][T30847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2501.046998][T30847] RIP: 0033:0x45ce69 [ 2501.050874][T30847] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2501.072534][T30847] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2501.080951][T30847] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2501.089104][T30847] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2501.097750][T30847] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2501.105763][T30847] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000004 [ 2501.114014][T30847] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:31 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='statm\x00') sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000016c0)={&(0x7f00000002c0)={0x1c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0xc802) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0717648900000000000016"], 0x3}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001400)={0x2b4, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_EXPECT_MASTER={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb3}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={[], [], @rand_addr=0x64010102}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT={0x120, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x2b4}}, 0x4) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x1098, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6b9c86df6893e4b86c42fad138dd772384a85330cff665940146"}}]}, @TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1c, 0x3, "6ee293666f31109a25eb37e816b45ff77598268ece1894f4"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1098}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:32 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x300, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x8000000000000000) 17:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:32 executing program 4 (fault-call:6 fault-nth:5): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:32 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x6, 0x0, {0x8}, {0x8, 0x1}, @cond=[{0x1ff, 0x0, 0x7fff, 0x6, 0x1, 0xfffa}, {0x5, 0x6, 0x80, 0x6, 0xf9, 0xfff8}]}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x3e8, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2501.877901][T30873] FAULT_INJECTION: forcing a failure. [ 2501.877901][T30873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2501.906800][T30873] CPU: 1 PID: 30873 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2501.917235][T30873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.927498][T30873] Call Trace: [ 2501.930992][T30873] dump_stack+0x14a/0x1ce [ 2501.935682][T30873] ? devkmsg_release+0x11c/0x11c [ 2501.940628][T30873] ? show_regs_print_info+0x12/0x12 [ 2501.946260][T30873] ? __kasan_kmalloc+0x189/0x1c0 [ 2501.951201][T30873] ? kasan_alloc_pages+0x4a/0x60 [ 2501.956147][T30873] should_fail+0x6fb/0x860 [ 2501.960947][T30873] ? setup_fault_attr+0x3d0/0x3d0 [ 2501.965975][T30873] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2501.972055][T30873] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2501.978602][T30873] ? kvmalloc_node+0xc2/0x120 [ 2501.983815][T30873] ? kvmalloc_node+0xc2/0x120 [ 2501.988514][T30873] push_pipe+0x385/0x740 [ 2501.992760][T30873] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2501.999875][T30873] ? iov_iter_get_pages+0xd80/0xd80 [ 2502.005076][T30873] default_file_splice_read+0x210/0x980 [ 2502.010625][T30873] ? kcalloc+0x32/0x60 [ 2502.014706][T30873] ? alloc_pipe_info+0x1b9/0x3a0 [ 2502.019646][T30873] ? do_sendfile+0x8d6/0x1100 [ 2502.024320][T30873] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2502.029688][T30873] ? __ia32_sys_tee+0xa0/0xa0 [ 2502.034375][T30873] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2502.041144][T30873] ? selinux_file_permission+0x2d0/0x520 [ 2502.046774][T30873] ? security_file_permission+0x1e9/0x300 [ 2502.052487][T30873] ? __ia32_sys_tee+0xa0/0xa0 [ 2502.057157][T30873] splice_direct_to_actor+0x3cf/0xb00 [ 2502.062534][T30873] ? do_splice_direct+0x3e0/0x3e0 [ 2502.067572][T30873] ? pipe_to_sendpage+0x300/0x300 [ 2502.072605][T30873] ? security_file_permission+0x128/0x300 [ 2502.078323][T30873] do_splice_direct+0x28b/0x3e0 [ 2502.083175][T30873] ? splice_direct_to_actor+0xb00/0xb00 [ 2502.088727][T30873] ? avc_policy_seqno+0x17/0x70 [ 2502.093590][T30873] ? security_file_permission+0x128/0x300 [ 2502.099310][T30873] do_sendfile+0x8d6/0x1100 [ 2502.103807][T30873] ? compat_writev+0x3d0/0x3d0 [ 2502.108572][T30873] ? vfs_write+0x427/0x4f0 [ 2502.112989][T30873] __x64_sys_sendfile64+0x1d4/0x230 [ 2502.118188][T30873] ? __ia32_sys_sendfile+0x250/0x250 [ 2502.123658][T30873] do_syscall_64+0xcb/0x150 [ 2502.128168][T30873] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2502.134049][T30873] RIP: 0033:0x45ce69 [ 2502.137937][T30873] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2502.157789][T30873] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2502.166189][T30873] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0xffffffff00000000) 17:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2502.174152][T30873] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2502.182182][T30873] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.190126][T30873] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000005 [ 2502.198069][T30873] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) write(r3, &(0x7f0000000200)="58f497f12ae810420c9f233d3f254a19fb9aecf20d781e54a5fd468da981cbe42c830416c688e5b1e342b3d29cc42b0c04613a2290010bc9611e5f06c40dff874caab6998c039d2a940839917442676c49b7c2f20a593a50fe23ab385bcdcef8be11c32e7ec6f48317768ace2ebf9542c6284fac26c30daaf237", 0x7a) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r6, 0x0, r7, 0x0, 0xe8ba, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x2, 0x100000000, 0x4, 0x0, 0x0, [{{r3}, 0xffff}, {{r0}, 0x4}, {{r4}, 0x10001}, {{r6}, 0x4}]}) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x0, 0x70bd28, 0x7, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x2404c004) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x500, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:32 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001340)={0x0, r2, 0x9, 0x1, 0xa0, 0x7}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000012c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000080)="b9e1d133554d4b950ef1", 0xa}, {&(0x7f00000000c0)="4858d0872b94a856529217284cba5a2fa0941ae93e301d54c5dc2cb812ec0a892111c3c9bbfad881e2d03f67856cd7806edc8a9e7103412040b92aa21a37b5cbfb46755bd575d3c584ac707b55ac92e1022028a65732f1afb442458e519500c1a1786906f7a90cfe47545e6755457e630f758f51a71c8d4fbe32a02af58344eb2b6da7158bfab8705e8a3a6f6bc35cd9cbac09bc1a77586439d1ddf468da", 0x9e}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="80cb6e781f9b4f3111522fa366f8060a37529667bd0fe314f89aab603f5dfddafb2c1a32fcea8fce4b2253eea23dbf05149b8cc41a7304d0f88e37bc6e6cc357cbac6007abb3259d3829341f5047b17025561dab052ecee5934d519ad732f888ae950da579993bb183d7ae426077a77c76f05cb42b8f", 0x76}, {&(0x7f0000001200)="2bd26f086a6a09caa85c0b", 0xb}], 0x5, 0xfffffffc, 0x8) 17:13:32 executing program 4 (fault-call:6 fault-nth:6): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x600, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="071764890000000016"], 0x3}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x2cc, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1869}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xecb4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffb, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4}, 0x24000081) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2502.292715][T30905] FAULT_INJECTION: forcing a failure. [ 2502.292715][T30905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2502.316053][T30905] CPU: 1 PID: 30905 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2502.326216][T30905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.336269][T30905] Call Trace: [ 2502.339559][T30905] dump_stack+0x14a/0x1ce [ 2502.343881][T30905] ? devkmsg_release+0x11c/0x11c [ 2502.348810][T30905] ? show_regs_print_info+0x12/0x12 [ 2502.354009][T30905] ? __kasan_kmalloc+0x189/0x1c0 [ 2502.358942][T30905] ? kasan_alloc_pages+0x4a/0x60 [ 2502.363875][T30905] should_fail+0x6fb/0x860 [ 2502.368291][T30905] ? setup_fault_attr+0x3d0/0x3d0 [ 2502.373314][T30905] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2502.378698][T30905] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2502.384242][T30905] ? arch_stack_walk+0xd8/0x120 [ 2502.389433][T30905] ? kvmalloc_node+0xc2/0x120 [ 2502.394098][T30905] push_pipe+0x385/0x740 [ 2502.398341][T30905] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2502.403885][T30905] ? iov_iter_get_pages+0xd80/0xd80 [ 2502.409077][T30905] default_file_splice_read+0x210/0x980 [ 2502.414619][T30905] ? kcalloc+0x32/0x60 [ 2502.418680][T30905] ? alloc_pipe_info+0x1b9/0x3a0 [ 2502.423606][T30905] ? do_sendfile+0x8d6/0x1100 [ 2502.428279][T30905] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2502.433644][T30905] ? __ia32_sys_tee+0xa0/0xa0 [ 2502.438318][T30905] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2502.445077][T30905] ? selinux_file_permission+0x2d0/0x520 [ 2502.450715][T30905] ? security_file_permission+0x1e9/0x300 [ 2502.456425][T30905] ? __ia32_sys_tee+0xa0/0xa0 [ 2502.461093][T30905] splice_direct_to_actor+0x3cf/0xb00 [ 2502.466459][T30905] ? do_splice_direct+0x3e0/0x3e0 [ 2502.471466][T30905] ? pipe_to_sendpage+0x300/0x300 [ 2502.476462][T30905] ? security_file_permission+0x128/0x300 [ 2502.482149][T30905] do_splice_direct+0x28b/0x3e0 [ 2502.486975][T30905] ? splice_direct_to_actor+0xb00/0xb00 [ 2502.492501][T30905] ? avc_policy_seqno+0x17/0x70 [ 2502.497500][T30905] ? security_file_permission+0x128/0x300 [ 2502.503188][T30905] do_sendfile+0x8d6/0x1100 [ 2502.507665][T30905] ? compat_writev+0x3d0/0x3d0 [ 2502.512396][T30905] ? vfs_write+0x427/0x4f0 [ 2502.516784][T30905] __x64_sys_sendfile64+0x1d4/0x230 [ 2502.525542][T30905] ? __ia32_sys_sendfile+0x250/0x250 [ 2502.531171][T30905] do_syscall_64+0xcb/0x150 [ 2502.535668][T30905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2502.541543][T30905] RIP: 0033:0x45ce69 [ 2502.545762][T30905] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2502.565442][T30905] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2502.573836][T30905] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2502.582136][T30905] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x9) ppoll(&(0x7f00000000c0)=[{r8}, {r3, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xa00, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2502.590078][T30905] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2502.598106][T30905] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000006 [ 2502.606049][T30905] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:33 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r1}, {r2, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xf00, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:33 executing program 4 (fault-call:6 fault-nth:7): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2503.110715][T30936] FAULT_INJECTION: forcing a failure. [ 2503.110715][T30936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2503.124540][T30936] CPU: 1 PID: 30936 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2503.134684][T30936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.144730][T30936] Call Trace: [ 2503.148018][T30936] dump_stack+0x14a/0x1ce [ 2503.152345][T30936] ? devkmsg_release+0x11c/0x11c [ 2503.157300][T30936] ? show_regs_print_info+0x12/0x12 [ 2503.162497][T30936] ? __kasan_kmalloc+0x189/0x1c0 [ 2503.167412][T30936] ? kasan_alloc_pages+0x4a/0x60 [ 2503.172351][T30936] should_fail+0x6fb/0x860 [ 2503.176758][T30936] ? setup_fault_attr+0x3d0/0x3d0 [ 2503.185024][T30936] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2503.190629][T30936] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2503.196175][T30936] ? arch_stack_walk+0xd8/0x120 [ 2503.201020][T30936] ? kvmalloc_node+0xc2/0x120 [ 2503.205689][T30936] push_pipe+0x385/0x740 [ 2503.210114][T30936] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2503.215655][T30936] ? iov_iter_get_pages+0xd80/0xd80 [ 2503.220848][T30936] default_file_splice_read+0x210/0x980 [ 2503.226377][T30936] ? kcalloc+0x32/0x60 [ 2503.230416][T30936] ? alloc_pipe_info+0x1b9/0x3a0 [ 2503.235526][T30936] ? do_sendfile+0x8d6/0x1100 [ 2503.240285][T30936] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2503.245671][T30936] ? __ia32_sys_tee+0xa0/0xa0 [ 2503.250348][T30936] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2503.257174][T30936] ? selinux_file_permission+0x2d0/0x520 [ 2503.263055][T30936] ? security_file_permission+0x1e9/0x300 [ 2503.268743][T30936] ? __ia32_sys_tee+0xa0/0xa0 [ 2503.273598][T30936] splice_direct_to_actor+0x3cf/0xb00 [ 2503.278950][T30936] ? do_splice_direct+0x3e0/0x3e0 [ 2503.284221][T30936] ? pipe_to_sendpage+0x300/0x300 [ 2503.289220][T30936] ? security_file_permission+0x128/0x300 [ 2503.294907][T30936] do_splice_direct+0x28b/0x3e0 [ 2503.299744][T30936] ? splice_direct_to_actor+0xb00/0xb00 [ 2503.305345][T30936] ? avc_policy_seqno+0x17/0x70 [ 2503.310428][T30936] ? security_file_permission+0x128/0x300 [ 2503.316121][T30936] do_sendfile+0x8d6/0x1100 [ 2503.320615][T30936] ? compat_writev+0x3d0/0x3d0 [ 2503.325360][T30936] ? vfs_write+0x427/0x4f0 [ 2503.329755][T30936] __x64_sys_sendfile64+0x1d4/0x230 [ 2503.334922][T30936] ? __ia32_sys_sendfile+0x250/0x250 [ 2503.340176][T30936] do_syscall_64+0xcb/0x150 [ 2503.344649][T30936] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2503.350511][T30936] RIP: 0033:0x45ce69 [ 2503.354374][T30936] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2503.373948][T30936] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2503.382337][T30936] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2503.390281][T30936] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2503.398231][T30936] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:33 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000001c0)={'team_slave_1\x00', 0xc07}) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x84) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xff01) write$FUSE_STATFS(r8, &(0x7f0000000000)={0x60, 0xfffffffffffffff5, 0x7, {{0x7fff, 0x4, 0x2, 0x5, 0x0, 0x2, 0x6, 0xfc}}}, 0x60) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, r7}) 17:13:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000000)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r6, 0x2100}, {r7, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:33 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x1100, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:33 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x1800, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:33 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2503.406173][T30936] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000007 [ 2503.414231][T30936] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r1, 0x400}, {r3, 0x8308}], 0x2, 0x0, 0x0, 0x0) 17:13:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x3400, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:33 executing program 4 (fault-call:6 fault-nth:8): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2503.501187][T30977] FAULT_INJECTION: forcing a failure. [ 2503.501187][T30977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2503.514966][T30977] CPU: 1 PID: 30977 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2503.525185][T30977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.535227][T30977] Call Trace: [ 2503.538510][T30977] dump_stack+0x14a/0x1ce [ 2503.542843][T30977] ? devkmsg_release+0x11c/0x11c [ 2503.548113][T30977] ? show_regs_print_info+0x12/0x12 [ 2503.553827][T30977] ? __kasan_kmalloc+0x189/0x1c0 [ 2503.558760][T30977] ? kasan_alloc_pages+0x4a/0x60 [ 2503.566558][T30977] should_fail+0x6fb/0x860 [ 2503.571051][T30977] ? setup_fault_attr+0x3d0/0x3d0 [ 2503.577461][T30977] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2503.582812][T30977] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2503.588341][T30977] ? arch_stack_walk+0xd8/0x120 [ 2503.593170][T30977] ? kvmalloc_node+0xc2/0x120 [ 2503.598000][T30977] push_pipe+0x385/0x740 [ 2503.602232][T30977] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2503.607803][T30977] ? iov_iter_get_pages+0xd80/0xd80 [ 2503.612999][T30977] default_file_splice_read+0x210/0x980 [ 2503.618843][T30977] ? kcalloc+0x32/0x60 [ 2503.623326][T30977] ? alloc_pipe_info+0x1b9/0x3a0 [ 2503.628417][T30977] ? do_sendfile+0x8d6/0x1100 [ 2503.633162][T30977] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2503.638517][T30977] ? __ia32_sys_tee+0xa0/0xa0 [ 2503.643194][T30977] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2503.649958][T30977] ? selinux_file_permission+0x2d0/0x520 [ 2503.655575][T30977] ? security_file_permission+0x1e9/0x300 [ 2503.661708][T30977] ? __ia32_sys_tee+0xa0/0xa0 [ 2503.666363][T30977] splice_direct_to_actor+0x3cf/0xb00 [ 2503.671913][T30977] ? do_splice_direct+0x3e0/0x3e0 [ 2503.676913][T30977] ? pipe_to_sendpage+0x300/0x300 [ 2503.681918][T30977] ? security_file_permission+0x128/0x300 [ 2503.687674][T30977] do_splice_direct+0x28b/0x3e0 [ 2503.692510][T30977] ? splice_direct_to_actor+0xb00/0xb00 [ 2503.698037][T30977] ? avc_policy_seqno+0x17/0x70 [ 2503.703498][T30977] ? security_file_permission+0x128/0x300 [ 2503.709403][T30977] do_sendfile+0x8d6/0x1100 [ 2503.713994][T30977] ? compat_writev+0x3d0/0x3d0 [ 2503.718738][T30977] ? vfs_write+0x427/0x4f0 [ 2503.723129][T30977] __x64_sys_sendfile64+0x1d4/0x230 [ 2503.728428][T30977] ? __ia32_sys_sendfile+0x250/0x250 [ 2503.734135][T30977] do_syscall_64+0xcb/0x150 [ 2503.738624][T30977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2503.744505][T30977] RIP: 0033:0x45ce69 [ 2503.748378][T30977] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2503.770073][T30977] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2503.778606][T30977] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2503.786737][T30977] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2503.794691][T30977] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.807430][T30977] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000008 [ 2503.815538][T30977] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x4000, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:34 executing program 4 (fault-call:6 fault-nth:9): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:34 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1}, 0x34}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x13, 0xfffffffc, @udp='udp:syz1\x00'}}}, [""]}, 0x34}}, 0x0) 17:13:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000180)=0x8, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES16], 0x1c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c148e98", @ANYRES16=r5, @ANYBLOB="00022cbd7000fcdbdf250400000008010000ff0056bce08a0a1a8a86174500001400010000000000000000000000000000000000080003005e990000050010001abc290900000008000400bc"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0xc0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x42}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x101]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000005) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000002410000820800133a000000"], 0x24}}, 0x4004000) 17:13:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2504.327688][T30987] FAULT_INJECTION: forcing a failure. [ 2504.327688][T30987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2504.345134][T30987] CPU: 0 PID: 30987 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2504.355492][T30987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.365717][T30987] Call Trace: [ 2504.369375][T30987] dump_stack+0x14a/0x1ce [ 2504.375107][T30987] ? devkmsg_release+0x11c/0x11c [ 2504.380050][T30987] ? show_regs_print_info+0x12/0x12 [ 2504.385338][T30987] ? __kasan_kmalloc+0x189/0x1c0 [ 2504.390364][T30987] ? kasan_alloc_pages+0x4a/0x60 [ 2504.395474][T30987] should_fail+0x6fb/0x860 [ 2504.400669][T30987] ? setup_fault_attr+0x3d0/0x3d0 [ 2504.406098][T30987] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2504.411747][T30987] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2504.417274][T30987] ? kvmalloc_node+0xc2/0x120 [ 2504.421972][T30987] ? kvmalloc_node+0xc2/0x120 [ 2504.426813][T30987] push_pipe+0x385/0x740 [ 2504.431255][T30987] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2504.437394][T30987] ? iov_iter_get_pages+0xd80/0xd80 [ 2504.442951][T30987] default_file_splice_read+0x210/0x980 [ 2504.449303][T30987] ? kcalloc+0x32/0x60 [ 2504.453367][T30987] ? alloc_pipe_info+0x1b9/0x3a0 [ 2504.458366][T30987] ? do_sendfile+0x8d6/0x1100 [ 2504.463016][T30987] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2504.468360][T30987] ? __ia32_sys_tee+0xa0/0xa0 [ 2504.473027][T30987] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2504.479767][T30987] ? selinux_file_permission+0x2d0/0x520 [ 2504.485376][T30987] ? security_file_permission+0x1e9/0x300 [ 2504.491253][T30987] ? __ia32_sys_tee+0xa0/0xa0 [ 2504.497463][T30987] splice_direct_to_actor+0x3cf/0xb00 [ 2504.502896][T30987] ? do_splice_direct+0x3e0/0x3e0 [ 2504.507895][T30987] ? pipe_to_sendpage+0x300/0x300 [ 2504.512896][T30987] ? security_file_permission+0x128/0x300 [ 2504.518586][T30987] do_splice_direct+0x28b/0x3e0 [ 2504.523411][T30987] ? splice_direct_to_actor+0xb00/0xb00 [ 2504.529185][T30987] ? avc_policy_seqno+0x17/0x70 [ 2504.534006][T30987] ? security_file_permission+0x128/0x300 [ 2504.539693][T30987] do_sendfile+0x8d6/0x1100 [ 2504.544170][T30987] ? compat_writev+0x3d0/0x3d0 [ 2504.548905][T30987] ? vfs_write+0x427/0x4f0 [ 2504.553290][T30987] __x64_sys_sendfile64+0x1d4/0x230 [ 2504.558635][T30987] ? __ia32_sys_sendfile+0x250/0x250 [ 2504.564592][T30987] do_syscall_64+0xcb/0x150 [ 2504.569075][T30987] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2504.574960][T30987] RIP: 0033:0x45ce69 [ 2504.578830][T30987] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2504.601494][T30987] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2504.610845][T30987] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2504.618796][T30987] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x6000, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x1f}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2504.626823][T30987] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2504.634767][T30987] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000009 [ 2504.642796][T30987] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:35 executing program 4 (fault-call:6 fault-nth:10): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xe803, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:35 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0xffffffff, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r8, 0x0, r9, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r3, 0x4000}, {r7, 0x4000}, {r9, 0x1008}, {0xffffffffffffffff, 0x6283}, {0xffffffffffffffff, 0x4}, {}, {}, {0xffffffffffffffff, 0x9008}], 0x8, 0x0, 0x0, 