_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x24c}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x143260c26888b52f}, 0x801) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x0, 0x11, 0x7d, {0x7d, 0x23, "bccdfdac4311f89c37b512383437f623612521d0ec7b942fa7d37e2a2552648ca359706410e5817ca6c229bca884b304ce27341d5a64f49006b5e4290cb7bec54459fcc1fe9714e31831fe63631adc0fed67af12f964ba297e810f121aaffb8a1fb73d61c970b18d8bd1d1b6fb78872bb3b45a0942087cbcda80a3"}}, &(0x7f0000000300)={0x0, 0x3, 0x17, @string={0x17, 0x3, "d42e4346bab3cfed49b81b922b2c4be6e4c86558fb"}}, &(0x7f0000000340)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xb, "e227"}, @global=@item_4={0x3, 0x1, 0x0, "9284a9dc"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x20, 0x1, {0x22, 0x99a}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0xe, 0x4a, "c1b6fa3dd7f5a0cd05e756b4c36c3203fe7622cb5aa5ced269b625e66418d2bad6250433bd710325f188cb91bf56923f43d346490ae7c495b6aa0643ddb0306dacccdee82838a05af572"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xac}, &(0x7f0000000500)={0x20, 0x1, 0x3d, "52fef333498a974c5f45fc58132bcce71ce5d0be5b1afdfd0cb50ba53f2a2202958a3a8305bd041b5cc2e324b309e155b39f0f2945572eec9a5a9d3c8e"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:01 executing program 4 (fault-call:6 fault-nth:24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:01 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus', [], 0xa, "4d3ee98b7c8900a61cc661fc6c43ef87749aab032499a2f531a2f36f647ef51b8817df58a900b8c8652ec1aa8e3f945c8a17701caa43de0a9891b4a4ebd604b5c383cc7732c1209764c3ab96fc519bf091a8900ca35a56edd4dc51183b5b"}, 0x67) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x252a, 0x5, 0x3000000, [], [{}, {0x801, 0x0, 0x8000000}], [[], [], [], [], []]}) [ 997.139545][T23023] FAULT_INJECTION: forcing a failure. [ 997.139545][T23023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 997.146757][T23026] rtc_cmos 00:00: Alarms can be up to one day in the future [ 997.153180][ T22] audit: type=1400 audit(1597655041.455:26): avc: denied { create } for pid=23019 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 09:04:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 09:04:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x8000000000000000}, 0x0) [ 997.211358][T23023] CPU: 1 PID: 23023 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 997.221539][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.231588][T23023] Call Trace: [ 997.234876][T23023] dump_stack+0x14a/0x1ce [ 997.239210][T23023] ? devkmsg_release+0x11c/0x11c [ 997.244145][T23023] ? show_regs_print_info+0x12/0x12 [ 997.249373][T23023] ? stack_trace_save+0x123/0x1f0 [ 997.254392][T23023] ? kasan_alloc_pages+0x4a/0x60 [ 997.259331][T23023] should_fail+0x6fb/0x860 [ 997.263737][T23023] ? setup_fault_attr+0x3d0/0x3d0 [ 997.268766][T23023] __alloc_pages_nodemask+0x1ee/0x7c0 [ 997.274132][T23023] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 997.279652][T23023] ? __rcu_read_lock+0x50/0x50 [ 997.284389][T23023] handle_mm_fault+0x18e6/0x41e0 [ 997.289307][T23023] ? __pagevec_release+0x130/0x130 [ 997.294390][T23023] ? finish_fault+0x230/0x230 [ 997.299039][T23023] ? lru_add_drain_cpu+0x3d9/0x510 [ 997.304126][T23023] ? _raw_spin_unlock+0x5/0x20 [ 997.308863][T23023] ? follow_page_mask+0x76a/0x1050 [ 997.313949][T23023] __get_user_pages+0xca0/0x1420 [ 997.318860][T23023] ? populate_vma_page_range+0xf0/0xf0 [ 997.324471][T23023] ? memset+0x1f/0x40 [ 997.328428][T23023] ? vmacache_update+0x9f/0xf0 [ 997.333217][T23023] __mm_populate+0x3a0/0x560 [ 997.337779][T23023] ? __get_user_pages+0x1420/0x1420 [ 997.342952][T23023] ? ksys_write+0x25d/0x2c0 [ 997.347434][T23023] do_mlock+0x4a2/0x540 [ 997.351567][T23023] ? __ia32_sys_read+0x80/0x80 [ 997.356304][T23023] __x64_sys_mlock+0x5c/0x70 [ 997.360866][T23023] do_syscall_64+0xcb/0x150 [ 997.365348][T23023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 997.371211][T23023] RIP: 0033:0x45d239 [ 997.375104][T23023] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.394681][T23023] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 997.403068][T23023] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 997.411015][T23023] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 997.418959][T23023] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 997.426916][T23023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 997.434863][T23023] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:01 executing program 4 (fault-call:6 fault-nth:25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x9401000000000000}, 0x0) 09:04:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd4(r1, &(0x7f0000000000)={[0xbe]}, 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x6) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) [ 997.457935][ T150] usbhid 1-1:0.0: can't add hid device: -71 [ 997.463946][ T150] usbhid: probe of 1-1:0.0 failed with error -71 [ 997.483825][ T150] usb 1-1: USB disconnect, device number 27 [ 997.496555][T23048] FAULT_INJECTION: forcing a failure. [ 997.496555][T23048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 997.518569][T23048] CPU: 1 PID: 23048 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 997.528741][T23048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.538793][T23048] Call Trace: [ 997.542090][T23048] dump_stack+0x14a/0x1ce [ 997.546419][T23048] ? devkmsg_release+0x11c/0x11c [ 997.551356][T23048] ? show_regs_print_info+0x12/0x12 [ 997.556557][T23048] ? stack_trace_save+0x123/0x1f0 [ 997.561581][T23048] ? kasan_alloc_pages+0x4a/0x60 [ 997.566516][T23048] should_fail+0x6fb/0x860 [ 997.570927][T23048] ? setup_fault_attr+0x3d0/0x3d0 [ 997.575941][T23048] __alloc_pages_nodemask+0x1ee/0x7c0 [ 997.581291][T23048] ? apply_vma_lock_flags+0x296/0x390 [ 997.586647][T23048] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 997.592170][T23048] ? __rcu_read_lock+0x50/0x50 [ 997.596910][T23048] handle_mm_fault+0x18e6/0x41e0 [ 997.601822][T23048] ? __pagevec_release+0x130/0x130 [ 997.606906][T23048] ? finish_fault+0x230/0x230 [ 997.611552][T23048] ? lru_add_drain_cpu+0x3d9/0x510 [ 997.616641][T23048] ? _raw_spin_unlock+0x5/0x20 [ 997.621379][T23048] ? follow_page_mask+0x76a/0x1050 [ 997.626462][T23048] __get_user_pages+0xca0/0x1420 [ 997.631374][T23048] ? populate_vma_page_range+0xf0/0xf0 [ 997.636801][T23048] ? memset+0x1f/0x40 [ 997.640752][T23048] ? vmacache_update+0x9f/0xf0 [ 997.645487][T23048] __mm_populate+0x3a0/0x560 [ 997.650067][T23048] ? __get_user_pages+0x1420/0x1420 [ 997.655236][T23048] ? ksys_write+0x25d/0x2c0 [ 997.659718][T23048] do_mlock+0x4a2/0x540 [ 997.663847][T23048] ? __ia32_sys_read+0x80/0x80 [ 997.668676][T23048] __x64_sys_mlock+0x5c/0x70 [ 997.673239][T23048] do_syscall_64+0xcb/0x150 [ 997.677718][T23048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 997.683584][T23048] RIP: 0033:0x45d239 [ 997.687470][T23048] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.707047][T23048] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 997.715431][T23048] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 997.723376][T23048] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 997.731320][T23048] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 997.739262][T23048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 997.747203][T23048] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 997.756365][T13097] rtc_cmos 00:00: Alarms can be up to one day in the future [ 997.766494][T13097] rtc_cmos 00:00: Alarms can be up to one day in the future [ 997.782989][T13097] rtc_cmos 00:00: Alarms can be up to one day in the future [ 997.800683][T13097] rtc_cmos 00:00: Alarms can be up to one day in the future [ 997.816507][T13097] rtc rtc0: __rtc_set_alarm: err=-22 [ 998.057851][ T150] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 998.297794][ T150] usb 1-1: Invalid ep0 maxpacket: 64 [ 998.447819][ T150] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 998.687777][ T150] usb 1-1: Invalid ep0 maxpacket: 64 [ 998.693188][ T150] usb usb1-port1: attempt power cycle [ 999.407752][ T150] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 999.507790][ T150] usb 1-1: Invalid ep0 maxpacket: 64 [ 999.657750][ T150] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 999.747781][ T150] usb 1-1: Invalid ep0 maxpacket: 64 [ 999.753170][ T150] usb usb1-port1: unable to enumerate USB device 09:04:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x8c, 0xb, 0x0, {0x170, 