0x0) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xf401, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2504.758017][T31011] FAULT_INJECTION: forcing a failure. [ 2504.758017][T31011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2504.791442][T31011] CPU: 0 PID: 31011 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2504.801620][T31011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.811771][T31011] Call Trace: [ 2504.815074][T31011] dump_stack+0x14a/0x1ce [ 2504.819416][T31011] ? devkmsg_release+0x11c/0x11c [ 2504.825478][T31011] ? show_regs_print_info+0x12/0x12 [ 2504.831476][T31011] ? __kasan_kmalloc+0x189/0x1c0 [ 2504.836593][T31011] ? kasan_alloc_pages+0x4a/0x60 [ 2504.841536][T31011] should_fail+0x6fb/0x860 [ 2504.845966][T31011] ? setup_fault_attr+0x3d0/0x3d0 [ 2504.850990][T31011] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2504.856359][T31011] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2504.861987][T31011] ? arch_stack_walk+0xd8/0x120 [ 2504.866831][T31011] ? kvmalloc_node+0xc2/0x120 [ 2504.871501][T31011] push_pipe+0x385/0x740 [ 2504.875741][T31011] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2504.881287][T31011] ? iov_iter_get_pages+0xd80/0xd80 [ 2504.886482][T31011] default_file_splice_read+0x210/0x980 [ 2504.892035][T31011] ? kcalloc+0x32/0x60 [ 2504.896104][T31011] ? alloc_pipe_info+0x1b9/0x3a0 [ 2504.901054][T31011] ? do_sendfile+0x8d6/0x1100 [ 2504.905735][T31011] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2504.911111][T31011] ? __ia32_sys_tee+0xa0/0xa0 [ 2504.915790][T31011] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2504.922686][T31011] ? selinux_file_permission+0x2d0/0x520 [ 2504.928311][T31011] ? security_file_permission+0x1e9/0x300 [ 2504.934015][T31011] ? __ia32_sys_tee+0xa0/0xa0 [ 2504.938678][T31011] splice_direct_to_actor+0x3cf/0xb00 [ 2504.944024][T31011] ? do_splice_direct+0x3e0/0x3e0 [ 2504.949028][T31011] ? pipe_to_sendpage+0x300/0x300 [ 2504.954025][T31011] ? security_file_permission+0x128/0x300 [ 2504.959712][T31011] do_splice_direct+0x28b/0x3e0 [ 2504.964531][T31011] ? splice_direct_to_actor+0xb00/0xb00 [ 2504.970053][T31011] ? avc_policy_seqno+0x17/0x70 [ 2504.975100][T31011] ? security_file_permission+0x128/0x300 [ 2504.981408][T31011] do_sendfile+0x8d6/0x1100 [ 2504.986096][T31011] ? compat_writev+0x3d0/0x3d0 [ 2504.990836][T31011] ? vfs_write+0x427/0x4f0 [ 2504.995224][T31011] __x64_sys_sendfile64+0x1d4/0x230 [ 2505.000399][T31011] ? __ia32_sys_sendfile+0x250/0x250 [ 2505.005752][T31011] do_syscall_64+0xcb/0x150 [ 2505.010327][T31011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2505.016639][T31011] RIP: 0033:0x45ce69 [ 2505.020596][T31011] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2505.040172][T31011] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2505.048733][T31011] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 17:13:35 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000200)=0x10) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @multicast2}, {0x6, @random="f2235b34649d"}, 0x4e, {0x2, 0x4e20, @local}, 'ip6tnl0\x00'}) [ 2505.056677][T31011] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2505.064709][T31011] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2505.072651][T31011] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000a [ 2505.081025][T31011] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x452727327ea618ea, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0xffff, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:35 executing program 4 (fault-call:6 fault-nth:11): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2505.189775][T31037] FAULT_INJECTION: forcing a failure. [ 2505.189775][T31037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2505.204860][T31037] CPU: 0 PID: 31037 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2505.215312][T31037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.225972][T31037] Call Trace: [ 2505.229451][T31037] dump_stack+0x14a/0x1ce [ 2505.234413][T31037] ? devkmsg_release+0x11c/0x11c 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2505.239708][T31037] ? show_regs_print_info+0x12/0x12 [ 2505.244912][T31037] ? __kasan_kmalloc+0x189/0x1c0 [ 2505.249853][T31037] ? kasan_alloc_pages+0x4a/0x60 [ 2505.255490][T31037] should_fail+0x6fb/0x860 [ 2505.259906][T31037] ? setup_fault_attr+0x3d0/0x3d0 [ 2505.264938][T31037] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2505.271554][T31037] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2505.277437][T31037] ? arch_stack_walk+0xd8/0x120 [ 2505.282740][T31037] ? kvmalloc_node+0xc2/0x120 [ 2505.287497][T31037] push_pipe+0x385/0x740 [ 2505.291810][T31037] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2505.297337][T31037] ? iov_iter_get_pages+0xd80/0xd80 [ 2505.303121][T31037] default_file_splice_read+0x210/0x980 [ 2505.308808][T31037] ? kcalloc+0x32/0x60 [ 2505.312881][T31037] ? alloc_pipe_info+0x1b9/0x3a0 [ 2505.318437][T31037] ? do_sendfile+0x8d6/0x1100 [ 2505.327584][T31037] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2505.333481][T31037] ? __ia32_sys_tee+0xa0/0xa0 [ 2505.338248][T31037] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2505.345180][T31037] ? selinux_file_permission+0x2d0/0x520 [ 2505.350981][T31037] ? security_file_permission+0x1e9/0x300 [ 2505.357750][T31037] ? __ia32_sys_tee+0xa0/0xa0 [ 2505.362615][T31037] splice_direct_to_actor+0x3cf/0xb00 [ 2505.368419][T31037] ? do_splice_direct+0x3e0/0x3e0 [ 2505.373440][T31037] ? pipe_to_sendpage+0x300/0x300 [ 2505.378625][T31037] ? security_file_permission+0x128/0x300 [ 2505.384338][T31037] do_splice_direct+0x28b/0x3e0 [ 2505.389165][T31037] ? splice_direct_to_actor+0xb00/0xb00 [ 2505.394688][T31037] ? avc_policy_seqno+0x17/0x70 [ 2505.399600][T31037] ? security_file_permission+0x128/0x300 [ 2505.405661][T31037] do_sendfile+0x8d6/0x1100 [ 2505.410138][T31037] ? compat_writev+0x3d0/0x3d0 [ 2505.414875][T31037] ? vfs_write+0x427/0x4f0 [ 2505.419273][T31037] __x64_sys_sendfile64+0x1d4/0x230 [ 2505.424443][T31037] ? __ia32_sys_sendfile+0x250/0x250 [ 2505.429699][T31037] do_syscall_64+0xcb/0x150 [ 2505.434177][T31037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2505.440045][T31037] RIP: 0033:0x45ce69 [ 2505.443927][T31037] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2505.463501][T31037] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2505.471882][T31037] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2505.479842][T31037] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2505.487831][T31037] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2505.495780][T31037] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000b [ 2505.503732][T31037] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:36 executing program 4 (fault-call:6 fault-nth:12): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:36 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @identifier="a4b929adbcd283adcc386c56b559f8a6"}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:36 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r6) splice(r4, &(0x7f00000001c0)=0x3f, r5, &(0x7f0000000200)=0xe24b, 0x0, 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r2, 0x0, r3, 0x0, 0xe8ba, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000000)) r7 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000240)=[{r8}, {r9, 0x8300}, {0xffffffffffffffff, 0x100}], 0x3, 0x0, 0x0, 0x0) 17:13:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7]}, 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x3b, 0x80ffff, 0xffffffffffffff9c}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x8001) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x2, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x3, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2505.991101][T31056] FAULT_INJECTION: forcing a failure. [ 2505.991101][T31056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2506.006867][T31056] CPU: 1 PID: 31056 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2506.017024][T31056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.031476][T31056] Call Trace: [ 2506.034795][T31056] dump_stack+0x14a/0x1ce 17:13:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x4, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2506.039389][T31056] ? devkmsg_release+0x11c/0x11c [ 2506.044368][T31056] ? show_regs_print_info+0x12/0x12 [ 2506.049742][T31056] ? __kasan_kmalloc+0x189/0x1c0 [ 2506.054692][T31056] ? kasan_alloc_pages+0x4a/0x60 [ 2506.059619][T31056] should_fail+0x6fb/0x860 [ 2506.064032][T31056] ? setup_fault_attr+0x3d0/0x3d0 [ 2506.069090][T31056] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2506.074482][T31056] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2506.080904][T31056] ? kvmalloc_node+0xc2/0x120 [ 2506.085592][T31056] ? kvmalloc_node+0xc2/0x120 [ 2506.090381][T31056] push_pipe+0x385/0x740 [ 2506.094809][T31056] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2506.100635][T31056] ? iov_iter_get_pages+0xd80/0xd80 [ 2506.106017][T31056] default_file_splice_read+0x210/0x980 [ 2506.111571][T31056] ? kcalloc+0x32/0x60 [ 2506.115933][T31056] ? alloc_pipe_info+0x1b9/0x3a0 [ 2506.120862][T31056] ? do_sendfile+0x8d6/0x1100 [ 2506.125510][T31056] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2506.130946][T31056] ? __ia32_sys_tee+0xa0/0xa0 [ 2506.135735][T31056] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2506.142609][T31056] ? selinux_file_permission+0x2d0/0x520 [ 2506.148241][T31056] ? security_file_permission+0x1e9/0x300 [ 2506.154491][T31056] ? __ia32_sys_tee+0xa0/0xa0 [ 2506.159884][T31056] splice_direct_to_actor+0x3cf/0xb00 [ 2506.165250][T31056] ? do_splice_direct+0x3e0/0x3e0 [ 2506.170259][T31056] ? pipe_to_sendpage+0x300/0x300 [ 2506.175260][T31056] ? security_file_permission+0x128/0x300 [ 2506.180948][T31056] do_splice_direct+0x28b/0x3e0 [ 2506.186122][T31056] ? splice_direct_to_actor+0xb00/0xb00 [ 2506.191645][T31056] ? avc_policy_seqno+0x17/0x70 [ 2506.196646][T31056] ? security_file_permission+0x128/0x300 [ 2506.202335][T31056] do_sendfile+0x8d6/0x1100 [ 2506.206863][T31056] ? compat_writev+0x3d0/0x3d0 [ 2506.211642][T31056] ? vfs_write+0x427/0x4f0 [ 2506.217559][T31056] __x64_sys_sendfile64+0x1d4/0x230 [ 2506.223995][T31056] ? __ia32_sys_sendfile+0x250/0x250 [ 2506.229612][T31056] do_syscall_64+0xcb/0x150 [ 2506.234105][T31056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2506.247541][T31056] RIP: 0033:0x45ce69 [ 2506.252060][T31056] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2506.271872][T31056] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2506.280259][T31056] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2506.288293][T31056] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2506.296410][T31056] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2506.308971][T31056] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000c [ 2506.322349][T31056] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:36 executing program 4 (fault-call:6 fault-nth:13): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2506.391349][T31087] FAULT_INJECTION: forcing a failure. [ 2506.391349][T31087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2506.406771][T31087] CPU: 0 PID: 31087 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2506.418587][T31087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.428819][T31087] Call Trace: [ 2506.432123][T31087] dump_stack+0x14a/0x1ce [ 2506.436455][T31087] ? devkmsg_release+0x11c/0x11c [ 2506.442404][T31087] ? show_regs_print_info+0x12/0x12 [ 2506.447893][T31087] ? __kasan_kmalloc+0x189/0x1c0 [ 2506.452818][T31087] ? kasan_alloc_pages+0x4a/0x60 [ 2506.457920][T31087] should_fail+0x6fb/0x860 [ 2506.463387][T31087] ? setup_fault_attr+0x3d0/0x3d0 [ 2506.469101][T31087] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2506.479324][T31087] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2506.486011][T31087] ? kvmalloc_node+0xc2/0x120 [ 2506.490945][T31087] ? kvmalloc_node+0xc2/0x120 [ 2506.495615][T31087] push_pipe+0x385/0x740 [ 2506.500128][T31087] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2506.505684][T31087] ? iov_iter_get_pages+0xd80/0xd80 [ 2506.511059][T31087] default_file_splice_read+0x210/0x980 [ 2506.517265][T31087] ? kcalloc+0x32/0x60 [ 2506.521339][T31087] ? alloc_pipe_info+0x1b9/0x3a0 [ 2506.526286][T31087] ? do_sendfile+0x8d6/0x1100 [ 2506.532181][T31087] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2506.537550][T31087] ? __ia32_sys_tee+0xa0/0xa0 [ 2506.542254][T31087] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2506.550428][T31087] ? selinux_file_permission+0x2d0/0x520 [ 2506.556787][T31087] ? security_file_permission+0x1e9/0x300 [ 2506.563448][T31087] ? __ia32_sys_tee+0xa0/0xa0 [ 2506.569308][T31087] splice_direct_to_actor+0x3cf/0xb00 [ 2506.575341][T31087] ? do_splice_direct+0x3e0/0x3e0 [ 2506.581131][T31087] ? pipe_to_sendpage+0x300/0x300 [ 2506.586176][T31087] ? security_file_permission+0x128/0x300 [ 2506.591886][T31087] do_splice_direct+0x28b/0x3e0 [ 2506.596786][T31087] ? splice_direct_to_actor+0xb00/0xb00 [ 2506.602309][T31087] ? avc_policy_seqno+0x17/0x70 [ 2506.607354][T31087] ? security_file_permission+0x128/0x300 [ 2506.613046][T31087] do_sendfile+0x8d6/0x1100 [ 2506.617535][T31087] ? compat_writev+0x3d0/0x3d0 [ 2506.622554][T31087] ? vfs_write+0x427/0x4f0 [ 2506.627072][T31087] __x64_sys_sendfile64+0x1d4/0x230 [ 2506.632702][T31087] ? __ia32_sys_sendfile+0x250/0x250 [ 2506.637980][T31087] do_syscall_64+0xcb/0x150 [ 2506.642459][T31087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2506.648324][T31087] RIP: 0033:0x45ce69 [ 2506.652260][T31087] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2506.675100][T31087] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2506.683606][T31087] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2506.694177][T31087] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2506.702143][T31087] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2506.710102][T31087] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000d [ 2506.718309][T31087] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:37 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) clock_gettime(0x0, &(0x7f0000004e40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000004ec0)=""/214, 0xd6}, {&(0x7f0000000480)=""/26, 0x1a}], 0x5, &(0x7f0000000540)=""/245, 0xf5}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)=""/53, 0x35}], 0x1, &(0x7f00000006c0)=""/237, 0xed}, 0x6}, {{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)=""/3, 0x3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/60, 0x3c}, {&(0x7f00000018c0)=""/196, 0xc4}, {&(0x7f00000019c0)=""/92, 0x5c}], 0x5, &(0x7f0000001ac0)=""/43, 0x2b}}, {{&(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/12, 0xc}], 0x1, &(0x7f0000001c00)=""/187, 0xbb}, 0x2}, {{&(0x7f0000001cc0)=@hci, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d40)=""/175, 0xaf}], 0x1}, 0xb96b}, {{&(0x7f0000001e40)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/225, 0xe1}], 0x1, &(0x7f0000002000)=""/89, 0x59}, 0x4}, {{&(0x7f0000002080)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002100)=""/134, 0x86}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003200)=""/84, 0x54}, 0x3ff}, {{&(0x7f0000003280)=@nfc, 0x80, &(0x7f0000003340)=[{&(0x7f0000003300)=""/38, 0x26}], 0x1}, 0xf0}, {{&(0x7f0000003380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000004600)=[{&(0x7f0000003400)=""/93, 0x5d}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/26, 0x1a}, {&(0x7f00000044c0)=""/63, 0x3f}, {&(0x7f0000004500)=""/248, 0xf8}], 0x5}, 0x7}, {{&(0x7f0000004680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004700)=""/63, 0x3f}, {&(0x7f0000004740)=""/113, 0x71}, {&(0x7f00000047c0)=""/240, 0xf0}, {&(0x7f00000048c0)=""/130, 0x82}, {&(0x7f0000004980)=""/49, 0x31}, {&(0x7f00000049c0)=""/149, 0x95}, {&(0x7f0000004a80)=""/105, 0x69}], 0x7, &(0x7f0000004b80)=""/55, 0x37}, 0x401}], 0xa, 0x140, &(0x7f0000004e80)={r3, r4+60000000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r7 = dup2(r5, r5) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0d00000000aab0794b200000005816bdad769ff7f8e85053ca2b09d1aba2ce52b78a4e05b9fc2fa323a9a26d0220292c74e8192c2021291278e1029ab482d5a451c710cb91d11c6ff16011c4576aad37c5c09f4aee3a5016c708", @ANYRES16=r6, @ANYBLOB="010000000000000000001b00000008009a0000000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2cfc878400000000000000", @ANYRES16=r6, @ANYBLOB="00012abd7000fedbdf25190000000c00990008000000ffffffff0c009900ffff0000ff030000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x5, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:37 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x577) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:37 executing program 4 (fault-call:6 fault-nth:14): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:37 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x200, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x6, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0xa, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2507.364055][T31108] FAULT_INJECTION: forcing a failure. [ 2507.364055][T31108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2507.390081][T31108] CPU: 1 PID: 31108 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2507.400350][T31108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 17:13:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2507.411236][T31108] Call Trace: [ 2507.414540][T31108] dump_stack+0x14a/0x1ce [ 2507.418966][T31108] ? devkmsg_release+0x11c/0x11c [ 2507.423909][T31108] ? show_regs_print_info+0x12/0x12 [ 2507.429120][T31108] ? __kasan_kmalloc+0x189/0x1c0 [ 2507.434070][T31108] ? kasan_alloc_pages+0x4a/0x60 [ 2507.439012][T31108] should_fail+0x6fb/0x860 [ 2507.443454][T31108] ? setup_fault_attr+0x3d0/0x3d0 [ 2507.448498][T31108] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2507.453885][T31108] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2507.459427][T31108] ? arch_stack_walk+0xd8/0x120 [ 2507.464261][T31108] ? kvmalloc_node+0xc2/0x120 [ 2507.468921][T31108] push_pipe+0x385/0x740 [ 2507.473163][T31108] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2507.479162][T31108] ? iov_iter_get_pages+0xd80/0xd80 [ 2507.486035][T31108] default_file_splice_read+0x210/0x980 [ 2507.491575][T31108] ? kcalloc+0x32/0x60 [ 2507.495625][T31108] ? alloc_pipe_info+0x1b9/0x3a0 [ 2507.500554][T31108] ? do_sendfile+0x8d6/0x1100 [ 2507.505297][T31108] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2507.510668][T31108] ? __ia32_sys_tee+0xa0/0xa0 [ 2507.515334][T31108] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2507.522071][T31108] ? selinux_file_permission+0x2d0/0x520 [ 2507.527684][T31108] ? security_file_permission+0x1e9/0x300 [ 2507.533376][T31108] ? __ia32_sys_tee+0xa0/0xa0 [ 2507.538028][T31108] splice_direct_to_actor+0x3cf/0xb00 [ 2507.543554][T31108] ? do_splice_direct+0x3e0/0x3e0 [ 2507.548905][T31108] ? pipe_to_sendpage+0x300/0x300 [ 2507.553917][T31108] ? security_file_permission+0x128/0x300 [ 2507.559613][T31108] do_splice_direct+0x28b/0x3e0 [ 2507.564480][T31108] ? splice_direct_to_actor+0xb00/0xb00 [ 2507.570013][T31108] ? avc_policy_seqno+0x17/0x70 [ 2507.574868][T31108] ? security_file_permission+0x128/0x300 [ 2507.580669][T31108] do_sendfile+0x8d6/0x1100 [ 2507.585241][T31108] ? compat_writev+0x3d0/0x3d0 [ 2507.589990][T31108] ? vfs_write+0x427/0x4f0 [ 2507.594410][T31108] __x64_sys_sendfile64+0x1d4/0x230 [ 2507.599604][T31108] ? __ia32_sys_sendfile+0x250/0x250 [ 2507.604872][T31108] do_syscall_64+0xcb/0x150 [ 2507.609366][T31108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2507.615262][T31108] RIP: 0033:0x45ce69 [ 2507.619132][T31108] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2507.638723][T31108] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2507.647111][T31108] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2507.655068][T31108] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2507.663022][T31108] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2507.670974][T31108] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000e [ 2507.678931][T31108] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:38 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:38 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0xf, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:38 executing program 4 (fault-call:6 fault-nth:15): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:38 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x801, 0x1) getpeername$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x402000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:38 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:38 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r3, 0x8}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:38 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x6, 0x0, 0x1}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x80, 0x58, 0x1, 0x770}, {0x2, 0x9, 0x2, 0x10001}, {0x6, 0x0, 0x40, 0xffffffff}, {0x4, 0xfb, 0x4}, {0xff, 0x0, 0x20, 0xff}]}) 17:13:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x11, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2508.212376][T31147] FAULT_INJECTION: forcing a failure. [ 2508.212376][T31147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2508.238761][T31147] CPU: 1 PID: 31147 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2508.248944][T31147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.258994][T31147] Call Trace: [ 2508.262285][T31147] dump_stack+0x14a/0x1ce [ 2508.266610][T31147] ? devkmsg_release+0x11c/0x11c [ 2508.271808][T31147] ? show_regs_print_info+0x12/0x12 [ 2508.277032][T31147] ? __kasan_kmalloc+0x189/0x1c0 [ 2508.282049][T31147] ? kasan_alloc_pages+0x4a/0x60 [ 2508.287015][T31147] should_fail+0x6fb/0x860 [ 2508.291430][T31147] ? setup_fault_attr+0x3d0/0x3d0 [ 2508.296444][T31147] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2508.301791][T31147] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2508.307310][T31147] ? kvmalloc_node+0xc2/0x120 [ 2508.311955][T31147] ? kvmalloc_node+0xc2/0x120 [ 2508.316689][T31147] push_pipe+0x385/0x740 [ 2508.320904][T31147] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2508.326418][T31147] ? iov_iter_get_pages+0xd80/0xd80 [ 2508.331598][T31147] default_file_splice_read+0x210/0x980 [ 2508.337128][T31147] ? kcalloc+0x32/0x60 [ 2508.341169][T31147] ? alloc_pipe_info+0x1b9/0x3a0 [ 2508.346076][T31147] ? do_sendfile+0x8d6/0x1100 [ 2508.350821][T31147] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2508.356252][T31147] ? __ia32_sys_tee+0xa0/0xa0 [ 2508.360912][T31147] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2508.367770][T31147] ? selinux_file_permission+0x2d0/0x520 [ 2508.373374][T31147] ? security_file_permission+0x1e9/0x300 [ 2508.379060][T31147] ? __ia32_sys_tee+0xa0/0xa0 [ 2508.383708][T31147] splice_direct_to_actor+0x3cf/0xb00 [ 2508.389054][T31147] ? do_splice_direct+0x3e0/0x3e0 [ 2508.394062][T31147] ? pipe_to_sendpage+0x300/0x300 [ 2508.399074][T31147] ? security_file_permission+0x128/0x300 [ 2508.404861][T31147] do_splice_direct+0x28b/0x3e0 [ 2508.409699][T31147] ? splice_direct_to_actor+0xb00/0xb00 [ 2508.415215][T31147] ? avc_policy_seqno+0x17/0x70 [ 2508.420035][T31147] ? security_file_permission+0x128/0x300 [ 2508.425722][T31147] do_sendfile+0x8d6/0x1100 [ 2508.430218][T31147] ? compat_writev+0x3d0/0x3d0 [ 2508.434950][T31147] ? vfs_write+0x427/0x4f0 [ 2508.439338][T31147] __x64_sys_sendfile64+0x1d4/0x230 [ 2508.444511][T31147] ? __ia32_sys_sendfile+0x250/0x250 [ 2508.449765][T31147] do_syscall_64+0xcb/0x150 [ 2508.454332][T31147] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2508.460212][T31147] RIP: 0033:0x45ce69 [ 2508.464117][T31147] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2508.484924][T31147] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2508.493592][T31147] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2508.501539][T31147] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:39 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x18, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2508.509482][T31147] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2508.517423][T31147] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000000f [ 2508.525367][T31147] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:39 executing program 4 (fault-call:6 fault-nth:16): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:39 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x34}}, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25100200}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="68ff03eb9f884e09fd40c2b0bbec0adc02549a4074f9ec0ed1811d37d47166ff72560afb8a74540377c36567b712a659f9a10100903f9ef5a163a562e0b628b28a1e202a246dee15ffc55db43c27a110e86c4ece016eb7fa00bd91e9f28f6e646f8ebda9b1f5f15500"/120, @ANYRES32=r2, @ANYBLOB="000128bd7000fbdbdf25010000000000000009410000004c00180000008075647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000811) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="300100005304000229bd7000fbdbdf25aa955acac431b625425ed07beddad46cb680882910073fcb5dfb593ec2540c9f42eead1a1f16026951825b1cdae355d3e0683f0ef2cbf5f059361e78e87fbf3b3844b219e5868bbaf92696378299f36f5ddddbd060c7b641409fcf525958b1be3f4fa884513af3744f08ba452c26440b9a385eb8efbabbba99e6cdb405f041d69645fc1410a7622d906206c1169edddffcb87bafa3ef10841617873484445267aa61bb420a340d1a64368bd56118a09d78fafcc46a9220e61642112584790d11679e8888375d2be913760fd11e0523fcf3deedf6e66604d8c7a85fab28518e4d8c78faae016186ff2ce9faff5e7592a1a5fd561337cfeda00b5c5b3bea7112809a8c2ebb42d29c936a9cab9da1a0062ee4e32f51d03e1422e3c5812430ff5c34180a11cd92dc66e6c08f"], 0x130}, 0x1, 0x0, 0x0, 0x4000805}, 0x24044850) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x200080, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000080)=0x67, 0x80c00) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x34, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2508.631397][T31166] FAULT_INJECTION: forcing a failure. [ 2508.631397][T31166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2508.649222][T31166] CPU: 1 PID: 31166 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2508.659379][T31166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.669435][T31166] Call Trace: [ 2508.672972][T31166] dump_stack+0x14a/0x1ce [ 2508.677272][T31166] ? devkmsg_release+0x11c/0x11c [ 2508.682352][T31166] ? show_regs_print_info+0x12/0x12 [ 2508.687671][T31166] ? __kasan_kmalloc+0x189/0x1c0 [ 2508.692577][T31166] ? kasan_alloc_pages+0x4a/0x60 [ 2508.697495][T31166] should_fail+0x6fb/0x860 [ 2508.701904][T31166] ? setup_fault_attr+0x3d0/0x3d0 [ 2508.706922][T31166] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2508.712270][T31166] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2508.717788][T31166] ? arch_stack_walk+0xd8/0x120 [ 2508.722609][T31166] ? kvmalloc_node+0xc2/0x120 [ 2508.727296][T31166] push_pipe+0x385/0x740 [ 2508.731526][T31166] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2508.737051][T31166] ? iov_iter_get_pages+0xd80/0xd80 [ 2508.742231][T31166] default_file_splice_read+0x210/0x980 [ 2508.748869][T31166] ? kcalloc+0x32/0x60 [ 2508.752928][T31166] ? alloc_pipe_info+0x1b9/0x3a0 [ 2508.757841][T31166] ? do_sendfile+0x8d6/0x1100 [ 2508.762485][T31166] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2508.767911][T31166] ? __ia32_sys_tee+0xa0/0xa0 [ 2508.772558][T31166] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2508.779296][T31166] ? selinux_file_permission+0x2d0/0x520 [ 2508.784928][T31166] ? security_file_permission+0x1e9/0x300 [ 2508.790640][T31166] ? __ia32_sys_tee+0xa0/0xa0 [ 2508.795310][T31166] splice_direct_to_actor+0x3cf/0xb00 [ 2508.800817][T31166] ? do_splice_direct+0x3e0/0x3e0 [ 2508.806015][T31166] ? pipe_to_sendpage+0x300/0x300 [ 2508.811412][T31166] ? security_file_permission+0x128/0x300 [ 2508.817376][T31166] do_splice_direct+0x28b/0x3e0 [ 2508.822593][T31166] ? splice_direct_to_actor+0xb00/0xb00 [ 2508.828116][T31166] ? avc_policy_seqno+0x17/0x70 [ 2508.832955][T31166] ? security_file_permission+0x128/0x300 [ 2508.838917][T31166] do_sendfile+0x8d6/0x1100 [ 2508.843391][T31166] ? compat_writev+0x3d0/0x3d0 [ 2508.848126][T31166] ? vfs_write+0x427/0x4f0 [ 2508.852510][T31166] __x64_sys_sendfile64+0x1d4/0x230 [ 2508.858543][T31166] ? __ia32_sys_sendfile+0x250/0x250 [ 2508.863809][T31166] do_syscall_64+0xcb/0x150 [ 2508.868295][T31166] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2508.874165][T31166] RIP: 0033:0x45ce69 [ 2508.878137][T31166] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2508.897998][T31166] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2508.906820][T31166] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2508.914763][T31166] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2508.923137][T31166] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000000c0)=0x1) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000)=r4, 0x1) 17:13:39 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048014) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x404800, 0x0) write$UHID_INPUT2(r7, &(0x7f0000000880)={0xc, {0x1000, "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"}}, 0x1006) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2508.931088][T31166] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000010 [ 2508.943282][T31166] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:39 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000100)={@dev={[], 0x15}, @random="e0080018049b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88, 0x0, @rand_addr, @remote}, "0806008000030000"}}}}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r6, 0x0, r7, 0x0, 0xe8ba, 0x0) dup(r6) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000001c0)=""/132) ppoll(&(0x7f00000000c0)=[{r3}, {r5, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:39 executing program 4 (fault-call:6 fault-nth:17): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2509.035049][T31185] FAULT_INJECTION: forcing a failure. [ 2509.035049][T31185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2509.051011][T31185] CPU: 0 PID: 31185 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2509.061164][T31185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.071385][T31185] Call Trace: [ 2509.074777][T31185] dump_stack+0x14a/0x1ce [ 2509.079109][T31185] ? devkmsg_release+0x11c/0x11c [ 2509.084047][T31185] ? show_regs_print_info+0x12/0x12 [ 2509.089266][T31185] ? __kasan_kmalloc+0x189/0x1c0 [ 2509.094209][T31185] ? kasan_alloc_pages+0x4a/0x60 [ 2509.099244][T31185] should_fail+0x6fb/0x860 [ 2509.103659][T31185] ? setup_fault_attr+0x3d0/0x3d0 [ 2509.108680][T31185] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2509.114051][T31185] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2509.119574][T31185] ? arch_stack_walk+0xd8/0x120 [ 2509.124401][T31185] ? kvmalloc_node+0xc2/0x120 [ 2509.129491][T31185] push_pipe+0x385/0x740 [ 2509.133709][T31185] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2509.139231][T31185] ? iov_iter_get_pages+0xd80/0xd80 [ 2509.144403][T31185] default_file_splice_read+0x210/0x980 [ 2509.149923][T31185] ? kcalloc+0x32/0x60 [ 2509.153987][T31185] ? alloc_pipe_info+0x1b9/0x3a0 [ 2509.158896][T31185] ? do_sendfile+0x8d6/0x1100 [ 2509.163545][T31185] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2509.169396][T31185] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.174189][T31185] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2509.181122][T31185] ? selinux_file_permission+0x2d0/0x520 [ 2509.186737][T31185] ? security_file_permission+0x1e9/0x300 [ 2509.192426][T31185] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.197078][T31185] splice_direct_to_actor+0x3cf/0xb00 [ 2509.202421][T31185] ? do_splice_direct+0x3e0/0x3e0 [ 2509.207421][T31185] ? pipe_to_sendpage+0x300/0x300 [ 2509.212417][T31185] ? security_file_permission+0x128/0x300 [ 2509.218106][T31185] do_splice_direct+0x28b/0x3e0 [ 2509.222958][T31185] ? splice_direct_to_actor+0xb00/0xb00 [ 2509.228492][T31185] ? avc_policy_seqno+0x17/0x70 [ 2509.233316][T31185] ? security_file_permission+0x128/0x300 [ 2509.239189][T31185] do_sendfile+0x8d6/0x1100 [ 2509.243671][T31185] ? compat_writev+0x3d0/0x3d0 [ 2509.248524][T31185] ? vfs_write+0x427/0x4f0 [ 2509.253183][T31185] __x64_sys_sendfile64+0x1d4/0x230 [ 2509.258355][T31185] ? __ia32_sys_sendfile+0x250/0x250 [ 2509.263626][T31185] do_syscall_64+0xcb/0x150 [ 2509.268103][T31185] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2509.273970][T31185] RIP: 0033:0x45ce69 [ 2509.277838][T31185] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2509.297414][T31185] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2509.305794][T31185] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2509.313998][T31185] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2509.322048][T31185] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2509.330029][T31185] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000011 [ 2509.339711][T31185] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) 17:13:39 executing program 4 (fault-call:6 fault-nth:18): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2509.432423][T31200] FAULT_INJECTION: forcing a failure. [ 2509.432423][T31200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2509.447848][T31200] CPU: 0 PID: 31200 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2509.458158][T31200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.468285][T31200] Call Trace: [ 2509.472424][T31200] dump_stack+0x14a/0x1ce [ 2509.476735][T31200] ? devkmsg_release+0x11c/0x11c [ 2509.481827][T31200] ? show_regs_print_info+0x12/0x12 [ 2509.487029][T31200] ? __kasan_kmalloc+0x189/0x1c0 [ 2509.493984][T31200] ? kasan_alloc_pages+0x4a/0x60 [ 2509.499126][T31200] should_fail+0x6fb/0x860 [ 2509.503548][T31200] ? setup_fault_attr+0x3d0/0x3d0 [ 2509.508558][T31200] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2509.514033][T31200] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2509.519556][T31200] ? arch_stack_walk+0xd8/0x120 [ 2509.524382][T31200] ? kvmalloc_node+0xc2/0x120 [ 2509.529130][T31200] push_pipe+0x385/0x740 [ 2509.533348][T31200] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2509.538922][T31200] ? iov_iter_get_pages+0xd80/0xd80 [ 2509.544106][T31200] default_file_splice_read+0x210/0x980 [ 2509.549633][T31200] ? kcalloc+0x32/0x60 [ 2509.553675][T31200] ? alloc_pipe_info+0x1b9/0x3a0 [ 2509.558689][T31200] ? do_sendfile+0x8d6/0x1100 [ 2509.563348][T31200] ? __x64_sys_sendfile64+0x1d4/0x230 [ 2509.568702][T31200] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.573360][T31200] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2509.580098][T31200] ? selinux_file_permission+0x2d0/0x520 [ 2509.585726][T31200] ? security_file_permission+0x1e9/0x300 [ 2509.591421][T31200] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.596080][T31200] splice_direct_to_actor+0x3cf/0xb00 [ 2509.601437][T31200] ? do_splice_direct+0x3e0/0x3e0 [ 2509.606445][T31200] ? pipe_to_sendpage+0x300/0x300 [ 2509.611454][T31200] ? security_file_permission+0x128/0x300 [ 2509.617165][T31200] do_splice_direct+0x28b/0x3e0 [ 2509.621995][T31200] ? splice_direct_to_actor+0xb00/0xb00 [ 2509.627523][T31200] ? avc_policy_seqno+0x17/0x70 [ 2509.632361][T31200] ? security_file_permission+0x128/0x300 [ 2509.638149][T31200] do_sendfile+0x8d6/0x1100 [ 2509.642648][T31200] ? compat_writev+0x3d0/0x3d0 [ 2509.648790][T31200] ? __x64_sys_sendfile64+0x1bb/0x230 [ 2509.654140][T31200] __x64_sys_sendfile64+0x1d4/0x230 [ 2509.659315][T31200] ? __ia32_sys_sendfile+0x250/0x250 [ 2509.664584][T31200] do_syscall_64+0xcb/0x150 [ 2509.669083][T31200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2509.674962][T31200] RIP: 0033:0x45ce69 [ 2509.678827][T31200] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2509.698495][T31200] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2509.706894][T31200] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2509.714869][T31200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2509.723101][T31200] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2509.731157][T31200] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000012 [ 2509.739723][T31200] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:40 executing program 4 (fault-call:6 fault-nth:19): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2509.800266][T31202] FAULT_INJECTION: forcing a failure. [ 2509.800266][T31202] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.813144][T31202] CPU: 0 PID: 31202 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2509.823280][T31202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.833705][T31202] Call Trace: [ 2509.837334][T31202] dump_stack+0x14a/0x1ce [ 2509.841827][T31202] ? devkmsg_release+0x11c/0x11c 17:13:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2509.847218][T31202] ? show_regs_print_info+0x12/0x12 [ 2509.852856][T31202] ? stack_trace_save+0x123/0x1f0 [ 2509.857880][T31202] ? stack_trace_snprint+0x150/0x150 [ 2509.863153][T31202] ? memset+0x1f/0x40 [ 2509.867120][T31202] should_fail+0x6fb/0x860 [ 2509.871537][T31202] ? setup_fault_attr+0x3d0/0x3d0 [ 2509.876627][T31202] ? should_fail_alloc_page+0x50/0x50 [ 2509.882001][T31202] ? __kasan_kmalloc+0x189/0x1c0 [ 2509.886948][T31202] ? kasan_alloc_pages+0x4a/0x60 [ 2509.891895][T31202] ? kmalloc_array+0x2b/0x50 [ 2509.896473][T31202] should_failslab+0x5/0x20 [ 2509.900968][T31202] __kmalloc+0x5f/0x2d0 [ 2509.905381][T31202] kmalloc_array+0x2b/0x50 [ 2509.909797][T31202] rw_copy_check_uvector+0x8a/0x310 [ 2509.915000][T31202] import_iovec+0x113/0x380 [ 2509.919511][T31202] ? dup_iter+0x110/0x110 [ 2509.923834][T31202] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2509.929462][T31202] vfs_readv+0x123/0x1e0 [ 2509.933697][T31202] ? do_iter_write+0x570/0x570 [ 2509.938465][T31202] ? iov_iter_get_pages+0xd80/0xd80 [ 2509.943680][T31202] default_file_splice_read+0x639/0x980 17:13:40 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$FICLONE(r1, 0x40049409, r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xff01) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2d, 0x0, "bb29b3c332f779e6db8d49f08b1504eea0adb2369b9a5c12ea515f3cf0a25ec4ad776de6951b3e8cf1eb929f7783c2c71ff5297b91421117eec3c8ab702cab90a569798bf038628dc015f352e12549d9"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a925, 0x10, 0x80ffff, 0xffffffffffffff9c}) fcntl$getflags(r5, 0x1) [ 2509.949222][T31202] ? kcalloc+0x32/0x60 [ 2509.953291][T31202] ? alloc_pipe_info+0x1b9/0x3a0 [ 2509.958234][T31202] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.962915][T31202] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2509.969679][T31202] ? selinux_file_permission+0x2d0/0x520 [ 2509.975766][T31202] ? security_file_permission+0x1e9/0x300 [ 2509.981842][T31202] ? __ia32_sys_tee+0xa0/0xa0 [ 2509.986788][T31202] splice_direct_to_actor+0x3cf/0xb00 [ 2509.992179][T31202] ? do_splice_direct+0x3e0/0x3e0 [ 2509.997210][T31202] ? pipe_to_sendpage+0x300/0x300 [ 2510.002409][T31202] ? security_file_permission+0x128/0x300 [ 2510.008220][T31202] do_splice_direct+0x28b/0x3e0 [ 2510.013076][T31202] ? splice_direct_to_actor+0xb00/0xb00 [ 2510.018644][T31202] ? avc_policy_seqno+0x17/0x70 [ 2510.023505][T31202] ? security_file_permission+0x128/0x300 [ 2510.029221][T31202] do_sendfile+0x8d6/0x1100 [ 2510.033726][T31202] ? compat_writev+0x3d0/0x3d0 [ 2510.038487][T31202] ? vfs_write+0x427/0x4f0 [ 2510.042941][T31202] __x64_sys_sendfile64+0x1d4/0x230 [ 2510.048137][T31202] ? __ia32_sys_sendfile+0x250/0x250 [ 2510.054285][T31202] do_syscall_64+0xcb/0x150 [ 2510.059144][T31202] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2510.065053][T31202] RIP: 0033:0x45ce69 [ 2510.068948][T31202] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2510.089017][T31202] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 17:13:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0xff, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2510.097692][T31202] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2510.105780][T31202] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2510.114185][T31202] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.123573][T31202] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000013 [ 2510.131806][T31202] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:40 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) 17:13:40 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$UHID_CREATE(r7, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000003c0)=""/197, 0xc5, 0x8, 0x3, 0x20, 0x6, 0x2}}, 0x120) 17:13:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:40 executing program 4 (fault-call:6 fault-nth:20): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) 17:13:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2510.303058][T31229] FAULT_INJECTION: forcing a failure. [ 2510.303058][T31229] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.349443][T31229] CPU: 0 PID: 31229 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2510.360013][T31229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.370350][T31229] Call Trace: [ 2510.373646][T31229] dump_stack+0x14a/0x1ce [ 2510.377975][T31229] ? devkmsg_release+0x11c/0x11c [ 2510.382912][T31229] ? show_regs_print_info+0x12/0x12 [ 2510.388459][T31229] ? __kasan_kmalloc+0x189/0x1c0 [ 2510.393401][T31229] should_fail+0x6fb/0x860 [ 2510.398299][T31229] ? setup_fault_attr+0x3d0/0x3d0 [ 2510.403683][T31229] ? kvmalloc_node+0xc2/0x120 [ 2510.408454][T31229] should_failslab+0x5/0x20 [ 2510.413043][T31229] __kmalloc+0x5f/0x2d0 [ 2510.417285][T31229] kvmalloc_node+0xc2/0x120 [ 2510.421784][T31229] seq_read+0x217/0xd30 [ 2510.426029][T31229] ? memset+0x1f/0x40 [ 2510.430006][T31229] ? seq_open+0x160/0x160 [ 2510.434335][T31229] proc_reg_read+0x227/0x350 [ 2510.439030][T31229] ? proc_reg_llseek+0x330/0x330 [ 2510.444050][T31229] ? security_file_permission+0x1e9/0x300 [ 2510.449862][T31229] do_iter_read+0x43b/0x550 [ 2510.455151][T31229] vfs_readv+0x15a/0x1e0 [ 2510.459496][T31229] ? do_iter_write+0x570/0x570 [ 2510.464350][T31229] ? iov_iter_get_pages+0xd80/0xd80 [ 2510.469552][T31229] default_file_splice_read+0x639/0x980 [ 2510.475128][T31229] ? kcalloc+0x32/0x60 [ 2510.479282][T31229] ? alloc_pipe_info+0x1b9/0x3a0 [ 2510.484214][T31229] ? __ia32_sys_tee+0xa0/0xa0 [ 2510.489067][T31229] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2510.496869][T31229] ? selinux_file_permission+0x2d0/0x520 [ 2510.502505][T31229] ? security_file_permission+0x1e9/0x300 [ 2510.508567][T31229] ? __ia32_sys_tee+0xa0/0xa0 [ 2510.513257][T31229] splice_direct_to_actor+0x3cf/0xb00 [ 2510.519150][T31229] ? do_splice_direct+0x3e0/0x3e0 [ 2510.524175][T31229] ? pipe_to_sendpage+0x300/0x300 [ 2510.529201][T31229] ? security_file_permission+0x128/0x300 [ 2510.535006][T31229] do_splice_direct+0x28b/0x3e0 [ 2510.539941][T31229] ? splice_direct_to_actor+0xb00/0xb00 [ 2510.545664][T31229] ? avc_policy_seqno+0x17/0x70 [ 2510.550534][T31229] ? security_file_permission+0x128/0x300 [ 2510.557814][T31229] do_sendfile+0x8d6/0x1100 [ 2510.562384][T31229] ? compat_writev+0x3d0/0x3d0 [ 2510.567819][T31229] ? vfs_write+0x427/0x4f0 [ 2510.572321][T31229] __x64_sys_sendfile64+0x1d4/0x230 [ 2510.577492][T31229] ? __ia32_sys_sendfile+0x250/0x250 [ 2510.582749][T31229] do_syscall_64+0xcb/0x150 [ 2510.587227][T31229] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2510.593090][T31229] RIP: 0033:0x45ce69 [ 2510.597479][T31229] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2510.624780][T31229] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2510.633892][T31229] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2510.641870][T31229] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) 17:13:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) 17:13:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) [ 2510.649814][T31229] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.657965][T31229] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000014 [ 2510.665919][T31229] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:41 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x20604, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) 17:13:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:41 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) sendmmsg(r1, 0x0, 0x0, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:41 executing program 4 (fault-call:6 fault-nth:21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:41 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r0, 0x0, r1, 0x0, 0xe8ba, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6b0100000000000000649fced16db574dd5a49d3145698a6e6995b025f1e868d251f24", @ANYRES16=r2, @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300)=""/164, &(0x7f00000003c0)=0xa4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xff, 0x6, 0x40, @private0, @mcast1, 0x80, 0x700, 0x2, 0x5}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="04b2cc50", @ANYRES16=r2, @ANYBLOB="000126bd7000ffdbdf250300000005000500060000006c00018008000300010000001400020076657468305f746f5f626f6e6400000014000200697036746e6c300000000000000000001400020076657468315f766c616e000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000005000200a00000000500020001000000"], 0x98}, 0x1, 0x0, 0x0, 0x40090}, 0x40000) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r8}, {r9, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2510.882268][T31258] FAULT_INJECTION: forcing a failure. [ 2510.882268][T31258] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.902490][T31258] CPU: 1 PID: 31258 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2510.912852][T31258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.923510][T31258] Call Trace: [ 2510.926832][T31258] dump_stack+0x14a/0x1ce [ 2510.931166][T31258] ? devkmsg_release+0x11c/0x11c [ 2510.936102][T31258] ? show_regs_print_info+0x12/0x12 [ 2510.941298][T31258] ? ldsem_down_read+0xb7/0x920 [ 2510.946146][T31258] ? stack_trace_snprint+0x150/0x150 [ 2510.951426][T31258] should_fail+0x6fb/0x860 [ 2510.955849][T31258] ? setup_fault_attr+0x3d0/0x3d0 [ 2510.961737][T31258] ? __kasan_slab_free+0x1f2/0x230 [ 2510.966848][T31258] ? slab_free_freelist_hook+0xd0/0x150 [ 2510.972387][T31258] ? kfree+0x12b/0x600 [ 2510.976439][T31258] ? default_file_splice_read+0x81e/0x980 17:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2510.982149][T31258] ? tty_write+0x2eb/0x870 [ 2510.986566][T31258] should_failslab+0x5/0x20 [ 2510.991065][T31258] __kmalloc+0x5f/0x2d0 [ 2510.995228][T31258] tty_write+0x2eb/0x870 [ 2510.999559][T31258] ? n_tty_read+0x1cd0/0x1cd0 [ 2511.004408][T31258] ? redirected_tty_write+0xb0/0xb0 [ 2511.010114][T31258] __vfs_write+0xfa/0x720 [ 2511.014599][T31258] ? __kernel_write+0x340/0x340 [ 2511.019421][T31258] ? drain_local_pages_wq+0x50/0x50 [ 2511.024771][T31258] ? __page_cache_release+0x41a/0x470 [ 2511.030216][T31258] ? iov_iter_advance+0xc5d/0xee0 [ 2511.035956][T31258] __kernel_write+0x12c/0x340 [ 2511.040617][T31258] write_pipe_buf+0x148/0x1d0 [ 2511.045443][T31258] ? splice_from_pipe_next+0x9c/0x440 [ 2511.050888][T31258] ? default_file_splice_write+0x250/0x250 [ 2511.056926][T31258] ? __ia32_sys_tee+0xa0/0xa0 [ 2511.061660][T31258] __splice_from_pipe+0x2d3/0x870 [ 2511.067008][T31258] ? default_file_splice_write+0x250/0x250 [ 2511.072788][T31258] default_file_splice_write+0x18b/0x250 [ 2511.078391][T31258] ? default_file_splice_read+0x980/0x980 [ 2511.084179][T31258] ? direct_splice_actor+0x25/0x120 [ 2511.089370][T31258] splice_direct_to_actor+0x496/0xb00 [ 2511.095022][T31258] ? do_splice_direct+0x3e0/0x3e0 [ 2511.100203][T31258] ? pipe_to_sendpage+0x300/0x300 [ 2511.106054][T31258] ? security_file_permission+0x128/0x300 [ 2511.112213][T31258] do_splice_direct+0x28b/0x3e0 [ 2511.117264][T31258] ? splice_direct_to_actor+0xb00/0xb00 [ 2511.122796][T31258] ? avc_policy_seqno+0x17/0x70 [ 2511.127873][T31258] ? security_file_permission+0x128/0x300 [ 2511.136803][T31258] do_sendfile+0x8d6/0x1100 [ 2511.141655][T31258] ? compat_writev+0x3d0/0x3d0 [ 2511.147032][T31258] ? vfs_write+0x427/0x4f0 [ 2511.151611][T31258] __x64_sys_sendfile64+0x1d4/0x230 [ 2511.158354][T31258] ? __ia32_sys_sendfile+0x250/0x250 [ 2511.163628][T31258] do_syscall_64+0xcb/0x150 [ 2511.168753][T31258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2511.174882][T31258] RIP: 0033:0x45ce69 [ 2511.179035][T31258] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2511.199686][T31258] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2511.209422][T31258] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2511.217462][T31258] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 17:13:41 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x711482, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2b, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2511.225668][T31258] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.235021][T31258] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000015 [ 2511.243179][T31258] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:41 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:41 executing program 4 (fault-call:6 fault-nth:22): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2511.351576][T31291] FAULT_INJECTION: forcing a failure. [ 2511.351576][T31291] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.376124][T31291] CPU: 0 PID: 31291 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2511.386370][T31291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.396940][T31291] Call Trace: [ 2511.400877][T31291] dump_stack+0x14a/0x1ce [ 2511.406075][T31291] ? devkmsg_release+0x11c/0x11c [ 2511.414762][T31291] ? show_regs_print_info+0x12/0x12 [ 2511.422211][T31291] ? ldsem_up_read+0xcd/0x120 [ 2511.427054][T31291] should_fail+0x6fb/0x860 [ 2511.432420][T31291] ? setup_fault_attr+0x3d0/0x3d0 [ 2511.438041][T31291] ? memset+0x1f/0x40 [ 2511.442194][T31291] ? fsnotify+0x13a0/0x1460 [ 2511.446698][T31291] ? kvmalloc_node+0xc2/0x120 [ 2511.451368][T31291] should_failslab+0x5/0x20 [ 2511.455931][T31291] __kmalloc+0x5f/0x2d0 [ 2511.460467][T31291] kvmalloc_node+0xc2/0x120 [ 2511.472845][T31291] iov_iter_get_pages_alloc+0xad0/0xff0 [ 2511.478923][T31291] ? iov_iter_advance+0xc5d/0xee0 [ 2511.485474][T31291] ? iov_iter_get_pages+0xd80/0xd80 [ 2511.491430][T31291] default_file_splice_read+0x210/0x980 [ 2511.498004][T31291] ? __ia32_sys_tee+0xa0/0xa0 [ 2511.503667][T31291] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2511.513022][T31291] ? selinux_file_permission+0x2d0/0x520 [ 2511.519350][T31291] ? security_file_permission+0x1e9/0x300 [ 2511.525206][T31291] ? __ia32_sys_tee+0xa0/0xa0 [ 2511.531164][T31291] splice_direct_to_actor+0x3cf/0xb00 [ 2511.536937][T31291] ? do_splice_direct+0x3e0/0x3e0 [ 2511.542400][T31291] ? pipe_to_sendpage+0x300/0x300 [ 2511.550254][T31291] ? security_file_permission+0x128/0x300 [ 2511.557126][T31291] do_splice_direct+0x28b/0x3e0 [ 2511.562380][T31291] ? splice_direct_to_actor+0xb00/0xb00 [ 2511.569076][T31291] ? avc_policy_seqno+0x17/0x70 [ 2511.574684][T31291] ? security_file_permission+0x128/0x300 [ 2511.584042][T31291] do_sendfile+0x8d6/0x1100 [ 2511.588773][T31291] ? compat_writev+0x3d0/0x3d0 [ 2511.594133][T31291] ? vfs_write+0x427/0x4f0 [ 2511.599875][T31291] __x64_sys_sendfile64+0x1d4/0x230 [ 2511.605301][T31291] ? __ia32_sys_sendfile+0x250/0x250 [ 2511.611405][T31291] do_syscall_64+0xcb/0x150 [ 2511.616567][T31291] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2511.622890][T31291] RIP: 0033:0x45ce69 [ 2511.629571][T31291] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2511.651367][T31291] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2511.661743][T31291] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2511.671047][T31291] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2511.683027][T31291] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.691463][T31291] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000016 17:13:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2511.700924][T31291] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:42 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xca000, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x20a923, 0x2d, 0x80ffff, 0xffffffffffffff9c}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb0043e396540d00000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r9, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000880}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x21c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc00b3cfa9eb6320a}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x20000005) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x80, 0x7, 0x5, 0x6}, 'syz1\x00', 0x51}) 17:13:42 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r1 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r3) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x6, 0x9}) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="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", 0xfe) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) 17:13:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:42 executing program 4 (fault-call:6 fault-nth:23): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3c, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2511.903614][T31313] FAULT_INJECTION: forcing a failure. [ 2511.903614][T31313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2511.929295][T31313] CPU: 1 PID: 31313 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 17:13:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'ip6erspan0\x00', 0x600}) [ 2511.943163][T31313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.955255][T31313] Call Trace: [ 2511.960775][T31313] dump_stack+0x14a/0x1ce [ 2511.970123][T31313] ? devkmsg_release+0x11c/0x11c [ 2511.976514][T31313] ? show_regs_print_info+0x12/0x12 [ 2511.984774][T31313] ? __kasan_kmalloc+0x189/0x1c0 [ 2511.992486][T31313] ? __kasan_kmalloc+0x12c/0x1c0 [ 2512.000023][T31313] ? __kmalloc+0xf7/0x2d0 [ 2512.004987][T31313] ? kvmalloc_node+0xc2/0x120 [ 2512.012892][T31313] should_fail+0x6fb/0x860 [ 2512.021153][T31313] ? setup_fault_attr+0x3d0/0x3d0 [ 2512.028254][T31313] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2512.038627][T31313] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2512.049258][T31313] ? fsnotify+0x13a0/0x1460 [ 2512.056522][T31313] ? kvmalloc_node+0xc2/0x120 [ 2512.063987][T31313] push_pipe+0x385/0x740 [ 2512.070434][T31313] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2512.080748][T31313] ? iov_iter_get_pages+0xd80/0xd80 [ 2512.089015][T31313] default_file_splice_read+0x210/0x980 [ 2512.098574][T31313] ? __ia32_sys_tee+0xa0/0xa0 [ 2512.107541][T31313] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2512.118509][T31313] ? selinux_file_permission+0x2d0/0x520 [ 2512.125082][T31313] ? security_file_permission+0x1e9/0x300 [ 2512.131372][T31313] ? __ia32_sys_tee+0xa0/0xa0 [ 2512.136067][T31313] splice_direct_to_actor+0x3cf/0xb00 [ 2512.141463][T31313] ? do_splice_direct+0x3e0/0x3e0 [ 2512.146739][T31313] ? pipe_to_sendpage+0x300/0x300 [ 2512.152108][T31313] ? security_file_permission+0x128/0x300 [ 2512.158366][T31313] do_splice_direct+0x28b/0x3e0 [ 2512.163983][T31313] ? splice_direct_to_actor+0xb00/0xb00 [ 2512.169508][T31313] ? avc_policy_seqno+0x17/0x70 [ 2512.174371][T31313] ? security_file_permission+0x128/0x300 [ 2512.180615][T31313] do_sendfile+0x8d6/0x1100 [ 2512.185283][T31313] ? compat_writev+0x3d0/0x3d0 [ 2512.190025][T31313] ? vfs_write+0x427/0x4f0 [ 2512.194503][T31313] __x64_sys_sendfile64+0x1d4/0x230 [ 2512.199721][T31313] ? __ia32_sys_sendfile+0x250/0x250 [ 2512.205028][T31313] do_syscall_64+0xcb/0x150 [ 2512.209514][T31313] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2512.217472][T31313] RIP: 0033:0x45ce69 [ 2512.221883][T31313] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2512.242361][T31313] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2512.250957][T31313] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2512.259107][T31313] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2512.267552][T31313] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.275508][T31313] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000017 [ 2512.283467][T31313] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) tgkill(r3, r4, 0x39) 17:13:43 executing program 4 (fault-call:6 fault-nth:24): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:43 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x8000, 0x3b, 0x80ffff, r0}) 17:13:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x48806, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0xe0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2512.718905][T31357] FAULT_INJECTION: forcing a failure. [ 2512.718905][T31357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2512.755891][T31357] CPU: 1 PID: 31357 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 17:13:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2512.766238][T31357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.776951][T31357] Call Trace: [ 2512.781482][T31357] dump_stack+0x14a/0x1ce [ 2512.785818][T31357] ? devkmsg_release+0x11c/0x11c [ 2512.790850][T31357] ? show_regs_print_info+0x12/0x12 [ 2512.796054][T31357] ? __kasan_kmalloc+0x189/0x1c0 [ 2512.800992][T31357] ? kasan_alloc_pages+0x4a/0x60 [ 2512.806019][T31357] should_fail+0x6fb/0x860 [ 2512.810707][T31357] ? setup_fault_attr+0x3d0/0x3d0 [ 2512.815741][T31357] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2512.821195][T31357] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2512.826717][T31357] ? fsnotify+0x13a0/0x1460 [ 2512.831193][T31357] ? kvmalloc_node+0xc2/0x120 [ 2512.835889][T31357] push_pipe+0x385/0x740 [ 2512.840104][T31357] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2512.845624][T31357] ? iov_iter_get_pages+0xd80/0xd80 [ 2512.850800][T31357] default_file_splice_read+0x210/0x980 [ 2512.856319][T31357] ? __ia32_sys_tee+0xa0/0xa0 [ 2512.861140][T31357] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2512.867945][T31357] ? selinux_file_permission+0x2d0/0x520 [ 2512.873765][T31357] ? security_file_permission+0x1e9/0x300 [ 2512.879591][T31357] ? __ia32_sys_tee+0xa0/0xa0 [ 2512.884337][T31357] splice_direct_to_actor+0x3cf/0xb00 [ 2512.889689][T31357] ? do_splice_direct+0x3e0/0x3e0 [ 2512.894698][T31357] ? pipe_to_sendpage+0x300/0x300 [ 2512.899729][T31357] ? security_file_permission+0x128/0x300 [ 2512.905435][T31357] do_splice_direct+0x28b/0x3e0 [ 2512.910259][T31357] ? splice_direct_to_actor+0xb00/0xb00 [ 2512.915779][T31357] ? avc_policy_seqno+0x17/0x70 [ 2512.920608][T31357] ? security_file_permission+0x128/0x300 [ 2512.926576][T31357] do_sendfile+0x8d6/0x1100 [ 2512.931249][T31357] ? compat_writev+0x3d0/0x3d0 [ 2512.936013][T31357] ? vfs_write+0x427/0x4f0 [ 2512.940504][T31357] __x64_sys_sendfile64+0x1d4/0x230 [ 2512.945689][T31357] ? __ia32_sys_sendfile+0x250/0x250 [ 2512.950951][T31357] do_syscall_64+0xcb/0x150 [ 2512.955439][T31357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2512.963037][T31357] RIP: 0033:0x45ce69 [ 2512.967260][T31357] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2512.987112][T31357] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2512.995600][T31357] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2513.003686][T31357] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2513.012776][T31357] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.020994][T31357] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000018 [ 2513.029129][T31357] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:43 executing program 4 (fault-call:6 fault-nth:25): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:43 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r3, 0x0, r4, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r7, 0x10001, 0x7, 0x7901}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r9}, {r10, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xe, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0xe0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:43 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) 17:13:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x20a92a, 0x2d, 0x0, r4}) 17:13:43 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:43 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:43 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf, 0x80ffff}) [ 2513.176199][T31390] FAULT_INJECTION: forcing a failure. [ 2513.176199][T31390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2513.193534][T31390] CPU: 0 PID: 31390 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2513.203707][T31390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.214186][T31390] Call Trace: [ 2513.217455][T31390] dump_stack+0x14a/0x1ce [ 2513.221768][T31390] ? devkmsg_release+0x11c/0x11c [ 2513.226691][T31390] ? show_regs_print_info+0x12/0x12 [ 2513.231871][T31390] ? __kasan_kmalloc+0x189/0x1c0 [ 2513.236923][T31390] ? kasan_alloc_pages+0x4a/0x60 [ 2513.242431][T31390] should_fail+0x6fb/0x860 [ 2513.248052][T31390] ? setup_fault_attr+0x3d0/0x3d0 [ 2513.253415][T31390] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2513.258860][T31390] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2513.266694][T31390] ? fsnotify+0x13a0/0x1460 [ 2513.271234][T31390] ? kvmalloc_node+0xc2/0x120 [ 2513.276909][T31390] push_pipe+0x385/0x740 [ 2513.281135][T31390] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2513.286674][T31390] ? iov_iter_get_pages+0xd80/0xd80 [ 2513.291967][T31390] default_file_splice_read+0x210/0x980 [ 2513.297678][T31390] ? __ia32_sys_tee+0xa0/0xa0 [ 2513.302634][T31390] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2513.309655][T31390] ? selinux_file_permission+0x2d0/0x520 [ 2513.315609][T31390] ? security_file_permission+0x1e9/0x300 [ 2513.321459][T31390] ? __ia32_sys_tee+0xa0/0xa0 [ 2513.326149][T31390] splice_direct_to_actor+0x3cf/0xb00 [ 2513.331518][T31390] ? do_splice_direct+0x3e0/0x3e0 [ 2513.336691][T31390] ? pipe_to_sendpage+0x300/0x300 [ 2513.342225][T31390] ? security_file_permission+0x128/0x300 [ 2513.347925][T31390] do_splice_direct+0x28b/0x3e0 [ 2513.353139][T31390] ? splice_direct_to_actor+0xb00/0xb00 [ 2513.358857][T31390] ? avc_policy_seqno+0x17/0x70 [ 2513.363697][T31390] ? security_file_permission+0x128/0x300 [ 2513.369398][T31390] do_sendfile+0x8d6/0x1100 [ 2513.373877][T31390] ? compat_writev+0x3d0/0x3d0 [ 2513.378972][T31390] ? vfs_write+0x427/0x4f0 [ 2513.383463][T31390] __x64_sys_sendfile64+0x1d4/0x230 [ 2513.388771][T31390] ? __ia32_sys_sendfile+0x250/0x250 [ 2513.394147][T31390] do_syscall_64+0xcb/0x150 [ 2513.398630][T31390] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2513.404670][T31390] RIP: 0033:0x45ce69 [ 2513.408543][T31390] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2513.428146][T31390] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2513.436671][T31390] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2513.444886][T31390] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2513.452848][T31390] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.460817][T31390] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000019 [ 2513.468862][T31390] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:44 executing program 4 (fault-call:6 fault-nth:26): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2513.543253][T31414] FAULT_INJECTION: forcing a failure. [ 2513.543253][T31414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2513.557031][T31414] CPU: 1 PID: 31414 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2513.567331][T31414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.577374][T31414] Call Trace: [ 2513.580912][T31414] dump_stack+0x14a/0x1ce [ 2513.585218][T31414] ? devkmsg_release+0x11c/0x11c [ 2513.590163][T31414] ? show_regs_print_info+0x12/0x12 [ 2513.595351][T31414] ? __kasan_kmalloc+0x189/0x1c0 [ 2513.600355][T31414] ? kasan_alloc_pages+0x4a/0x60 [ 2513.605367][T31414] should_fail+0x6fb/0x860 [ 2513.609766][T31414] ? setup_fault_attr+0x3d0/0x3d0 [ 2513.614768][T31414] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2513.620425][T31414] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2513.626304][T31414] ? fsnotify+0x13a0/0x1460 [ 2513.630834][T31414] ? kvmalloc_node+0xc2/0x120 [ 2513.635501][T31414] push_pipe+0x385/0x740 [ 2513.639723][T31414] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2513.645252][T31414] ? iov_iter_get_pages+0xd80/0xd80 [ 2513.651073][T31414] default_file_splice_read+0x210/0x980 [ 2513.656711][T31414] ? __ia32_sys_tee+0xa0/0xa0 [ 2513.661643][T31414] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2513.669282][T31414] ? selinux_file_permission+0x2d0/0x520 [ 2513.675003][T31414] ? security_file_permission+0x1e9/0x300 [ 2513.680838][T31414] ? __ia32_sys_tee+0xa0/0xa0 [ 2513.685854][T31414] splice_direct_to_actor+0x3cf/0xb00 [ 2513.691330][T31414] ? do_splice_direct+0x3e0/0x3e0 [ 2513.696735][T31414] ? pipe_to_sendpage+0x300/0x300 [ 2513.701749][T31414] ? security_file_permission+0x128/0x300 [ 2513.707466][T31414] do_splice_direct+0x28b/0x3e0 [ 2513.713035][T31414] ? splice_direct_to_actor+0xb00/0xb00 [ 2513.718671][T31414] ? avc_policy_seqno+0x17/0x70 [ 2513.723506][T31414] ? security_file_permission+0x128/0x300 [ 2513.729212][T31414] do_sendfile+0x8d6/0x1100 [ 2513.733713][T31414] ? compat_writev+0x3d0/0x3d0 [ 2513.738483][T31414] ? vfs_write+0x427/0x4f0 [ 2513.742888][T31414] __x64_sys_sendfile64+0x1d4/0x230 [ 2513.748100][T31414] ? __ia32_sys_sendfile+0x250/0x250 [ 2513.753377][T31414] do_syscall_64+0xcb/0x150 [ 2513.757871][T31414] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2513.763919][T31414] RIP: 0033:0x45ce69 [ 2513.767890][T31414] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2513.787735][T31414] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2513.796627][T31414] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2513.804714][T31414] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2513.812758][T31414] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.820707][T31414] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001a [ 2513.828842][T31414] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0xee7, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x28, 0x80ffff, 0xffffffffffffff9c}) 17:13:44 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:44 executing program 4 (fault-call:6 fault-nth:27): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:44 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r6, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r9, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000080) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r10}, {r11, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:44 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20a923, 0x2d, 0x1, 0xffffffffffffff9c}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) r3 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000000c0)="0dd76631f3365d9968964d5f0947fada9e4a00de1dfe2a44bd122499f02343a7604a02fd4b71a9dc04347d18c05a6dcce0efffc2da439e3ef3fff522130b75e07660332002d324055c96263e611bd7104300", 0x52) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r4, 0x0, r5, 0x0, 0xe8ba, 0x0) getpeername$tipc(r4, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10) 17:13:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2513.992431][T31423] FAULT_INJECTION: forcing a failure. [ 2513.992431][T31423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2514.017239][T31423] CPU: 1 PID: 31423 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2514.027571][T31423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.037634][T31423] Call Trace: 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2514.040923][T31423] dump_stack+0x14a/0x1ce [ 2514.045259][T31423] ? devkmsg_release+0x11c/0x11c [ 2514.050208][T31423] ? show_regs_print_info+0x12/0x12 [ 2514.055407][T31423] ? __kasan_kmalloc+0x189/0x1c0 [ 2514.060363][T31423] ? kasan_alloc_pages+0x4a/0x60 [ 2514.065298][T31423] should_fail+0x6fb/0x860 [ 2514.069929][T31423] ? setup_fault_attr+0x3d0/0x3d0 [ 2514.074965][T31423] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2514.080356][T31423] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2514.085936][T31423] ? fsnotify+0x13a0/0x1460 [ 2514.090441][T31423] ? kvmalloc_node+0xc2/0x120 [ 2514.095478][T31423] push_pipe+0x385/0x740 [ 2514.099741][T31423] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2514.105598][T31423] ? iov_iter_get_pages+0xd80/0xd80 [ 2514.110984][T31423] default_file_splice_read+0x210/0x980 [ 2514.116536][T31423] ? __ia32_sys_tee+0xa0/0xa0 [ 2514.121228][T31423] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2514.128470][T31423] ? selinux_file_permission+0x2d0/0x520 [ 2514.134747][T31423] ? security_file_permission+0x1e9/0x300 [ 2514.141349][T31423] ? __ia32_sys_tee+0xa0/0xa0 [ 2514.146066][T31423] splice_direct_to_actor+0x3cf/0xb00 [ 2514.151541][T31423] ? do_splice_direct+0x3e0/0x3e0 [ 2514.156677][T31423] ? pipe_to_sendpage+0x300/0x300 [ 2514.161690][T31423] ? security_file_permission+0x128/0x300 [ 2514.167425][T31423] do_splice_direct+0x28b/0x3e0 [ 2514.172258][T31423] ? splice_direct_to_actor+0xb00/0xb00 [ 2514.177782][T31423] ? avc_policy_seqno+0x17/0x70 [ 2514.182622][T31423] ? security_file_permission+0x128/0x300 [ 2514.188339][T31423] do_sendfile+0x8d6/0x1100 [ 2514.193053][T31423] ? compat_writev+0x3d0/0x3d0 [ 2514.198503][T31423] ? vfs_write+0x427/0x4f0 [ 2514.203166][T31423] __x64_sys_sendfile64+0x1d4/0x230 [ 2514.208716][T31423] ? __ia32_sys_sendfile+0x250/0x250 [ 2514.214517][T31423] do_syscall_64+0xcb/0x150 [ 2514.219013][T31423] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2514.224885][T31423] RIP: 0033:0x45ce69 [ 2514.228763][T31423] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2514.250149][T31423] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2514.266451][T31423] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2514.274582][T31423] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2514.282543][T31423] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:44 executing program 4 (fault-call:6 fault-nth:28): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2514.290528][T31423] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001b [ 2514.298482][T31423] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2514.339050][T31465] FAULT_INJECTION: forcing a failure. [ 2514.339050][T31465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2514.353242][T31465] CPU: 0 PID: 31465 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2514.363812][T31465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.373932][T31465] Call Trace: [ 2514.377243][T31465] dump_stack+0x14a/0x1ce [ 2514.383131][T31465] ? devkmsg_release+0x11c/0x11c [ 2514.388052][T31465] ? show_regs_print_info+0x12/0x12 [ 2514.393230][T31465] ? __kasan_kmalloc+0x189/0x1c0 [ 2514.398270][T31465] ? kasan_alloc_pages+0x4a/0x60 [ 2514.403191][T31465] should_fail+0x6fb/0x860 [ 2514.407604][T31465] ? setup_fault_attr+0x3d0/0x3d0 [ 2514.412882][T31465] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2514.418246][T31465] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2514.423774][T31465] ? kvmalloc_node+0xc2/0x120 [ 2514.428445][T31465] ? kvmalloc_node+0xc2/0x120 [ 2514.433221][T31465] push_pipe+0x385/0x740 [ 2514.437451][T31465] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2514.442993][T31465] ? iov_iter_get_pages+0xd80/0xd80 [ 2514.448362][T31465] default_file_splice_read+0x210/0x980 [ 2514.455399][T31465] ? __ia32_sys_tee+0xa0/0xa0 [ 2514.460185][T31465] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2514.466965][T31465] ? selinux_file_permission+0x2d0/0x520 [ 2514.472900][T31465] ? security_file_permission+0x1e9/0x300 [ 2514.479130][T31465] ? __ia32_sys_tee+0xa0/0xa0 [ 2514.484400][T31465] splice_direct_to_actor+0x3cf/0xb00 [ 2514.489840][T31465] ? do_splice_direct+0x3e0/0x3e0 [ 2514.494864][T31465] ? pipe_to_sendpage+0x300/0x300 [ 2514.499880][T31465] ? security_file_permission+0x128/0x300 [ 2514.505578][T31465] do_splice_direct+0x28b/0x3e0 [ 2514.511113][T31465] ? splice_direct_to_actor+0xb00/0xb00 [ 2514.516735][T31465] ? avc_policy_seqno+0x17/0x70 [ 2514.521571][T31465] ? security_file_permission+0x128/0x300 [ 2514.527307][T31465] do_sendfile+0x8d6/0x1100 [ 2514.531792][T31465] ? compat_writev+0x3d0/0x3d0 [ 2514.536562][T31465] ? vfs_write+0x427/0x4f0 [ 2514.541667][T31465] __x64_sys_sendfile64+0x1d4/0x230 [ 2514.547458][T31465] ? __ia32_sys_sendfile+0x250/0x250 [ 2514.552735][T31465] do_syscall_64+0xcb/0x150 [ 2514.557238][T31465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2514.563111][T31465] RIP: 0033:0x45ce69 [ 2514.566987][T31465] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3, 0x2480}, {r4, 0x100}], 0x2, 0x0, 0x0, 0x0) [ 2514.586659][T31465] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2514.595065][T31465] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2514.603013][T31465] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2514.610964][T31465] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2514.618921][T31465] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001c [ 2514.626876][T31465] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) 17:13:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socketpair(0x3, 0x1, 0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4890}, 0x4000010) r3 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r3, 0x406, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r8}, {r9, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:45 executing program 4 (fault-call:6 fault-nth:29): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda4634c07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55082e2a392a3177eea5de4f0fb4634740b8345056bd87bd6f5e273b5ba70300000000000000f761e76edee5cc4bbcc670210a344f46f5aeec5a2e0003c1ab609bfce7f47a1995de09d9642f08003c670ed22d23e5c764597592c3728cfc1d846f7dbc611956137163d63d84362455b3c251d2a4ecef671b68af487fb3befb436ac772aabf92c31ead1db3080442266afe96702fe68e510bdd01945bd0046df6ff8a05c758a4c6b19b2d4946d9d1580c1ed4fe8b081c03832e2a98a7970a4eb9ce994ed85feaf41a6ab018d6a2707d307f05ae437202eecb20d23e639b9dc79a7d63b08215c6b0c692e0f13768274b9d5a5e704de3923f31c015c97ce458f1bfe49b5aebf537812c9afe3c972345b846faeb92b782538ff80b0a7ccace447fb86a7d2fae1f28039c2f728317928f2aa9a1a3f1bb8f2cad9f4525d7f2bf103047afc68592752d2d342dc11183560505d570876b74859f57dff01193e593c54a926347c7764e497fff7288ecb941faa5b3f8ec15645d2c400d44fde95b1e3fd6f64c0b2262a65cf71b6db3c9451dfcf3a416cdc01ce3126d62bd2e907ddbf6f185c6948727aa7b34d18d4dbdf03f25ec6f", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4000010) [ 2514.870055][T31478] FAULT_INJECTION: forcing a failure. [ 2514.870055][T31478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2514.889964][T31478] CPU: 0 PID: 31478 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2514.900222][T31478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.910696][T31478] Call Trace: 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) 17:13:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r3, 0x0, r4, 0x0, 0xe8ba, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x40, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000200)=""/89) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xff01) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ppoll(&(0x7f0000000080)=[{r6, 0x48}, {r5, 0x1304}, {r7, 0xe352}, {r3, 0x10}], 0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2514.920523][T31478] dump_stack+0x14a/0x1ce [ 2514.924890][T31478] ? devkmsg_release+0x11c/0x11c [ 2514.929927][T31478] ? show_regs_print_info+0x12/0x12 [ 2514.935123][T31478] ? __kasan_kmalloc+0x189/0x1c0 [ 2514.940194][T31478] ? kasan_alloc_pages+0x4a/0x60 [ 2514.945420][T31478] should_fail+0x6fb/0x860 [ 2514.949840][T31478] ? setup_fault_attr+0x3d0/0x3d0 [ 2514.955046][T31478] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2514.960428][T31478] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2514.965975][T31478] ? fsnotify+0x13a0/0x1460 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0xf, 0x80ffff}) [ 2514.970500][T31478] ? kvmalloc_node+0xc2/0x120 [ 2514.975366][T31478] push_pipe+0x385/0x740 [ 2514.980970][T31478] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2514.986660][T31478] ? iov_iter_get_pages+0xd80/0xd80 [ 2514.991864][T31478] default_file_splice_read+0x210/0x980 [ 2514.997414][T31478] ? __ia32_sys_tee+0xa0/0xa0 [ 2515.002097][T31478] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2515.008867][T31478] ? selinux_file_permission+0x2d0/0x520 [ 2515.014514][T31478] ? security_file_permission+0x1e9/0x300 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) [ 2515.020235][T31478] ? __ia32_sys_tee+0xa0/0xa0 [ 2515.024914][T31478] splice_direct_to_actor+0x3cf/0xb00 [ 2515.030292][T31478] ? do_splice_direct+0x3e0/0x3e0 [ 2515.035319][T31478] ? pipe_to_sendpage+0x300/0x300 [ 2515.040397][T31478] ? security_file_permission+0x128/0x300 [ 2515.046115][T31478] do_splice_direct+0x28b/0x3e0 [ 2515.050963][T31478] ? splice_direct_to_actor+0xb00/0xb00 [ 2515.056680][T31478] ? avc_policy_seqno+0x17/0x70 [ 2515.061536][T31478] ? security_file_permission+0x128/0x300 [ 2515.067262][T31478] do_sendfile+0x8d6/0x1100 [ 2515.071795][T31478] ? compat_writev+0x3d0/0x3d0 [ 2515.076571][T31478] ? vfs_write+0x427/0x4f0 [ 2515.081014][T31478] __x64_sys_sendfile64+0x1d4/0x230 [ 2515.086237][T31478] ? __ia32_sys_sendfile+0x250/0x250 [ 2515.091660][T31478] do_syscall_64+0xcb/0x150 [ 2515.096181][T31478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2515.102077][T31478] RIP: 0033:0x45ce69 [ 2515.105972][T31478] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2515.125753][T31478] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2515.134248][T31478] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2515.142227][T31478] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2515.150459][T31478] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2515.158524][T31478] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001d 17:13:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) 17:13:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2515.166496][T31478] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:45 executing program 4 (fault-call:6 fault-nth:30): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff}) 17:13:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 2515.242690][T31524] FAULT_INJECTION: forcing a failure. [ 2515.242690][T31524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2515.281082][T31524] CPU: 1 PID: 31524 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2515.291355][T31524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.301438][T31524] Call Trace: [ 2515.304735][T31524] dump_stack+0x14a/0x1ce [ 2515.309115][T31524] ? devkmsg_release+0x11c/0x11c [ 2515.314052][T31524] ? show_regs_print_info+0x12/0x12 [ 2515.319248][T31524] ? __kasan_kmalloc+0x189/0x1c0 [ 2515.324189][T31524] ? kasan_alloc_pages+0x4a/0x60 [ 2515.329144][T31524] should_fail+0x6fb/0x860 [ 2515.333583][T31524] ? setup_fault_attr+0x3d0/0x3d0 [ 2515.338621][T31524] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2515.344001][T31524] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2515.349548][T31524] ? fsnotify+0x13a0/0x1460 [ 2515.354053][T31524] ? kvmalloc_node+0xc2/0x120 [ 2515.358738][T31524] push_pipe+0x385/0x740 [ 2515.362988][T31524] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2515.368542][T31524] ? iov_iter_get_pages+0xd80/0xd80 [ 2515.373751][T31524] default_file_splice_read+0x210/0x980 [ 2515.379391][T31524] ? __ia32_sys_tee+0xa0/0xa0 [ 2515.384080][T31524] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2515.390853][T31524] ? selinux_file_permission+0x2d0/0x520 [ 2515.396490][T31524] ? security_file_permission+0x1e9/0x300 [ 2515.402211][T31524] ? __ia32_sys_tee+0xa0/0xa0 [ 2515.406891][T31524] splice_direct_to_actor+0x3cf/0xb00 [ 2515.412265][T31524] ? do_splice_direct+0x3e0/0x3e0 [ 2515.417304][T31524] ? pipe_to_sendpage+0x300/0x300 [ 2515.422341][T31524] ? security_file_permission+0x128/0x300 [ 2515.428847][T31524] do_splice_direct+0x28b/0x3e0 [ 2515.433704][T31524] ? splice_direct_to_actor+0xb00/0xb00 [ 2515.439248][T31524] ? avc_policy_seqno+0x17/0x70 [ 2515.444102][T31524] ? security_file_permission+0x128/0x300 [ 2515.449821][T31524] do_sendfile+0x8d6/0x1100 [ 2515.454331][T31524] ? compat_writev+0x3d0/0x3d0 [ 2515.459110][T31524] ? vfs_write+0x427/0x4f0 [ 2515.463536][T31524] __x64_sys_sendfile64+0x1d4/0x230 [ 2515.468845][T31524] ? __ia32_sys_sendfile+0x250/0x250 [ 2515.474398][T31524] do_syscall_64+0xcb/0x150 [ 2515.479339][T31524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2515.485238][T31524] RIP: 0033:0x45ce69 [ 2515.489129][T31524] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2515.508727][T31524] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2515.517136][T31524] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2515.525108][T31524] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2515.533117][T31524] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2515.542145][T31524] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001e [ 2515.552338][T31524] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c 17:13:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x83) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00') sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e0000042dbd7000ffdbdf2500000000e174484ab348fc83a61840629cc4600d1d03e6e99f56531136bc757ab472fb341f779a29f5c19a9ba3237f000ce8d556f6164f0000000000000000df98f7ae822c0f112e488d666d3ca73a2869d2ba19ad620b96482a2b5d99a75da0a7a5003cbce17debb809b0b2e649faa4a3cf6236fb7f1e5f0f3ab00a2d3eee2207ea880312d6fabe45b846fd9d9c007e3a2e0259"], 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000040) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r7, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0x60}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 17:13:46 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:46 executing program 4 (fault-call:6 fault-nth:31): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2515.914455][T31543] FAULT_INJECTION: forcing a failure. [ 2515.914455][T31543] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.932781][T31544] FAULT_INJECTION: forcing a failure. [ 2515.932781][T31544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2515.948682][T31544] CPU: 0 PID: 31544 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2515.958846][T31544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.968900][T31544] Call Trace: [ 2515.972198][T31544] dump_stack+0x14a/0x1ce [ 2515.976526][T31544] ? devkmsg_release+0x11c/0x11c [ 2515.981476][T31544] ? show_regs_print_info+0x12/0x12 [ 2515.986866][T31544] ? __kasan_kmalloc+0x189/0x1c0 [ 2515.991812][T31544] ? kasan_alloc_pages+0x4a/0x60 [ 2515.998058][T31544] should_fail+0x6fb/0x860 [ 2516.002826][T31544] ? setup_fault_attr+0x3d0/0x3d0 [ 2516.007869][T31544] __alloc_pages_nodemask+0x1ee/0x7c0 17:13:46 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x0, r1) fsync(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022abd7000fcdbdf250800000008000800e000000114000600ff0200000000000000000000000000011409000000000000000000000000000000000000a60a80d44d706b312ac588541ebf558a82d3958f2cb74e28b28cfe2435898ec8bb030342dd4318da7543f0865af04bb839efa63af6625685ee978aaf62f6fdb03a1533cf4753ae"], 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x14004000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, 'y\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x4000080) [ 2516.013281][T31544] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2516.018827][T31544] ? fsnotify+0x13a0/0x1460 [ 2516.023340][T31544] ? kvmalloc_node+0xc2/0x120 [ 2516.028672][T31544] push_pipe+0x385/0x740 [ 2516.033003][T31544] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2516.038648][T31544] ? iov_iter_get_pages+0xd80/0xd80 [ 2516.043854][T31544] default_file_splice_read+0x210/0x980 [ 2516.050201][T31544] ? __ia32_sys_tee+0xa0/0xa0 [ 2516.055004][T31544] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 17:13:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2516.061761][T31544] ? selinux_file_permission+0x2d0/0x520 [ 2516.067394][T31544] ? security_file_permission+0x1e9/0x300 [ 2516.073104][T31544] ? __ia32_sys_tee+0xa0/0xa0 [ 2516.077772][T31544] splice_direct_to_actor+0x3cf/0xb00 [ 2516.083134][T31544] ? do_splice_direct+0x3e0/0x3e0 [ 2516.088243][T31544] ? pipe_to_sendpage+0x300/0x300 [ 2516.093250][T31544] ? security_file_permission+0x128/0x300 [ 2516.098949][T31544] do_splice_direct+0x28b/0x3e0 [ 2516.103782][T31544] ? splice_direct_to_actor+0xb00/0xb00 [ 2516.109311][T31544] ? avc_policy_seqno+0x17/0x70 [ 2516.114162][T31544] ? security_file_permission+0x128/0x300 [ 2516.119895][T31544] do_sendfile+0x8d6/0x1100 [ 2516.124393][T31544] ? compat_writev+0x3d0/0x3d0 [ 2516.129680][T31544] ? vfs_write+0x427/0x4f0 [ 2516.134110][T31544] __x64_sys_sendfile64+0x1d4/0x230 [ 2516.139523][T31544] ? __ia32_sys_sendfile+0x250/0x250 [ 2516.145090][T31544] do_syscall_64+0xcb/0x150 [ 2516.149935][T31544] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2516.155980][T31544] RIP: 0033:0x45ce69 [ 2516.160029][T31544] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2516.179888][T31544] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2516.188298][T31544] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2516.196361][T31544] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2516.206407][T31544] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 17:13:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2516.215916][T31544] R10: 000000007ffff000 R11: 0000000000000246 R12: 000000000000001f [ 2516.224792][T31544] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2516.240070][T31543] CPU: 0 PID: 31543 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2516.250756][T31543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.260810][T31543] Call Trace: 17:13:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2516.264105][T31543] dump_stack+0x14a/0x1ce [ 2516.268624][T31543] ? devkmsg_release+0x11c/0x11c [ 2516.273618][T31543] ? show_regs_print_info+0x12/0x12 [ 2516.278819][T31543] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2516.284880][T31543] should_fail+0x6fb/0x860 [ 2516.289295][T31543] ? setup_fault_attr+0x3d0/0x3d0 [ 2516.294316][T31543] ? __down_read+0xf1/0x210 [ 2516.298825][T31543] ? stack_trace_save+0x1f0/0x1f0 [ 2516.303863][T31543] ? ion_buffer_alloc+0x141/0x630 [ 2516.308888][T31543] should_failslab+0x5/0x20 17:13:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2516.313390][T31543] kmem_cache_alloc_trace+0x39/0x280 [ 2516.318682][T31543] ? arch_stack_walk+0xd8/0x120 [ 2516.323536][T31543] ion_buffer_alloc+0x141/0x630 [ 2516.328509][T31543] ion_dmabuf_alloc+0xcb/0x230 [ 2516.333269][T31543] ? track_buffer_created+0x1c0/0x1c0 [ 2516.338651][T31543] ? check_stack_object+0x5a/0x90 [ 2516.343685][T31543] ion_ioctl+0x2e8/0x9c0 [ 2516.347921][T31543] ? get_pid_task+0x86/0x90 [ 2516.352505][T31543] ? proc_fail_nth_write+0x18f/0x250 [ 2516.358039][T31543] ? debug_shrink_set+0x1b0/0x1b0 [ 2516.363059][T31543] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2516.368234][T31543] ? memset+0x1f/0x40 [ 2516.373583][T31543] ? fsnotify+0x13a0/0x1460 [ 2516.378065][T31543] ? debug_shrink_set+0x1b0/0x1b0 [ 2516.383084][T31543] do_vfs_ioctl+0x770/0x1750 [ 2516.387828][T31543] ? selinux_file_ioctl+0x73b/0x990 [ 2516.393183][T31543] ? ioctl_preallocate+0x250/0x250 [ 2516.398270][T31543] ? __fget+0x37c/0x3c0 [ 2516.402410][T31543] ? vfs_write+0x427/0x4f0 [ 2516.406805][T31543] ? fget_many+0x20/0x20 [ 2516.411024][T31543] ? ksys_write+0x25d/0x2c0 [ 2516.415500][T31543] ? file_open_root+0x450/0x450 [ 2516.420417][T31543] ? security_file_ioctl+0xad/0xc0 [ 2516.425699][T31543] __x64_sys_ioctl+0xd4/0x110 [ 2516.430363][T31543] do_syscall_64+0xcb/0x150 [ 2516.435044][T31543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2516.441892][T31543] RIP: 0033:0x45ce69 [ 2516.445762][T31543] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2516.469395][T31543] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2516.477814][T31543] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2516.485777][T31543] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2516.494584][T31543] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2516.502554][T31543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2516.510501][T31543] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c 17:13:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) 17:13:47 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:47 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x6, 0x5, 0x6, 0x0, 0x7, [{0x9, 0x6, 0x6, [], 0x400}, {0x1ff, 0x2, 0xb906, [], 0x1101}, {0x401, 0x401, 0x9, [], 0x2}, {0x92, 0x2, 0x2, [], 0x2c88}, {0x0, 0x8001, 0x2, [], 0x100}, {0x5, 0x500000, 0x6, [], 0x1002}, {0x0, 0x2, 0x6, [], 0x28a}]}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:47 executing program 4 (fault-call:6 fault-nth:32): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2516.791372][T31578] FAULT_INJECTION: forcing a failure. [ 2516.791372][T31578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2516.792866][T31582] FAULT_INJECTION: forcing a failure. [ 2516.792866][T31582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2516.806369][T31578] CPU: 1 PID: 31578 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2516.830638][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.840989][T31578] Call Trace: [ 2516.844274][T31578] dump_stack+0x14a/0x1ce [ 2516.848589][T31578] ? devkmsg_release+0x11c/0x11c [ 2516.853769][T31578] ? stack_trace_save+0x123/0x1f0 [ 2516.859745][T31578] ? show_regs_print_info+0x12/0x12 [ 2516.864934][T31578] ? stack_trace_snprint+0x150/0x150 [ 2516.870215][T31578] should_fail+0x6fb/0x860 [ 2516.874608][T31578] ? setup_fault_attr+0x3d0/0x3d0 [ 2516.879958][T31578] ? __kasan_kmalloc+0x189/0x1c0 [ 2516.884882][T31578] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2516.890342][T31578] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2516.897116][T31578] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2516.903095][T31578] ? ion_page_pool_alloc+0x320/0x490 [ 2516.908364][T31578] ion_system_heap_allocate+0x235/0xbf0 [ 2516.913916][T31578] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2516.919894][T31578] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2516.925347][T31578] ? arch_stack_walk+0xd8/0x120 [ 2516.930184][T31578] ion_buffer_alloc+0x20f/0x630 [ 2516.935225][T31578] ion_dmabuf_alloc+0xcb/0x230 [ 2516.939994][T31578] ? track_buffer_created+0x1c0/0x1c0 [ 2516.945367][T31578] ? check_stack_object+0x5a/0x90 [ 2516.950634][T31578] ion_ioctl+0x2e8/0x9c0 [ 2516.954977][T31578] ? get_pid_task+0x86/0x90 [ 2516.959501][T31578] ? proc_fail_nth_write+0x18f/0x250 [ 2516.964852][T31578] ? debug_shrink_set+0x1b0/0x1b0 [ 2516.969850][T31578] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2516.975149][T31578] ? memset+0x1f/0x40 [ 2516.979106][T31578] ? fsnotify+0x13a0/0x1460 [ 2516.983597][T31578] ? debug_shrink_set+0x1b0/0x1b0 [ 2516.988608][T31578] do_vfs_ioctl+0x770/0x1750 [ 2516.993200][T31578] ? selinux_file_ioctl+0x73b/0x990 [ 2516.998567][T31578] ? ioctl_preallocate+0x250/0x250 [ 2517.004117][T31578] ? __fget+0x37c/0x3c0 [ 2517.008264][T31578] ? vfs_write+0x427/0x4f0 [ 2517.012710][T31578] ? fget_many+0x20/0x20 [ 2517.016930][T31578] ? ksys_write+0x25d/0x2c0 [ 2517.021453][T31578] ? file_open_root+0x450/0x450 [ 2517.026304][T31578] ? security_file_ioctl+0xad/0xc0 [ 2517.031418][T31578] __x64_sys_ioctl+0xd4/0x110 [ 2517.036084][T31578] do_syscall_64+0xcb/0x150 [ 2517.040569][T31578] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2517.046997][T31578] RIP: 0033:0x45ce69 [ 2517.050940][T31578] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2517.084771][T31578] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2517.093971][T31578] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2517.103929][T31578] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2517.113116][T31578] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.122490][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2517.130940][T31578] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c 17:13:47 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ftruncate(r5, 0x40) r6 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000), 0x4) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) [ 2517.139153][T31582] CPU: 0 PID: 31582 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2517.149477][T31582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.164144][T31582] Call Trace: [ 2517.167443][T31582] dump_stack+0x14a/0x1ce [ 2517.172126][T31582] ? devkmsg_release+0x11c/0x11c [ 2517.177240][T31582] ? show_regs_print_info+0x12/0x12 [ 2517.182449][T31582] ? __kasan_kmalloc+0x189/0x1c0 [ 2517.187492][T31582] ? kasan_alloc_pages+0x4a/0x60 17:13:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x14, 0x41) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000080)={0xc, 0x1000, 0x6, 0x1, 0x94, 0x80001, 0x40}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x4, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) [ 2517.192595][T31582] should_fail+0x6fb/0x860 [ 2517.197007][T31582] ? setup_fault_attr+0x3d0/0x3d0 [ 2517.202030][T31582] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2517.207414][T31582] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2517.212957][T31582] ? fsnotify+0x13a0/0x1460 [ 2517.217453][T31582] ? kvmalloc_node+0xc2/0x120 [ 2517.222129][T31582] push_pipe+0x385/0x740 [ 2517.226389][T31582] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2517.232119][T31582] ? iov_iter_get_pages+0xd80/0xd80 [ 2517.237415][T31582] default_file_splice_read+0x210/0x980 17:13:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x80ffff, 0xffffffffffffff9c}) 17:13:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:47 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r1, 0x0, r2, 0x0, 0xe8ba, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r2, 0x1200}, {r5, 0x5403}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x20]}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2517.243045][T31582] ? __ia32_sys_tee+0xa0/0xa0 [ 2517.247723][T31582] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2517.254492][T31582] ? selinux_file_permission+0x2d0/0x520 [ 2517.260218][T31582] ? security_file_permission+0x1e9/0x300 [ 2517.265944][T31582] ? __ia32_sys_tee+0xa0/0xa0 [ 2517.270791][T31582] splice_direct_to_actor+0x3cf/0xb00 [ 2517.276158][T31582] ? do_splice_direct+0x3e0/0x3e0 [ 2517.281361][T31582] ? pipe_to_sendpage+0x300/0x300 [ 2517.286390][T31582] ? security_file_permission+0x128/0x300 17:13:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x5, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x6, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2517.292114][T31582] do_splice_direct+0x28b/0x3e0 [ 2517.297254][T31582] ? splice_direct_to_actor+0xb00/0xb00 [ 2517.302803][T31582] ? avc_policy_seqno+0x17/0x70 [ 2517.307668][T31582] ? security_file_permission+0x128/0x300 [ 2517.313392][T31582] do_sendfile+0x8d6/0x1100 [ 2517.317889][T31582] ? compat_writev+0x3d0/0x3d0 [ 2517.322648][T31582] ? vfs_write+0x427/0x4f0 [ 2517.327055][T31582] __x64_sys_sendfile64+0x1d4/0x230 [ 2517.332231][T31582] ? __ia32_sys_sendfile+0x250/0x250 [ 2517.337551][T31582] do_syscall_64+0xcb/0x150 [ 2517.342042][T31582] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2517.347916][T31582] RIP: 0033:0x45ce69 [ 2517.352343][T31582] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2517.371940][T31582] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2517.380335][T31582] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 17:13:47 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:47 executing program 4 (fault-call:6 fault-nth:33): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2517.388291][T31582] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2517.396241][T31582] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.404286][T31582] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000020 [ 2517.412266][T31582] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2517.453813][T31619] FAULT_INJECTION: forcing a failure. [ 2517.453813][T31619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2517.467779][T31619] CPU: 0 PID: 31619 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2517.467787][T31620] FAULT_INJECTION: forcing a failure. [ 2517.467787][T31620] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.490513][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.500549][T31619] Call Trace: [ 2517.503833][T31619] dump_stack+0x14a/0x1ce [ 2517.508138][T31619] ? devkmsg_release+0x11c/0x11c [ 2517.513049][T31619] ? show_regs_print_info+0x12/0x12 [ 2517.518330][T31619] ? __kasan_kmalloc+0x189/0x1c0 [ 2517.523333][T31619] ? kasan_alloc_pages+0x4a/0x60 [ 2517.528357][T31619] should_fail+0x6fb/0x860 [ 2517.532753][T31619] ? setup_fault_attr+0x3d0/0x3d0 [ 2517.537759][T31619] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2517.543109][T31619] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2517.548629][T31619] ? fsnotify+0x13a0/0x1460 [ 2517.553108][T31619] ? kvmalloc_node+0xc2/0x120 [ 2517.557847][T31619] push_pipe+0x385/0x740 [ 2517.562065][T31619] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2517.567583][T31619] ? iov_iter_get_pages+0xd80/0xd80 [ 2517.572858][T31619] default_file_splice_read+0x210/0x980 [ 2517.578378][T31619] ? __ia32_sys_tee+0xa0/0xa0 [ 2517.583034][T31619] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2517.592559][T31619] ? selinux_file_permission+0x2d0/0x520 [ 2517.598454][T31619] ? security_file_permission+0x1e9/0x300 [ 2517.606805][T31619] ? __ia32_sys_tee+0xa0/0xa0 [ 2517.613387][T31619] splice_direct_to_actor+0x3cf/0xb00 [ 2517.618921][T31619] ? do_splice_direct+0x3e0/0x3e0 [ 2517.623930][T31619] ? pipe_to_sendpage+0x300/0x300 [ 2517.629195][T31619] ? security_file_permission+0x128/0x300 [ 2517.635115][T31619] do_splice_direct+0x28b/0x3e0 [ 2517.639948][T31619] ? splice_direct_to_actor+0xb00/0xb00 [ 2517.645663][T31619] ? avc_policy_seqno+0x17/0x70 [ 2517.650492][T31619] ? security_file_permission+0x128/0x300 [ 2517.656194][T31619] do_sendfile+0x8d6/0x1100 [ 2517.660676][T31619] ? compat_writev+0x3d0/0x3d0 [ 2517.665430][T31619] ? vfs_write+0x427/0x4f0 [ 2517.670016][T31619] __x64_sys_sendfile64+0x1d4/0x230 [ 2517.675740][T31619] ? __ia32_sys_sendfile+0x250/0x250 [ 2517.681012][T31619] do_syscall_64+0xcb/0x150 [ 2517.685496][T31619] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2517.691729][T31619] RIP: 0033:0x45ce69 [ 2517.695772][T31619] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2517.715351][T31619] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2517.723855][T31619] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2517.731814][T31619] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2517.744550][T31619] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2517.752521][T31619] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000021 [ 2517.760485][T31619] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2517.768531][T31620] CPU: 1 PID: 31620 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2517.779580][T31620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.789762][T31620] Call Trace: [ 2517.793358][T31620] dump_stack+0x14a/0x1ce [ 2517.798626][T31620] ? devkmsg_release+0x11c/0x11c [ 2517.803725][T31620] ? show_regs_print_info+0x12/0x12 [ 2517.809382][T31620] should_fail+0x6fb/0x860 [ 2517.813780][T31620] ? setup_fault_attr+0x3d0/0x3d0 [ 2517.819085][T31620] ? mutex_lock+0xa6/0x110 [ 2517.823483][T31620] ? mutex_trylock+0xb0/0xb0 [ 2517.828047][T31620] ? ion_system_heap_allocate+0x584/0xbf0 [ 2517.833748][T31620] should_failslab+0x5/0x20 [ 2517.838222][T31620] kmem_cache_alloc_trace+0x39/0x280 [ 2517.846228][T31620] ? ion_page_pool_alloc+0x2c1/0x490 [ 2517.851496][T31620] ion_system_heap_allocate+0x584/0xbf0 [ 2517.857033][T31620] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2517.863028][T31620] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2517.868474][T31620] ? arch_stack_walk+0xd8/0x120 [ 2517.873376][T31620] ion_buffer_alloc+0x20f/0x630 [ 2517.878289][T31620] ion_dmabuf_alloc+0xcb/0x230 [ 2517.883150][T31620] ? track_buffer_created+0x1c0/0x1c0 [ 2517.888530][T31620] ? check_stack_object+0x5a/0x90 [ 2517.893547][T31620] ion_ioctl+0x2e8/0x9c0 [ 2517.898043][T31620] ? get_pid_task+0x86/0x90 [ 2517.902539][T31620] ? proc_fail_nth_write+0x18f/0x250 [ 2517.907806][T31620] ? debug_shrink_set+0x1b0/0x1b0 [ 2517.912808][T31620] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2517.917993][T31620] ? memset+0x1f/0x40 [ 2517.921966][T31620] ? fsnotify+0x13a0/0x1460 [ 2517.926449][T31620] ? debug_shrink_set+0x1b0/0x1b0 [ 2517.931451][T31620] do_vfs_ioctl+0x770/0x1750 [ 2517.936146][T31620] ? selinux_file_ioctl+0x73b/0x990 [ 2517.941340][T31620] ? ioctl_preallocate+0x250/0x250 [ 2517.946608][T31620] ? __fget+0x37c/0x3c0 [ 2517.950738][T31620] ? vfs_write+0x427/0x4f0 [ 2517.955144][T31620] ? fget_many+0x20/0x20 [ 2517.959393][T31620] ? ksys_write+0x25d/0x2c0 [ 2517.963888][T31620] ? file_open_root+0x450/0x450 [ 2517.968736][T31620] ? security_file_ioctl+0xad/0xc0 [ 2517.973856][T31620] __x64_sys_ioctl+0xd4/0x110 [ 2517.978963][T31620] do_syscall_64+0xcb/0x150 [ 2517.983460][T31620] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2517.989866][T31620] RIP: 0033:0x45ce69 [ 2517.993912][T31620] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2518.013498][T31620] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.021899][T31620] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2518.030301][T31620] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2518.038374][T31620] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.046384][T31620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:13:48 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0xd7c221ffada7fa0b, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r4, 0x101}], 0x1, 0x0, 0x0, 0x54) 17:13:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0xa, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:48 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) [ 2518.054344][T31620] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c 17:13:48 executing program 1 (fault-call:1 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:48 executing program 4 (fault-call:6 fault-nth:34): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) [ 2518.077448][T31626] FAULT_INJECTION: forcing a failure. [ 2518.077448][T31626] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.097378][T31626] CPU: 1 PID: 31626 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2518.105823][T31633] FAULT_INJECTION: forcing a failure. [ 2518.105823][T31633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 17:13:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0xf, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2518.107563][T31626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.107566][T31626] Call Trace: [ 2518.107584][T31626] dump_stack+0x14a/0x1ce [ 2518.107598][T31626] ? devkmsg_release+0x11c/0x11c [ 2518.143726][T31626] ? show_regs_print_info+0x12/0x12 [ 2518.148915][T31626] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2518.154963][T31626] should_fail+0x6fb/0x860 [ 2518.159356][T31626] ? setup_fault_attr+0x3d0/0x3d0 [ 2518.164356][T31626] ? __down_read+0xf1/0x210 [ 2518.168837][T31626] ? stack_trace_save+0x1f0/0x1f0 [ 2518.173839][T31626] ? ion_buffer_alloc+0x141/0x630 [ 2518.178840][T31626] should_failslab+0x5/0x20 [ 2518.183321][T31626] kmem_cache_alloc_trace+0x39/0x280 [ 2518.188585][T31626] ? arch_stack_walk+0xd8/0x120 [ 2518.193420][T31626] ion_buffer_alloc+0x141/0x630 [ 2518.198251][T31626] ion_dmabuf_alloc+0xcb/0x230 [ 2518.199469][T31631] FAULT_INJECTION: forcing a failure. [ 2518.199469][T31631] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.202994][T31626] ? track_buffer_created+0x1c0/0x1c0 [ 2518.203004][T31626] ? check_stack_object+0x5a/0x90 [ 2518.203016][T31626] ion_ioctl+0x2e8/0x9c0 [ 2518.230230][T31626] ? get_pid_task+0x86/0x90 [ 2518.234912][T31626] ? proc_fail_nth_write+0x18f/0x250 [ 2518.240176][T31626] ? debug_shrink_set+0x1b0/0x1b0 [ 2518.245185][T31626] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2518.250408][T31626] ? memset+0x1f/0x40 [ 2518.254404][T31626] ? fsnotify+0x13a0/0x1460 [ 2518.258904][T31626] ? debug_shrink_set+0x1b0/0x1b0 [ 2518.264273][T31626] do_vfs_ioctl+0x770/0x1750 [ 2518.268854][T31626] ? selinux_file_ioctl+0x73b/0x990 [ 2518.274044][T31626] ? ioctl_preallocate+0x250/0x250 [ 2518.279135][T31626] ? __fget+0x37c/0x3c0 [ 2518.283275][T31626] ? vfs_write+0x427/0x4f0 [ 2518.287680][T31626] ? fget_many+0x20/0x20 [ 2518.291910][T31626] ? ksys_write+0x25d/0x2c0 [ 2518.296417][T31626] ? file_open_root+0x450/0x450 [ 2518.301247][T31626] ? security_file_ioctl+0xad/0xc0 [ 2518.306357][T31626] __x64_sys_ioctl+0xd4/0x110 [ 2518.311019][T31626] do_syscall_64+0xcb/0x150 [ 2518.315508][T31626] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2518.321376][T31626] RIP: 0033:0x45ce69 [ 2518.325268][T31626] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2518.345021][T31626] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.353407][T31626] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2518.361356][T31626] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2518.369412][T31626] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.377356][T31626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2518.385300][T31626] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2518.393380][T31631] CPU: 0 PID: 31631 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2518.403517][T31631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.413564][T31631] Call Trace: [ 2518.416853][T31631] dump_stack+0x14a/0x1ce [ 2518.421173][T31631] ? devkmsg_release+0x11c/0x11c [ 2518.426085][T31631] ? show_regs_print_info+0x12/0x12 [ 2518.431354][T31631] should_fail+0x6fb/0x860 [ 2518.435744][T31631] ? setup_fault_attr+0x3d0/0x3d0 [ 2518.440743][T31631] ? sg_alloc_table+0x108/0x630 [ 2518.445580][T31631] should_failslab+0x5/0x20 [ 2518.450073][T31631] __kmalloc+0x5f/0x2d0 [ 2518.454200][T31631] sg_alloc_table+0x108/0x630 [ 2518.458851][T31631] ion_system_heap_allocate+0x5ab/0xbf0 [ 2518.464370][T31631] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2518.470323][T31631] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2518.475755][T31631] ? arch_stack_walk+0xd8/0x120 [ 2518.480581][T31631] ion_buffer_alloc+0x20f/0x630 [ 2518.485403][T31631] ion_dmabuf_alloc+0xcb/0x230 [ 2518.490140][T31631] ? track_buffer_created+0x1c0/0x1c0 [ 2518.495490][T31631] ? check_stack_object+0x5a/0x90 [ 2518.500660][T31631] ion_ioctl+0x2e8/0x9c0 [ 2518.504877][T31631] ? get_pid_task+0x86/0x90 [ 2518.512493][T31631] ? proc_fail_nth_write+0x18f/0x250 [ 2518.517780][T31631] ? debug_shrink_set+0x1b0/0x1b0 [ 2518.522797][T31631] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2518.527986][T31631] ? memset+0x1f/0x40 [ 2518.531943][T31631] ? fsnotify+0x13a0/0x1460 [ 2518.536506][T31631] ? debug_shrink_set+0x1b0/0x1b0 [ 2518.541510][T31631] do_vfs_ioctl+0x770/0x1750 [ 2518.546080][T31631] ? selinux_file_ioctl+0x73b/0x990 [ 2518.551510][T31631] ? ioctl_preallocate+0x250/0x250 [ 2518.556595][T31631] ? __fget+0x37c/0x3c0 [ 2518.560721][T31631] ? vfs_write+0x427/0x4f0 [ 2518.565124][T31631] ? fget_many+0x20/0x20 [ 2518.569361][T31631] ? ksys_write+0x25d/0x2c0 [ 2518.573851][T31631] ? file_open_root+0x450/0x450 [ 2518.578690][T31631] ? security_file_ioctl+0xad/0xc0 [ 2518.583781][T31631] __x64_sys_ioctl+0xd4/0x110 [ 2518.588457][T31631] do_syscall_64+0xcb/0x150 [ 2518.592936][T31631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2518.598887][T31631] RIP: 0033:0x45ce69 [ 2518.602771][T31631] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:13:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x11, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2518.623942][T31631] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.632332][T31631] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2518.640310][T31631] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2518.648258][T31631] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.656203][T31631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2518.664154][T31631] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c 17:13:49 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xff01) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) pipe(&(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x10002, 0xa0c6, 0x21f6, 0x1000000}, 0x14) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8ba, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000340)={0x20a927, 0x2d, 0x80ffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xff01) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc0000000002010300000000000000000c00000409000600736e6d700000008018000a800c000280060003400001000008000140000000009c00028014000180080001000a01010108000200e00000012c00018014000300fe8000000000000000000000000000bb14000400ff0100000000000000000000000000012c00018014000300fe80000000000000000000000000002f14000400fc02000000000000000000000000000006000340000300000c00028005000100880000000c00028005000100110000000c000280050001003a0000000800084000000001825d46e95aa18b1a26f9d111a4f1d7c6bb86009ac92cd150b446a66bedd12d9d3257059e4eb7c1f2c5cb81d5453395b7e9d2cbeb6ce2b8888673f5c688653671e6ca7bee53a6aa8787c59cdfe4e3d3da6e211f71043a8fb5daaa26fe7086b040ba467d1900caf080b3f8aee5107daa0249d30c29a9644e6a16ba79ab9ffd27aa21a449cb"], 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x20000095) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f2, 0x2, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000000)) 17:13:49 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x80) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:49 executing program 1 (fault-call:1 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) [ 2518.672109][T31633] CPU: 1 PID: 31633 Comm: syz-executor.4 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2518.682250][T31633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.692301][T31633] Call Trace: [ 2518.695605][T31633] dump_stack+0x14a/0x1ce [ 2518.699975][T31633] ? devkmsg_release+0x11c/0x11c [ 2518.704906][T31633] ? show_regs_print_info+0x12/0x12 [ 2518.710100][T31633] ? __kasan_kmalloc+0x189/0x1c0 [ 2518.715032][T31633] ? kasan_alloc_pages+0x4a/0x60 [ 2518.719972][T31633] should_fail+0x6fb/0x860 [ 2518.724386][T31633] ? setup_fault_attr+0x3d0/0x3d0 [ 2518.729420][T31633] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2518.734876][T31633] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2518.745103][T31633] ? kvmalloc_node+0xc2/0x120 [ 2518.749776][T31633] ? kvmalloc_node+0xc2/0x120 [ 2518.751853][T31649] FAULT_INJECTION: forcing a failure. [ 2518.751853][T31649] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.754442][T31633] push_pipe+0x385/0x740 [ 2518.754453][T31633] iov_iter_get_pages_alloc+0xb47/0xff0 [ 2518.754461][T31633] ? iov_iter_get_pages+0xd80/0xd80 [ 2518.754475][T31633] default_file_splice_read+0x210/0x980 [ 2518.787875][T31633] ? __ia32_sys_tee+0xa0/0xa0 [ 2518.792565][T31633] ? __fsnotify_update_child_dentry_flags+0x2c0/0x2c0 [ 2518.799320][T31633] ? selinux_file_permission+0x2d0/0x520 [ 2518.804943][T31633] ? security_file_permission+0x1e9/0x300 [ 2518.810658][T31633] ? __ia32_sys_tee+0xa0/0xa0 [ 2518.815318][T31633] splice_direct_to_actor+0x3cf/0xb00 [ 2518.820694][T31633] ? do_splice_direct+0x3e0/0x3e0 [ 2518.825703][T31633] ? pipe_to_sendpage+0x300/0x300 [ 2518.830714][T31633] ? security_file_permission+0x128/0x300 [ 2518.836420][T31633] do_splice_direct+0x28b/0x3e0 [ 2518.841249][T31633] ? splice_direct_to_actor+0xb00/0xb00 [ 2518.846789][T31633] ? avc_policy_seqno+0x17/0x70 [ 2518.851633][T31633] ? security_file_permission+0x128/0x300 [ 2518.852442][T31655] FAULT_INJECTION: forcing a failure. [ 2518.852442][T31655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2518.857517][T31633] do_sendfile+0x8d6/0x1100 [ 2518.857530][T31633] ? compat_writev+0x3d0/0x3d0 [ 2518.857539][T31633] ? vfs_write+0x427/0x4f0 [ 2518.857548][T31633] __x64_sys_sendfile64+0x1d4/0x230 [ 2518.857565][T31633] ? __ia32_sys_sendfile+0x250/0x250 [ 2518.895327][T31633] do_syscall_64+0xcb/0x150 [ 2518.899815][T31633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2518.905787][T31633] RIP: 0033:0x45ce69 [ 2518.909666][T31633] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:13:49 executing program 5: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="320000000600000000000000000000000000000000000008060000000000c000090000006465762fe96f6e0000716336472feaad45d0803983fe1a1ef1878a39303fd68eb8b4a07c99dda02144ecec0f8ef92105b085ea64a1816dc0e1e16de8b22270246edc3001ed170ca0ea6e8c07b4627e40c8ff47ade691d356147d85e7aed81c0c3d5128dd4f16fe7cf1c56c7f69a70935775ba5e32ffc583f89e4f007f9394724477597bf59de4257be65438b7f588561f1126d90e39cb33332f442aefa"], 0x32) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) ioctl(r3, 0x49bd, &(0x7f0000000340)="046752044dd75541aba209246011120876e5a0ca6f5cbdaf2ee269e7dd9266ac7c478d9d4d04556e22bf1d9631537e5be1b016e9ff2703174c2c3f89b5a25dedd466170f0a923f18ca04e37aa8269a35c9de9d3950f08d47da6d98d74b1cb339eead3e366aba7a630b3fa702f2c1420da2c42fe2405c203285112ed0e87294634c14fd4266aac9df1200c9995cb13e9d3b07952a8665c941fdfa3a3a70784284c9650a18da93866c5854290bf116dd7e05c1a1d793cc6ef6b70d3ce097b71b528bce8b2e8aee9272cc315d7dc4dbc8628283a1608205d52536a7734767afbffe601afbe921d18c175e18e27b6ea94f6307e964d61747886c0a483d669ef07defa59c9e88d7b03426b7dcf0d1c71ab0acb9a918eb51db4637a60efe16079f84d0dd49adf9a093960a108eb5fe70e0ca07fdbc353e3b029ec231dfd223b0bdceb51c962cafbd417a911f8f82c194c4783225ba252d04c419ce658752ae355701322f803b6bf165e15c786a7f61978247dceae9010a37f6fc7e5395d0906013303b214b81744e6afbd1e68807240f679a53cc85bf4d3f5a8ef95551302c1920f6d96733a0e9cca0b192cf1b8a7f1ba2e70cef1baae07c9c62656c00df17123dd5ca23af794ecdcc9ebc43372d267cde8df041db2dca8dd830f28c6f2180c85d74bd44103dc9597b15d7e5e00fcbce0d20a82d159278bfd41dcc06c33457add64a50b263f9b9de400db3fcd833d10ce4788ad1fa7f0778fd0f25b95c7d1e006f22f38294272a46ac00c784f17880f11e4dbbeb7f8f4c2f81de97bbbe8b36d405c00354242684ceffffc6ef3fa0e3994f4104089a655b1faea5d33b84075af4104e7d9a77bf72055a06c4716eacb3bf47607718d04babc8ae140f3fe2525cf4fd2fc42377874e0e8c641f3e702c01e3de6f11ec3834819b528147fe2612bcc66c546ebae495c9e07f7359fd38ccd852b356c0b7056cf0da59e88c0068f3d59bcfdcd6b92e51149bf6ff6ea41402d2d9554b778f5291b9aaeeff23cd720715991041da053f1e947456b842f255097d3106faafc5d93ac42e22bc12d1201b80431091e90e372d6d0c4640762130cf256d8b545011543a8c854c37c5c039b8cb88283703595d280af50b6fdb5717da41f9c8d1a47724f4a92f1cd2366ef838e02fb01caed6e768b01dbb993db09d3afadf2468c7edb8fa3dcc566b090f2ca53fd4163ee7a0a6223c0c53d55db02b56ce74a4bd0726b263104e4b91acd36f85b35244173dc0c5c9eb3e5fb8259ef4e1c33dbf052d8059b6c251ac4f96ff1094dcbfb1938ba719e7f1c215e3a1d780e7a6803f9f7928df129a8efa4ed8e150e7013053e68641f3715d56bbb661f67fc98b57e3abc6bfbb38890a9875530375a463e509906cc211c7e023a6c0e5acd496167d33640e60c48d5def03500e942382229e28e061e365c30764e0b48c2e5b9f36232b1d8105b818aa096facad760047e263435577ff8ba2085923087bfcee5f34a9151979df8628b5e225fdfc4b7897a29e6d8616b5b5ed4d2544f3b8177ec307ed4f5949c3696028853b87a001e4f4e8d02a741b2be671d97ed90a68e142fdb2244ca110e120ae9a391b798eb92d4a563e97973f9c4edca9bd4e12159e4cf076d1a00003bd4f11f96d1df673e42a2bb5c8fec25951a6dd84c150723ed59ff42d2c01b69c250d7406a068e91e26dedbdcb7cfbc39f1e85217f494bec0478d03a74991cbfe568c9f390c6bcaf54448dcbe8887a7cf3d460a46156fb7b3c330768741541b7da5f7926232a5edbe0bbe915d82d1a11ef2f58e6ddd625d4e4760fcd5d6f5e898674f569d614d6cb5f422303b05ff01d6af57cdb3a109dd50c178d22138aebae5ca90454df75947d6ed0304f945eaef1eb8fd1b9c0c9b68f05154f6c9a9991d4befef791b70e257c4d832fe06187f396781f1d66c6fc5b1a9d0d10a6173257b86706673f726b69ecba19a0e86db5b50fa6e0a2aa3a5a9f7d0a6946e431f0f3c0e6390f80cc58f85810ed72c1f26ee4fd6ea26002fb4065ba7101e240ad931c5af124ce3aadb2d59816b7bdec9446be85642484a815a75c5994a7cad508074d6e3ec55f8a0638641922fcc4056eb61ce8bc32078dd99c49168ea250b1a7d8eb42728f4095bf36405b7c4580d3639d5e0c3968ce855781646c43ff365129c224bcafd04901c672b3b3e9e2e612d29bc7b2a8cd8acad5817ae6334bead881eb1c5c192e8e0d74b165ce1c566dbb72bc81b7df6917169f3b73ef3ab8419822caaf94fe3455b0aa05ca9fc14d47795f289fb01b1b3f6defc256e861f7869223235003f209a9ce0dc1b7327a918b46ea5c99d7a11136ecd1a2f319aba01cfb89cf4d52f8196c00dc9a3a542493e360db1a525f1c451de1d51b9489cffd1de1a6f803812404b4e856b3ca75c8c0506f5344e4df19684266283e5963bc4692d0315e57bc977f1e3839cd4047fc794d2ebe718b47231c9feb6ef769cdfde1f4312f7eb648cdbd519e5fb9038759315dad4183fe806cd0678cbac66a3db56b9863937ef7105d00b9388be61356da31bcf1ce1595c3db2501c85b126eb83cba2d6abbef4bad1b62b12b818230cf2ab107c360fc58103089c2ef54703ca20123ced1d0c4646c07489f4a30ee17649b13de19c53cec8eb4572b2386cfdaaf05d10a94e8ada2162500750572b68da63a850b36f21330cb096ed4d3deaba6c35a07b3aec1d5fae670b5761662662051f9ebffa14a38c128d2d9c33cca83294f7973f08dfa6cff115e13d6c4effa97d21cefed8f79aa9e7b90417b8be4b1ce5772e96677a1bafd4bd57097b4c1822b137d5d3ef085e65e0ead3a194892d93a5aa1336d8f1fa2327180329d5c44675f7aab60b3f6a0046c24fb2db04ceec56374994b71fb406deeffa53b1b053f805e70e563582caa41f46b44e1a8ceefe83fb7fe9506b5091b83c4892abf17f0bf3b91b4f0cf9c10c8d7f7ef22e09ab7da98cf718b72bfac5c4eda9f711f8225a4dba8e791f7227f2ec09dd4d5ddf6cba55a6b53d17507ebe9f98c6f0d68f1a64a83c491fbf3dd20a0505ad3afdb4a96fdacb0e2156d8d120e7f49e9876c59954479b329b7c3365b539dda5f97cc0541d6456b1a3b74127be9cdbf6d289a6d428522ea8cc0fd4fa69a1d0a3c8d71b69746d2f9d9938200a2d9be80753a0f794dabe438f90e2050c43b82ae6d1c6d6967b49bd6b39a48b8bfc3495618093af5e2cd3d6eee94a438a972015eb69e246277d8e12f77c9526afea3858029a01606f0b93b3c34e9bad540353cf857e791334398e41ac78843897b020e9bda5319e29c20203c213bb3b5368452b6d129161e1f6a7d2983b921ef0ad70195a530c14043cb61f1f0cf38c433aadcabab070dca488fd281147ff58aa1764f2dae9e0e69dceefc249d00c3332d71adc4b160d5b4040502b08ecf56afbc6c5d7bbd84cb5cdcc7bcd771f9e8ce797a1eafc3bc76c0c9d1f67ad6e89993fabfbfa522fee20cf3693ae08ef855494f58787216885c113d2d3438cb9755d5fd58a0321aa192f47d14ed0d8ed4ca7413d3a4b7ff5a1dee24e47f3e40bcace236cf220363d322cfcf881685b2a33b92e170fc1c3feb45f5890c1ca6e2ef12aea598936f628d63146d0fbafe0f5548dc058d1f25c1a53bfac8cf10be15ab515c804d711278ffac52b56eac6167f678d97fd900bbd5f3abaccbc67ad16f8ecad36778f5e2f96e856a756ed5289a37bfc1e3670c0cb3657da005b73ffb3d62ca7922229a71d6c60c4d4aa700c7e47cacafdc95d1840f475cfe420ca6eac993c5cc4eb13636ff6088c6734fa6b7a14e5b776884643caeae1f733775872e52f4a9851ac844be20d33eac65958ade0cce1b08c2bb5d847af0e5ada24dc49eb1f400312348e4e78f8f79f26bb0e1c624bf6486864da383e1e5fc29e219d5cf22fc51ec82832d8e4f5ba3b3229ea798e603e2f835c499819b2fd874a614f330c136b5b78caf305944ca58888aabf6a977d03eb938c2a2cffce443fa5b300984819155eba5b41d946fd12e79a6ad0809bc360c259802fbee2ed669041751356ffbb0bf38acb93f28c500e98e79f935696613c7644568c7ac811dd0fd43568e4ce1ec92ae7578f735bcc97c7e5930e374e4f8481abe5f1af26968094fd63eb1c84037f617a1eb31abd71939f91e7248d8268d48fc50a1781750057e9830f0792a70d33d565e7a2a197d6fee634e996777fd8bb8ed3ff763ffb52ead772c48169f5e0258bc7f01d8fc22896ab29c9e7261af85272db2d11d964855438e076e6160958b6f20f2e3c95108ad42d8f1aef157c91bcadb66a132f14ac62c7d8519098e817fa7edb7f569cc708d3ccbdde105722916700510052156e190eb85a5ced4b230cda62c01e904bd619fd8b11f384d98595c0579cf4a7c0cfe8dbf436e15eb48b6592832e4ca065fc14196289c2dd6f8033753a0a998d56f040b06729a86a0184888b27cfcd8d82a39e4323e0cfe549da22ac8a82b949ec8dae8c4353d69eef9104654c8683f7183e205cabebe82a029cec90175f0b29707af82c5f5cf9943a866e150a06546846185d57ff3f71619035220a520bd5a76dd7eeb0ff41a7e94a4eab804eb0fca794ac5c17bf82e2d100b0c0aa235525095e8437f77accf33894bf5655175eef9080d06c12bb6cdae2612bee102c7b56720680f28207a4e78dd444c72a0e593bb5f53d4896292130ff7165cac886aa90589e4bd562adf19a27fc7662947a34df4ecb0d65b93474697950971a5543c79a56ce6a36db9cadaf5077094ab48880cfcd8bb689230d1d215bed14c99515df78e4ba18f99b63c4d8f6e982ec8eee04fe9f21a395c93912e813017f88731fb3faf98d50e7dee8d7e1672e62f08166e5c3928fe99f9626ae23573ab2f2c6bfcdb541d906a4b09d20ff3f29bea8df1ae2f2feb5c1899113ffef4f2b9cc2e45a6192cf3158f56c2b35a85530afff4cf2a99a4802396eb696924fdf389ad22c2b34a2abcd2a2cf015226dff5603302124420840c7cf17d78961f080bafc94e61a2175700581285695cb736c896f5fc475131df709dc7ed8b6f13b5e0dad0055fd0dcf7ab148272008eda29af5518b559077c8201ac7e2818c77d9c042f5c9d570a745b9b350619d9aab5b8082a84e0d6471043067583e636ab79cc4cc09c5f76af393ffe2381851fc5faeb943050e4870953614acc2ebc65941d430187be9ede0ee57140e3ab24e2395ff34360e59ea343d4346d0a64e72f0dc5cbbedc323471e5b8c846278c493cc070dd7e29f4475f50b6d1b3ded20073a60fe6ec05c33e2eab46f49eef672f0babc69f1d4b327eab427ef1572cf9b194dfa1af230535b89cfabf286d5b0c6b2096d313e713dff1fb3ae2bbaeaee87d7dcfd4c6f9b43944781306b79babffb773382f62b0629119eec6f8abc8863d82796062d04a2ab7ab1d04bbb8bcff88d7d1a5edb85adb92d4f05fab464260d5fe6a2ebbfa34bb5fbaeabb58126a452be5c4d7fb06d80994ae0335f37c68a20631d0a758dbdac70b97a88bae30ab059db4608524570099333d351a5a8893c2ace41722d5f1f1e0ecd95f201eed560812599b8f369d1a67b0f6321c03d222173f4e7c28d0e50cc50639db2cf9412b00782eb1f9f2cd4c43778acc7ee29183bec9bd2b0ed63faecac345a556df02833378984cb1256e8f0aceb22e7e95391ed84bfab02a2cf6b705c26479daf217c6659ae84f02e62495520d4c26f933d82707446ec602dc46bf16304bfec68f005c18e") r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) [ 2518.929517][T31633] RSP: 002b:00007efc679bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2518.937913][T31633] RAX: ffffffffffffffda RBX: 0000000000026bc0 RCX: 000000000045ce69 [ 2518.945866][T31633] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2518.954008][T31633] RBP: 00007efc679baca0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.961973][T31633] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000022 [ 2518.969956][T31633] R13: 00007fff3c226f0f R14: 00007efc679bb9c0 R15: 000000000118bf2c [ 2518.977923][T31649] CPU: 0 PID: 31649 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2518.988064][T31649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.998316][T31649] Call Trace: [ 2519.001584][T31649] dump_stack+0x14a/0x1ce [ 2519.005885][T31649] ? devkmsg_release+0x11c/0x11c [ 2519.011065][T31649] ? show_regs_print_info+0x12/0x12 [ 2519.016236][T31649] ? memset+0x1f/0x40 [ 2519.020192][T31649] ? sg_alloc_table+0x313/0x630 [ 2519.025036][T31649] ? sg_next+0x8b/0xa0 [ 2519.029081][T31649] should_fail+0x6fb/0x860 [ 2519.033492][T31649] ? setup_fault_attr+0x3d0/0x3d0 [ 2519.038492][T31649] ? __up_read+0x6f/0x1b0 [ 2519.043232][T31649] ? _raw_spin_lock+0xa1/0x170 [ 2519.047968][T31649] ? kzalloc+0x1b/0x30 [ 2519.052008][T31649] should_failslab+0x5/0x20 [ 2519.056487][T31649] __kmalloc+0x5f/0x2d0 [ 2519.060613][T31649] kzalloc+0x1b/0x30 [ 2519.064481][T31649] dma_buf_export+0x166/0x7b0 [ 2519.069134][T31649] ion_dmabuf_alloc+0x199/0x230 [ 2519.074134][T31649] ? track_buffer_created+0x1c0/0x1c0 [ 2519.079478][T31649] ? check_stack_object+0x5a/0x90 [ 2519.084476][T31649] ion_ioctl+0x2e8/0x9c0 [ 2519.088692][T31649] ? get_pid_task+0x86/0x90 [ 2519.093186][T31649] ? proc_fail_nth_write+0x18f/0x250 [ 2519.098454][T31649] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.103540][T31649] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2519.108719][T31649] ? memset+0x1f/0x40 [ 2519.112682][T31649] ? fsnotify+0x13a0/0x1460 [ 2519.117179][T31649] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.122614][T31649] do_vfs_ioctl+0x770/0x1750 [ 2519.127265][T31649] ? selinux_file_ioctl+0x73b/0x990 [ 2519.132437][T31649] ? ioctl_preallocate+0x250/0x250 [ 2519.137522][T31649] ? __fget+0x37c/0x3c0 [ 2519.141654][T31649] ? vfs_write+0x427/0x4f0 [ 2519.146063][T31649] ? fget_many+0x20/0x20 [ 2519.150282][T31649] ? ksys_write+0x25d/0x2c0 [ 2519.155381][T31649] ? file_open_root+0x450/0x450 [ 2519.160206][T31649] ? security_file_ioctl+0xad/0xc0 [ 2519.165293][T31649] __x64_sys_ioctl+0xd4/0x110 [ 2519.169943][T31649] do_syscall_64+0xcb/0x150 [ 2519.176010][T31649] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2519.182063][T31649] RIP: 0033:0x45ce69 [ 2519.185933][T31649] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2519.205511][T31649] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.213899][T31649] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2519.221868][T31649] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.229833][T31649] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.237797][T31649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2519.245743][T31649] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c [ 2519.253697][T31655] CPU: 1 PID: 31655 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2519.264029][T31655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.274073][T31655] Call Trace: [ 2519.277356][T31655] dump_stack+0x14a/0x1ce [ 2519.281675][T31655] ? devkmsg_release+0x11c/0x11c [ 2519.287033][T31655] ? show_regs_print_info+0x12/0x12 [ 2519.292220][T31655] ? stack_trace_snprint+0x150/0x150 [ 2519.297576][T31655] should_fail+0x6fb/0x860 [ 2519.301968][T31655] ? setup_fault_attr+0x3d0/0x3d0 [ 2519.306966][T31655] ? __kasan_kmalloc+0x189/0x1c0 [ 2519.311874][T31655] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2519.317458][T31655] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2519.322846][T31655] ? gfp_pfmemalloc_allowed+0x130/0x130 17:13:49 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) bind(r2, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x7, 0x5, "fc197c5d3c1ccef65953254e79e4c8feced3e9eeb7ab916f7e48fdefe2ddbda72ae4f17c2cd42a8d60baa246e187f456bf92a40565c0880a8017c7a1331206", 0x17}, 0x80) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)="5be596dd5f093544a5cfb27744b6ef2d4c7c0396df217a24de941c97835f701a632a9deed8bdbb84cd041379d93e2fc4a114d835be0d018540c360a1b1cbd583118db1c85065f762f19393401f67c347eaa1a1775df93f8cb5665f43d21bfc7caf41a65c981886a5427a08667c3ebe900913db5a9299", 0x76) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r4}, {r5, 0x8300}], 0x2, 0x0, 0x0, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000300)=""/196) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', r7}) 17:13:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x18, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:49 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2d}) 17:13:49 executing program 1 (fault-call:1 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) [ 2519.328387][T31655] ? ion_page_pool_alloc+0x320/0x490 [ 2519.333674][T31655] ion_system_heap_allocate+0x235/0xbf0 [ 2519.339216][T31655] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2519.345284][T31655] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2519.350809][T31655] ion_buffer_alloc+0x20f/0x630 [ 2519.355666][T31655] ion_dmabuf_alloc+0xcb/0x230 [ 2519.360424][T31655] ? track_buffer_created+0x1c0/0x1c0 [ 2519.365797][T31655] ? check_stack_object+0x5a/0x90 [ 2519.370809][T31655] ion_ioctl+0x2e8/0x9c0 [ 2519.375044][T31655] ? get_pid_task+0x86/0x90 [ 2519.378782][T31670] FAULT_INJECTION: forcing a failure. [ 2519.378782][T31670] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.379633][T31655] ? proc_fail_nth_write+0x18f/0x250 [ 2519.379643][T31655] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.379649][T31655] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2519.379656][T31655] ? memset+0x1f/0x40 [ 2519.379670][T31655] ? fsnotify+0x13a0/0x1460 [ 2519.416155][T31655] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.421326][T31655] do_vfs_ioctl+0x770/0x1750 [ 2519.425905][T31655] ? selinux_file_ioctl+0x73b/0x990 [ 2519.431210][T31655] ? ioctl_preallocate+0x250/0x250 [ 2519.436477][T31655] ? __fget+0x37c/0x3c0 [ 2519.440615][T31655] ? vfs_write+0x427/0x4f0 [ 2519.445008][T31655] ? fget_many+0x20/0x20 [ 2519.449224][T31655] ? ksys_write+0x25d/0x2c0 [ 2519.453704][T31655] ? file_open_root+0x450/0x450 [ 2519.458535][T31655] ? security_file_ioctl+0xad/0xc0 [ 2519.463709][T31655] __x64_sys_ioctl+0xd4/0x110 [ 2519.468364][T31655] do_syscall_64+0xcb/0x150 [ 2519.472851][T31655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2519.478721][T31655] RIP: 0033:0x45ce69 [ 2519.482597][T31655] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2519.502203][T31655] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.510588][T31655] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2519.518539][T31655] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.526496][T31655] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.534539][T31655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2519.542499][T31655] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2519.550557][T31670] CPU: 0 PID: 31670 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2519.560694][T31670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.570747][T31670] Call Trace: [ 2519.574030][T31670] dump_stack+0x14a/0x1ce [ 2519.578332][T31670] ? devkmsg_release+0x11c/0x11c [ 2519.583242][T31670] ? show_regs_print_info+0x12/0x12 [ 2519.588458][T31670] should_fail+0x6fb/0x860 [ 2519.592904][T31670] ? setup_fault_attr+0x3d0/0x3d0 [ 2519.598148][T31670] ? new_inode_pseudo+0x131/0x240 [ 2519.603148][T31670] should_failslab+0x5/0x20 [ 2519.607628][T31670] kmem_cache_alloc+0x36/0x260 [ 2519.612373][T31670] new_inode_pseudo+0x131/0x240 [ 2519.617245][T31670] alloc_anon_inode+0x1a/0x2e0 [ 2519.621993][T31670] dma_buf_export+0x433/0x7b0 [ 2519.626699][T31670] ion_dmabuf_alloc+0x199/0x230 [ 2519.631543][T31670] ? track_buffer_created+0x1c0/0x1c0 [ 2519.637035][T31670] ? check_stack_object+0x5a/0x90 [ 2519.642090][T31670] ion_ioctl+0x2e8/0x9c0 [ 2519.646308][T31670] ? get_pid_task+0x86/0x90 [ 2519.650799][T31670] ? proc_fail_nth_write+0x18f/0x250 [ 2519.656061][T31670] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.661242][T31670] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2519.666440][T31670] ? memset+0x1f/0x40 [ 2519.670398][T31670] ? fsnotify+0x13a0/0x1460 [ 2519.674873][T31670] ? debug_shrink_set+0x1b0/0x1b0 [ 2519.679868][T31670] do_vfs_ioctl+0x770/0x1750 [ 2519.684438][T31670] ? selinux_file_ioctl+0x73b/0x990 [ 2519.689615][T31670] ? ioctl_preallocate+0x250/0x250 [ 2519.694717][T31670] ? __fget+0x37c/0x3c0 [ 2519.698862][T31670] ? vfs_write+0x427/0x4f0 [ 2519.703270][T31670] ? fget_many+0x20/0x20 [ 2519.707499][T31670] ? ksys_write+0x25d/0x2c0 [ 2519.711975][T31670] ? file_open_root+0x450/0x450 [ 2519.716800][T31670] ? security_file_ioctl+0xad/0xc0 [ 2519.722431][T31670] __x64_sys_ioctl+0xd4/0x110 [ 2519.727090][T31670] do_syscall_64+0xcb/0x150 [ 2519.731572][T31670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2519.737458][T31670] RIP: 0033:0x45ce69 [ 2519.741422][T31670] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2519.761089][T31670] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2519.769470][T31670] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 17:13:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x7ffff000) 17:13:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x34, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000002c0)={0x8, 0x0, 0x9}) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0xdf5, 0x21f6, 0x0, 0x3}, 0x14) r4 = open$dir(&(0x7f0000000240)='./file0\x00', 0x101000, 0x12) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000280)={0x7, 0xfffffffffffffaa8}) splice(r1, 0x0, r3, 0x0, 0xe8ba, 0x0) r5 = open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x1000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)="5c9b89f3cb5954d63a4196d5b39f75d6d55d3a2105bd294f374266a76fc3d7a5fe9b22c04a92dd9bf067fad3e18a17b933594694f157a4f21178660c4777694b089ec0fcff7491ca6a86edc4a0014db6aeb7c15dc1f81eb464702878a7858164b67593ac0f83a1ea57c85c1a36f4bd2c2bb05c17ecc56d6cacd871d0ad37a09853037822dde9f016d8270a0b15603de4856ae0900d2e768a0d060eda5f85e428e0ef96e70d", &(0x7f00000000c0)=""/94, &(0x7f0000000140), &(0x7f0000000340)="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", 0x6, r5}, 0x38) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x80ffff, 0xffffffffffffff9c}) 17:13:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'hsr0\x00', {0xdef}}) 17:13:50 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:50 executing program 1 (fault-call:1 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) [ 2519.777584][T31670] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2519.785533][T31670] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.793560][T31670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2519.801523][T31670] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c [ 2519.842470][T31684] FAULT_INJECTION: forcing a failure. [ 2519.842470][T31684] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.844485][T31686] FAULT_INJECTION: forcing a failure. [ 2519.844485][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.861968][T31684] CPU: 0 PID: 31684 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2519.883317][T31684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.893362][T31684] Call Trace: [ 2519.896637][T31684] dump_stack+0x14a/0x1ce [ 2519.900950][T31684] ? devkmsg_release+0x11c/0x11c [ 2519.905880][T31684] ? show_regs_print_info+0x12/0x12 [ 2519.911066][T31684] should_fail+0x6fb/0x860 [ 2519.915556][T31684] ? setup_fault_attr+0x3d0/0x3d0 [ 2519.920576][T31684] ? mutex_lock+0xa6/0x110 [ 2519.924995][T31684] ? mutex_trylock+0xb0/0xb0 [ 2519.929587][T31684] ? ion_system_heap_allocate+0x584/0xbf0 [ 2519.935297][T31684] should_failslab+0x5/0x20 [ 2519.939877][T31684] kmem_cache_alloc_trace+0x39/0x280 [ 2519.945147][T31684] ? ion_page_pool_alloc+0x2c1/0x490 [ 2519.950418][T31684] ion_system_heap_allocate+0x584/0xbf0 [ 2519.955953][T31684] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2519.961931][T31684] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2519.967377][T31684] ? arch_stack_walk+0xd8/0x120 [ 2519.972208][T31684] ion_buffer_alloc+0x20f/0x630 [ 2519.977039][T31684] ion_dmabuf_alloc+0xcb/0x230 [ 2519.981966][T31684] ? track_buffer_created+0x1c0/0x1c0 [ 2519.987320][T31684] ? check_stack_object+0x5a/0x90 [ 2519.992332][T31684] ion_ioctl+0x2e8/0x9c0 [ 2519.996554][T31684] ? get_pid_task+0x86/0x90 [ 2520.001032][T31684] ? proc_fail_nth_write+0x18f/0x250 [ 2520.006294][T31684] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.011297][T31684] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2520.016466][T31684] ? memset+0x1f/0x40 [ 2520.020422][T31684] ? fsnotify+0x13a0/0x1460 [ 2520.024899][T31684] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.029985][T31684] do_vfs_ioctl+0x770/0x1750 [ 2520.034565][T31684] ? selinux_file_ioctl+0x73b/0x990 [ 2520.039753][T31684] ? ioctl_preallocate+0x250/0x250 [ 2520.044845][T31684] ? __fget+0x37c/0x3c0 [ 2520.048977][T31684] ? vfs_write+0x427/0x4f0 [ 2520.053371][T31684] ? fget_many+0x20/0x20 [ 2520.057590][T31684] ? ksys_write+0x25d/0x2c0 [ 2520.062068][T31684] ? file_open_root+0x450/0x450 [ 2520.066905][T31684] ? security_file_ioctl+0xad/0xc0 [ 2520.072002][T31684] __x64_sys_ioctl+0xd4/0x110 [ 2520.076666][T31684] do_syscall_64+0xcb/0x150 [ 2520.081149][T31684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2520.087015][T31684] RIP: 0033:0x45ce69 [ 2520.090886][T31684] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2520.110465][T31684] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.118880][T31684] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2520.127004][T31684] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.135043][T31684] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 17:13:50 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) [ 2520.143000][T31684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2520.150947][T31684] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2520.158904][T31686] CPU: 1 PID: 31686 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2520.169138][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.179181][T31686] Call Trace: [ 2520.180071][T31692] FAULT_INJECTION: forcing a failure. [ 2520.180071][T31692] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.182470][T31686] dump_stack+0x14a/0x1ce [ 2520.182484][T31686] ? devkmsg_release+0x11c/0x11c [ 2520.204259][T31686] ? show_regs_print_info+0x12/0x12 [ 2520.209475][T31686] should_fail+0x6fb/0x860 [ 2520.213892][T31686] ? setup_fault_attr+0x3d0/0x3d0 [ 2520.218933][T31686] ? security_inode_alloc+0x32/0x1f0 [ 2520.224223][T31686] should_failslab+0x5/0x20 [ 2520.228911][T31686] kmem_cache_alloc+0x36/0x260 [ 2520.233691][T31686] ? from_kuid_munged+0x3b0/0x3b0 [ 2520.238712][T31686] security_inode_alloc+0x32/0x1f0 [ 2520.243812][T31686] inode_init_always+0x37c/0x800 [ 2520.248735][T31686] new_inode_pseudo+0x7b/0x240 [ 2520.253494][T31686] alloc_anon_inode+0x1a/0x2e0 [ 2520.258256][T31686] dma_buf_export+0x433/0x7b0 [ 2520.262950][T31686] ion_dmabuf_alloc+0x199/0x230 [ 2520.267786][T31686] ? track_buffer_created+0x1c0/0x1c0 [ 2520.273138][T31686] ? check_stack_object+0x5a/0x90 [ 2520.278666][T31686] ion_ioctl+0x2e8/0x9c0 [ 2520.282894][T31686] ? get_pid_task+0x86/0x90 [ 2520.287384][T31686] ? proc_fail_nth_write+0x18f/0x250 [ 2520.292663][T31686] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.298243][T31686] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2520.304035][T31686] ? memset+0x1f/0x40 [ 2520.308003][T31686] ? fsnotify+0x13a0/0x1460 [ 2520.312513][T31686] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.317532][T31686] do_vfs_ioctl+0x770/0x1750 [ 2520.322105][T31686] ? selinux_file_ioctl+0x73b/0x990 [ 2520.327283][T31686] ? ioctl_preallocate+0x250/0x250 [ 2520.332404][T31686] ? __fget+0x37c/0x3c0 [ 2520.336544][T31686] ? vfs_write+0x427/0x4f0 [ 2520.340969][T31686] ? fget_many+0x20/0x20 [ 2520.345209][T31686] ? ksys_write+0x25d/0x2c0 [ 2520.349716][T31686] ? file_open_root+0x450/0x450 [ 2520.354574][T31686] ? security_file_ioctl+0xad/0xc0 [ 2520.359672][T31686] __x64_sys_ioctl+0xd4/0x110 [ 2520.364334][T31686] do_syscall_64+0xcb/0x150 [ 2520.368977][T31686] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2520.374865][T31686] RIP: 0033:0x45ce69 [ 2520.378748][T31686] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2520.398595][T31686] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.407073][T31686] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2520.415149][T31686] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.423101][T31686] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.431061][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2520.439019][T31686] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c [ 2520.446981][T31692] CPU: 0 PID: 31692 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2520.457126][T31692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.467176][T31692] Call Trace: [ 2520.470469][T31692] dump_stack+0x14a/0x1ce [ 2520.474789][T31692] ? devkmsg_release+0x11c/0x11c [ 2520.479805][T31692] ? show_regs_print_info+0x12/0x12 [ 2520.484999][T31692] should_fail+0x6fb/0x860 [ 2520.489410][T31692] ? setup_fault_attr+0x3d0/0x3d0 17:13:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x60, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r4}, {r3, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x4020) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) splice(r5, 0x0, r6, 0x0, 0xe8ba, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000000)=""/165) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0xff, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 17:13:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2520.494429][T31692] ? sg_alloc_table+0x108/0x630 [ 2520.499364][T31692] should_failslab+0x5/0x20 [ 2520.503868][T31692] __kmalloc+0x5f/0x2d0 [ 2520.508027][T31692] sg_alloc_table+0x108/0x630 [ 2520.512709][T31692] ion_system_heap_allocate+0x5ab/0xbf0 [ 2520.518254][T31692] ? ion_system_heap_destroy_pools+0x70/0x70 [ 2520.524318][T31692] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2520.529969][T31692] ? arch_stack_walk+0xd8/0x120 [ 2520.534914][T31692] ion_buffer_alloc+0x20f/0x630 [ 2520.539968][T31692] ion_dmabuf_alloc+0xcb/0x230 [ 2520.544715][T31692] ? track_buffer_created+0x1c0/0x1c0 [ 2520.550068][T31692] ? check_stack_object+0x5a/0x90 [ 2520.555162][T31692] ion_ioctl+0x2e8/0x9c0 [ 2520.559480][T31692] ? get_pid_task+0x86/0x90 [ 2520.564039][T31692] ? proc_fail_nth_write+0x18f/0x250 [ 2520.570415][T31692] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.580914][T31692] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2520.586354][T31692] ? memset+0x1f/0x40 [ 2520.590418][T31692] ? fsnotify+0x13a0/0x1460 [ 2520.594906][T31692] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.599908][T31692] do_vfs_ioctl+0x770/0x1750 [ 2520.604478][T31692] ? selinux_file_ioctl+0x73b/0x990 [ 2520.610782][T31692] ? ioctl_preallocate+0x250/0x250 [ 2520.615872][T31692] ? __fget+0x37c/0x3c0 [ 2520.620003][T31692] ? vfs_write+0x427/0x4f0 [ 2520.624409][T31692] ? fget_many+0x20/0x20 [ 2520.629777][T31692] ? ksys_write+0x25d/0x2c0 [ 2520.634863][T31692] ? file_open_root+0x450/0x450 [ 2520.640039][T31692] ? security_file_ioctl+0xad/0xc0 [ 2520.645191][T31692] __x64_sys_ioctl+0xd4/0x110 [ 2520.650050][T31692] do_syscall_64+0xcb/0x150 [ 2520.654725][T31692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2520.660618][T31692] RIP: 0033:0x45ce69 [ 2520.664929][T31692] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2520.685416][T31692] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2520.693846][T31692] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2520.701917][T31692] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2520.709873][T31692] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2520.718701][T31692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 17:13:51 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x5c) 17:13:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x2, 0x0, 0x3}]}}}}}}, 0x0) 17:13:51 executing program 1 (fault-call:1 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) 17:13:51 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r3, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r6, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec01000028002787bddb4543e396540d00000000", @ANYRES32=r9, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x158, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x44}, 0x2040) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x1, 0xffffffffffffff9c}) 17:13:51 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) [ 2520.735140][T31692] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2520.790160][T31722] FAULT_INJECTION: forcing a failure. [ 2520.790160][T31722] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.798937][T31723] FAULT_INJECTION: forcing a failure. [ 2520.798937][T31723] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.806888][T31722] CPU: 0 PID: 31722 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2520.829378][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.839662][T31722] Call Trace: [ 2520.842948][T31722] dump_stack+0x14a/0x1ce [ 2520.847258][T31722] ? devkmsg_release+0x11c/0x11c [ 2520.852214][T31722] ? show_regs_print_info+0x12/0x12 [ 2520.857736][T31722] ? memset+0x1f/0x40 [ 2520.861703][T31722] ? sg_alloc_table+0x313/0x630 [ 2520.866536][T31722] ? sg_next+0x8b/0xa0 [ 2520.870588][T31722] should_fail+0x6fb/0x860 [ 2520.875002][T31722] ? setup_fault_attr+0x3d0/0x3d0 [ 2520.880007][T31722] ? __up_read+0x6f/0x1b0 [ 2520.884317][T31722] ? _raw_spin_lock+0xa1/0x170 [ 2520.889065][T31722] ? kzalloc+0x1b/0x30 [ 2520.893722][T31722] should_failslab+0x5/0x20 [ 2520.898232][T31722] __kmalloc+0x5f/0x2d0 [ 2520.902370][T31722] kzalloc+0x1b/0x30 [ 2520.906242][T31722] dma_buf_export+0x166/0x7b0 [ 2520.910905][T31722] ion_dmabuf_alloc+0x199/0x230 [ 2520.915735][T31722] ? track_buffer_created+0x1c0/0x1c0 [ 2520.921226][T31722] ? check_stack_object+0x5a/0x90 [ 2520.926235][T31722] ion_ioctl+0x2e8/0x9c0 [ 2520.930475][T31722] ? get_pid_task+0x86/0x90 [ 2520.934966][T31722] ? proc_fail_nth_write+0x18f/0x250 [ 2520.940249][T31722] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.945261][T31722] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2520.950523][T31722] ? memset+0x1f/0x40 [ 2520.954484][T31722] ? fsnotify+0x13a0/0x1460 [ 2520.958966][T31722] ? debug_shrink_set+0x1b0/0x1b0 [ 2520.963972][T31722] do_vfs_ioctl+0x770/0x1750 [ 2520.968636][T31722] ? selinux_file_ioctl+0x73b/0x990 [ 2520.973817][T31722] ? ioctl_preallocate+0x250/0x250 [ 2520.978914][T31722] ? __fget+0x37c/0x3c0 [ 2520.983050][T31722] ? vfs_write+0x427/0x4f0 [ 2520.987466][T31722] ? fget_many+0x20/0x20 [ 2520.991683][T31722] ? ksys_write+0x25d/0x2c0 [ 2520.996251][T31722] ? file_open_root+0x450/0x450 [ 2521.001095][T31722] ? security_file_ioctl+0xad/0xc0 [ 2521.007288][T31722] __x64_sys_ioctl+0xd4/0x110 [ 2521.012041][T31722] do_syscall_64+0xcb/0x150 [ 2521.016525][T31722] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2521.022396][T31722] RIP: 0033:0x45ce69 [ 2521.026876][T31722] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2521.046545][T31722] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2521.054943][T31722] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2521.062893][T31722] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2521.070843][T31722] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.079055][T31722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2521.087587][T31722] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2521.096016][T31723] CPU: 1 PID: 31723 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2521.106352][T31723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.116395][T31723] Call Trace: [ 2521.119666][T31723] dump_stack+0x14a/0x1ce [ 2521.123991][T31723] ? devkmsg_release+0x11c/0x11c [ 2521.129086][T31723] ? show_regs_print_info+0x12/0x12 [ 2521.134300][T31723] should_fail+0x6fb/0x860 [ 2521.138792][T31723] ? setup_fault_attr+0x3d0/0x3d0 [ 2521.143794][T31723] ? __d_alloc+0x2a/0x6b0 [ 2521.148800][T31723] should_failslab+0x5/0x20 [ 2521.153289][T31723] kmem_cache_alloc+0x36/0x260 [ 2521.158025][T31723] __d_alloc+0x2a/0x6b0 [ 2521.162162][T31723] d_alloc_pseudo+0x19/0x70 [ 2521.166664][T31723] alloc_file_pseudo+0x15b/0x340 [ 2521.171575][T31723] ? alloc_empty_file_noaccount+0x70/0x70 [ 2521.177301][T31723] ? alloc_anon_inode+0x213/0x2e0 [ 2521.182754][T31723] ? memcpy+0x38/0x50 [ 2521.186748][T31723] ? alloc_anon_inode+0x213/0x2e0 [ 2521.191846][T31723] dma_buf_export+0x4e0/0x7b0 [ 2521.196501][T31723] ion_dmabuf_alloc+0x199/0x230 [ 2521.201334][T31723] ? track_buffer_created+0x1c0/0x1c0 [ 2521.207239][T31723] ? check_stack_object+0x5a/0x90 [ 2521.212403][T31723] ion_ioctl+0x2e8/0x9c0 [ 2521.217523][T31723] ? preempt_schedule_irq+0xe7/0x140 [ 2521.222919][T31723] ? preempt_schedule_notrace+0x130/0x130 [ 2521.228655][T31723] ? proc_fail_nth_write+0x18f/0x250 [ 2521.233948][T31723] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.238949][T31723] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2521.244283][T31723] ? retint_kernel+0x1b/0x1b [ 2521.248869][T31723] ? do_vfs_ioctl+0xdd/0x1750 [ 2521.253531][T31723] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.258534][T31723] do_vfs_ioctl+0x770/0x1750 [ 2521.263119][T31723] ? selinux_file_ioctl+0x73b/0x990 [ 2521.268296][T31723] ? ioctl_preallocate+0x250/0x250 [ 2521.273428][T31723] ? _raw_spin_unlock_irq+0x5/0x20 [ 2521.278602][T31723] ? finish_task_switch+0x235/0x4c0 [ 2521.283796][T31723] ? __fget+0x37c/0x3c0 [ 2521.287930][T31723] ? fget_many+0x20/0x20 [ 2521.292149][T31723] ? __fpregs_load_activate+0x2d3/0x390 [ 2521.297681][T31723] ? security_file_ioctl+0xad/0xc0 [ 2521.302863][T31723] __x64_sys_ioctl+0xd4/0x110 [ 2521.307778][T31723] do_syscall_64+0xcb/0x150 [ 2521.312349][T31723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2521.319096][T31723] RIP: 0033:0x45ce69 17:13:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x3, 0x0, 0x3}]}}}}}}, 0x0) 17:13:51 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 17:13:51 executing program 1 (fault-call:1 fault-nth:8): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xf}) [ 2521.322970][T31723] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2521.343085][T31723] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2521.351478][T31723] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2521.359546][T31723] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2521.367514][T31723] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.375473][T31723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2521.384115][T31723] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c 17:13:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) [ 2521.411837][T31729] FAULT_INJECTION: forcing a failure. [ 2521.411837][T31729] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.428598][T31729] CPU: 1 PID: 31729 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2521.438859][T31729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.448911][T31729] Call Trace: [ 2521.452209][T31729] dump_stack+0x14a/0x1ce [ 2521.456519][T31729] ? devkmsg_release+0x11c/0x11c [ 2521.461433][T31729] ? show_regs_print_info+0x12/0x12 [ 2521.465955][T31734] FAULT_INJECTION: forcing a failure. [ 2521.465955][T31734] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.466626][T31729] should_fail+0x6fb/0x860 [ 2521.466639][T31729] ? setup_fault_attr+0x3d0/0x3d0 [ 2521.488643][T31729] ? new_inode_pseudo+0x131/0x240 [ 2521.493653][T31729] should_failslab+0x5/0x20 [ 2521.498145][T31729] kmem_cache_alloc+0x36/0x260 [ 2521.502923][T31729] ? kzalloc+0x1b/0x30 [ 2521.507004][T31729] new_inode_pseudo+0x131/0x240 [ 2521.511841][T31729] alloc_anon_inode+0x1a/0x2e0 [ 2521.516597][T31729] dma_buf_export+0x433/0x7b0 [ 2521.521261][T31729] ion_dmabuf_alloc+0x199/0x230 [ 2521.526093][T31729] ? track_buffer_created+0x1c0/0x1c0 [ 2521.531464][T31729] ? check_stack_object+0x5a/0x90 [ 2521.536485][T31729] ion_ioctl+0x2e8/0x9c0 [ 2521.540712][T31729] ? get_pid_task+0x86/0x90 [ 2521.545210][T31729] ? proc_fail_nth_write+0x18f/0x250 [ 2521.550489][T31729] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.555495][T31729] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2521.560682][T31729] ? memset+0x1f/0x40 [ 2521.564641][T31729] ? fsnotify+0x13a0/0x1460 [ 2521.569120][T31729] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.574236][T31729] do_vfs_ioctl+0x770/0x1750 [ 2521.578899][T31729] ? selinux_file_ioctl+0x73b/0x990 [ 2521.584106][T31729] ? ioctl_preallocate+0x250/0x250 [ 2521.589223][T31729] ? __fget+0x37c/0x3c0 [ 2521.593361][T31729] ? vfs_write+0x427/0x4f0 [ 2521.597759][T31729] ? fget_many+0x20/0x20 [ 2521.602250][T31729] ? ksys_write+0x25d/0x2c0 [ 2521.606738][T31729] ? file_open_root+0x450/0x450 [ 2521.611569][T31729] ? security_file_ioctl+0xad/0xc0 [ 2521.617009][T31729] __x64_sys_ioctl+0xd4/0x110 [ 2521.621686][T31729] do_syscall_64+0xcb/0x150 [ 2521.626166][T31729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2521.632575][T31729] RIP: 0033:0x45ce69 [ 2521.636451][T31729] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2521.656324][T31729] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2521.664719][T31729] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2521.674154][T31729] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2521.682106][T31729] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2521.690063][T31729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2521.698379][T31729] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c 17:13:52 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r3}, {r4, 0x8300}], 0x2, 0x0, 0x0, 0x0) 17:13:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x2, 0x3}]}}}}}}, 0x0) 17:13:52 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) [ 2521.706361][T31734] CPU: 0 PID: 31734 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2521.716502][T31734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.726541][T31734] Call Trace: [ 2521.729837][T31734] dump_stack+0x14a/0x1ce [ 2521.734160][T31734] ? devkmsg_release+0x11c/0x11c [ 2521.739095][T31734] ? show_regs_print_info+0x12/0x12 [ 2521.744288][T31734] should_fail+0x6fb/0x860 [ 2521.749498][T31734] ? setup_fault_attr+0x3d0/0x3d0 [ 2521.754625][T31734] ? __alloc_file+0x26/0x390 [ 2521.759317][T31734] should_failslab+0x5/0x20 [ 2521.764003][T31734] kmem_cache_alloc+0x36/0x260 [ 2521.764566][T31747] FAULT_INJECTION: forcing a failure. [ 2521.764566][T31747] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.768785][T31734] ? _raw_spin_trylock_bh+0x190/0x190 [ 2521.768797][T31734] __alloc_file+0x26/0x390 [ 2521.768810][T31734] ? alloc_empty_file+0x49/0x1b0 [ 2521.796070][T31734] alloc_empty_file+0xa9/0x1b0 [ 2521.800842][T31734] alloc_file+0x58/0x4a0 [ 2521.805157][T31734] alloc_file_pseudo+0x28c/0x340 [ 2521.810070][T31734] ? alloc_empty_file_noaccount+0x70/0x70 [ 2521.815938][T31734] ? alloc_anon_inode+0x213/0x2e0 [ 2521.820936][T31734] ? memcpy+0x38/0x50 [ 2521.825008][T31734] ? alloc_anon_inode+0x213/0x2e0 [ 2521.830017][T31734] dma_buf_export+0x4e0/0x7b0 [ 2521.834706][T31734] ion_dmabuf_alloc+0x199/0x230 [ 2521.840160][T31734] ? track_buffer_created+0x1c0/0x1c0 [ 2521.845981][T31734] ? check_stack_object+0x5a/0x90 [ 2521.851005][T31734] ion_ioctl+0x2e8/0x9c0 [ 2521.855223][T31734] ? get_pid_task+0x86/0x90 [ 2521.859707][T31734] ? proc_fail_nth_write+0x18f/0x250 [ 2521.864981][T31734] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.871062][T31734] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2521.876256][T31734] ? memset+0x1f/0x40 [ 2521.880221][T31734] ? fsnotify+0x13a0/0x1460 [ 2521.884712][T31734] ? debug_shrink_set+0x1b0/0x1b0 [ 2521.889829][T31734] do_vfs_ioctl+0x770/0x1750 [ 2521.894425][T31734] ? selinux_file_ioctl+0x73b/0x990 [ 2521.899602][T31734] ? ioctl_preallocate+0x250/0x250 [ 2521.904691][T31734] ? __fget+0x37c/0x3c0 [ 2521.908844][T31734] ? vfs_write+0x427/0x4f0 [ 2521.913256][T31734] ? fget_many+0x20/0x20 [ 2521.919275][T31734] ? ksys_write+0x25d/0x2c0 [ 2521.924374][T31734] ? file_open_root+0x450/0x450 [ 2521.929937][T31734] ? security_file_ioctl+0xad/0xc0 [ 2521.935555][T31734] __x64_sys_ioctl+0xd4/0x110 [ 2521.940216][T31734] do_syscall_64+0xcb/0x150 [ 2521.945148][T31734] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2521.951500][T31734] RIP: 0033:0x45ce69 [ 2521.955467][T31734] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2521.975169][T31734] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2521.983566][T31734] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2521.991513][T31734] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2522.000241][T31734] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.008898][T31734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2522.016864][T31734] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c [ 2522.024848][T31747] CPU: 1 PID: 31747 Comm: syz-executor.0 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2522.025692][T31734] kasan: CONFIG_KASAN_INLINE enabled [ 2522.035362][T31747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.035364][T31747] Call Trace: [ 2522.035381][T31747] dump_stack+0x14a/0x1ce [ 2522.035390][T31747] ? devkmsg_release+0x11c/0x11c [ 2522.035402][T31747] ? show_regs_print_info+0x12/0x12 [ 2522.041957][T31734] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2522.054264][T31747] should_fail+0x6fb/0x860 [ 2522.054273][T31747] ? setup_fault_attr+0x3d0/0x3d0 [ 2522.054284][T31747] ? security_inode_alloc+0x32/0x1f0 [ 2522.054296][T31747] should_failslab+0x5/0x20 [ 2522.058575][T31734] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2522.062605][T31747] kmem_cache_alloc+0x36/0x260 [ 2522.067793][T31734] CPU: 0 PID: 31734 Comm: syz-executor.1 Not tainted 5.4.57-syzkaller-00030-g99256a8c206b #0 [ 2522.072966][T31747] ? from_kuid_munged+0x3b0/0x3b0 [ 2522.080998][T31734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.085408][T31747] security_inode_alloc+0x32/0x1f0 [ 2522.090417][T31734] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2522.095668][T31747] inode_init_always+0x37c/0x800 [ 2522.101180][T31734] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 45 08 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 d5 16 da [ 2522.108084][T31747] new_inode_pseudo+0x7b/0x240 [ 2522.112834][T31734] RSP: 0018:ffff8880054ef7e0 EFLAGS: 00010206 [ 2522.122968][T31747] alloc_anon_inode+0x1a/0x2e0 [ 2522.127977][T31734] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2522.138023][T31747] dma_buf_export+0x433/0x7b0 [ 2522.143134][T31734] RDX: ffffc90002c63000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2522.148583][T31747] ion_dmabuf_alloc+0x199/0x230 [ 2522.153486][T31734] RBP: dffffc0000000000 R08: ffffffff817b4faf R09: 0000000000000003 [ 2522.173074][T31747] ? track_buffer_created+0x1c0/0x1c0 [ 2522.177804][T31734] R10: ffffed1000a9dee5 R11: 0000000000000004 R12: 0000000000000000 [ 2522.183842][T31747] ? check_stack_object+0x5a/0x90 [ 2522.189274][T31734] R13: dffffc0000000000 R14: 1ffff1103a7bf066 R15: 1ffff1103a7bf078 [ 2522.189284][T31734] FS: 00007fc544451700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2522.197403][T31747] ion_ioctl+0x2e8/0x9c0 [ 2522.202065][T31734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2522.210013][T31747] ? get_pid_task+0x86/0x90 [ 2522.214827][T31734] CR2: 00000000004ea810 CR3: 00000001d18c7005 CR4: 00000000001606f0 [ 2522.224116][T31747] ? proc_fail_nth_write+0x18f/0x250 [ 2522.229455][T31734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2522.237403][T31747] ? debug_shrink_set+0x1b0/0x1b0 [ 2522.242390][T31734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2522.252345][T31747] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2522.261325][T31734] Call Trace: [ 2522.265543][T31747] ? memset+0x1f/0x40 [ 2522.272363][T31734] ? dma_buf_fs_init_context+0x60/0x60 [ 2522.278052][T31747] ? fsnotify+0x13a0/0x1460 [ 2522.286011][T31734] __dentry_kill+0x41b/0x5a0 [ 2522.291268][T31747] ? debug_shrink_set+0x1b0/0x1b0 [ 2522.299309][T31734] dput+0x2e1/0x5e0 [ 2522.304298][T31747] do_vfs_ioctl+0x770/0x1750 [ 2522.312261][T31734] path_put+0x35/0x60 [ 2522.317512][T31747] ? selinux_file_ioctl+0x73b/0x990 [ 2522.320783][T31734] alloc_file_pseudo+0x2ac/0x340 [ 2522.324735][T31747] ? ioctl_preallocate+0x250/0x250 [ 2522.330159][T31734] ? alloc_empty_file_noaccount+0x70/0x70 [ 2522.334955][T31747] ? __fget+0x37c/0x3c0 [ 2522.339543][T31734] ? alloc_anon_inode+0x213/0x2e0 [ 2522.345965][T31747] ? vfs_write+0x427/0x4f0 [ 2522.349745][T31734] ? memcpy+0x38/0x50 [ 2522.354301][T31747] ? fget_many+0x20/0x20 [ 2522.358425][T31734] ? alloc_anon_inode+0x213/0x2e0 [ 2522.364051][T31747] ? ksys_write+0x25d/0x2c0 [ 2522.369045][T31734] dma_buf_export+0x4e0/0x7b0 [ 2522.374135][T31747] ? file_open_root+0x450/0x450 [ 2522.382705][T31734] ion_dmabuf_alloc+0x199/0x230 [ 2522.386943][T31747] ? security_file_ioctl+0xad/0xc0 [ 2522.391965][T31734] ? track_buffer_created+0x1c0/0x1c0 [ 2522.396453][T31747] __x64_sys_ioctl+0xd4/0x110 [ 2522.400413][T31734] ? check_stack_object+0x5a/0x90 [ 2522.404633][T31747] do_syscall_64+0xcb/0x150 [ 2522.409626][T31734] ion_ioctl+0x2e8/0x9c0 [ 2522.414097][T31747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2522.418746][T31734] ? get_pid_task+0x86/0x90 [ 2522.423571][T31747] RIP: 0033:0x45ce69 [ 2522.428389][T31734] ? proc_fail_nth_write+0x18f/0x250 [ 2522.433488][T31747] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2522.438824][T31734] ? debug_shrink_set+0x1b0/0x1b0 [ 2522.443481][T31747] RSP: 002b:00007f7556e84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2522.448484][T31734] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2522.452948][T31747] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2522.457160][T31734] ? memset+0x1f/0x40 [ 2522.463029][T31747] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2522.467513][T31734] ? fsnotify+0x13a0/0x1460 [ 2522.471456][T31747] RBP: 00007f7556e84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.476711][T31734] ? debug_shrink_set+0x1b0/0x1b0 [ 2522.496283][T31747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2522.501293][T31734] do_vfs_ioctl+0x770/0x1750 [ 2522.510116][T31747] R13: 00007fff5f5f0f5f R14: 00007f7556e859c0 R15: 000000000118bf2c [ 2522.515286][T31734] ? selinux_file_ioctl+0x73b/0x990 [ 2522.582105][T31734] ? ioctl_preallocate+0x250/0x250 [ 2522.587195][T31734] ? __fget+0x37c/0x3c0 [ 2522.591321][T31734] ? vfs_write+0x427/0x4f0 [ 2522.595707][T31734] ? fget_many+0x20/0x20 [ 2522.599917][T31734] ? ksys_write+0x25d/0x2c0 [ 2522.604387][T31734] ? file_open_root+0x450/0x450 [ 2522.609214][T31734] ? security_file_ioctl+0xad/0xc0 [ 2522.614297][T31734] __x64_sys_ioctl+0xd4/0x110 [ 2522.618983][T31734] do_syscall_64+0xcb/0x150 [ 2522.623457][T31734] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2522.629503][T31734] RIP: 0033:0x45ce69 [ 2522.633378][T31734] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2522.653134][T31734] RSP: 002b:00007fc544450c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2522.661509][T31734] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045ce69 [ 2522.669447][T31734] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 2522.677388][T31734] RBP: 00007fc544450ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2522.685340][T31734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 2522.693375][T31734] R13: 00007ffde0ae930f R14: 00007fc5444519c0 R15: 000000000118bf2c [ 2522.701321][T31734] Modules linked in: [ 2522.707973][T31734] ---[ end trace ed722fd4b0bb356c ]--- 17:13:53 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0xfa4) 17:13:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x3, 0x3}]}}}}}}, 0x0) 17:13:53 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000140)) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 2522.714207][T31734] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 2522.719907][T31734] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 45 08 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 d5 16 da [ 2522.739559][T31734] RSP: 0018:ffff8880054ef7e0 EFLAGS: 00010206 [ 2522.745618][T31734] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 2522.755841][T31734] RDX: ffffc90002c63000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2522.764069][T31734] RBP: dffffc0000000000 R08: ffffffff817b4faf R09: 0000000000000003 [ 2522.772091][T31734] R10: ffffed1000a9dee5 R11: 0000000000000004 R12: 0000000000000000 [ 2522.780087][T31734] R13: dffffc0000000000 R14: 1ffff1103a7bf066 R15: 1ffff1103a7bf078 [ 2522.788168][T31734] FS: 00007fc544451700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 2522.797422][T31734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2522.805675][T31734] CR2: 00000000004fe550 CR3: 00000001d18c7005 CR4: 00000000001606f0 [ 2522.815011][T31734] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2522.823016][T31734] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2522.831071][T31734] Kernel panic - not syncing: Fatal exception [ 2522.837716][T31734] Kernel Offset: disabled [ 2522.842035][T31734] Rebooting in 86400 seconds..