0x100fe, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x10000000000000, &(0x7f0000000100)="654cfcfb2135852c7f558cae0f545ca5032a02feda56bae536f9333728463b0b657ce4a1162d7548a3fc501e12d348696001e0304adfa54c3cbdd90c4a1ea2a537fbcfc7eba19710fb3e9163485ac95b24e80ecba9856b6fadaa7fdf305004f4fe350166b296a7deb3748a58a46356af60a41fc8ce07bb7a8d9980c64f2e88601003ef200a279ca18d547a9eaf3c78ea4b3d1bfcf53c3399bddd139d4dddfc70d37e0179e53253912d1702b3d7cfb5359ed716e6828cb74f9baeaac446b8a09b26f71acd97828356") ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x9601000000000000}, 0x0) 09:04:04 executing program 4 (fault-call:6 fault-nth:26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:04 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x218, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x290f586da167e3ba}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) r10 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 999.984473][T23069] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1000.004508][T23070] FAULT_INJECTION: forcing a failure. [ 1000.004508][T23070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.018382][T23070] CPU: 1 PID: 23070 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1000.028530][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.038581][T23070] Call Trace: [ 1000.041871][T23070] dump_stack+0x14a/0x1ce [ 1000.046196][T23070] ? devkmsg_release+0x11c/0x11c [ 1000.051139][T23070] ? show_regs_print_info+0x12/0x12 [ 1000.056338][T23070] ? stack_trace_save+0x123/0x1f0 [ 1000.061345][T23070] ? kasan_alloc_pages+0x4a/0x60 [ 1000.066256][T23070] should_fail+0x6fb/0x860 [ 1000.070645][T23070] ? setup_fault_attr+0x3d0/0x3d0 [ 1000.075644][T23070] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1000.080989][T23070] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1000.086509][T23070] ? __rcu_read_lock+0x50/0x50 [ 1000.091249][T23070] handle_mm_fault+0x18e6/0x41e0 [ 1000.096161][T23070] ? __pagevec_release+0x130/0x130 [ 1000.101250][T23070] ? finish_fault+0x230/0x230 [ 1000.105899][T23070] ? lru_add_drain_cpu+0x3d9/0x510 [ 1000.110982][T23070] ? _raw_spin_unlock+0x5/0x20 [ 1000.115715][T23070] ? follow_page_mask+0x76a/0x1050 [ 1000.120795][T23070] __get_user_pages+0xca0/0x1420 [ 1000.125705][T23070] ? populate_vma_page_range+0xf0/0xf0 [ 1000.131133][T23070] ? memset+0x1f/0x40 09:04:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040c2110822400000000001090224007fc2010000000009040000010301000009210000000122050009858103000000798b9f9c0967da241ae0fcbdf6dc8a3c7f689dd795f3733120857ea8a6680e22d4489df434b60c5a5e34396e81cd486931daa5b9193639fc34e3dddba5fac1951faa851f812303ba6cc4aec6bcd43a04b1c7cbdd8b4b"], 0x0) syz_usb_disconnect(r0) r1 = socket$netlink(0x10, 0x3, 0xa) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_disconnect(r0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0x3ff}, {0x80000006, 0x0, 0x2, 0x1ff}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000080)=0x3) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRES16=r7, @ANYRESOCT], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="800004000000000000f144"], 0x0}, 0x0) 09:04:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100001050000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480003"], 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) 09:04:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0) 09:04:04 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x7, 0x10001, 0x2}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1000.135084][T23070] ? vmacache_update+0x9f/0xf0 [ 1000.139827][T23070] __mm_populate+0x3a0/0x560 [ 1000.144411][T23070] ? __get_user_pages+0x1420/0x1420 [ 1000.149603][T23070] ? ksys_write+0x25d/0x2c0 [ 1000.154094][T23070] do_mlock+0x4a2/0x540 [ 1000.158241][T23070] ? __ia32_sys_read+0x80/0x80 [ 1000.163001][T23070] __x64_sys_mlock+0x5c/0x70 [ 1000.167590][T23070] do_syscall_64+0xcb/0x150 [ 1000.172089][T23070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1000.177967][T23070] RIP: 0033:0x45d239 09:04:04 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) timer_create(0x2, &(0x7f0000000180)={0x0, 0x33, 0x0, @thr={&(0x7f0000000240)="f2a458bf19e6c7ef02a2c33225ea810a55167720f2657e9e56f3bad638aac648ed4f2e9c33b45b1c6d601c060c45a0018d0d85af52d7f35fe79c4c880c20c343e8a1e5cd704893a755a3e459d92dc93f9155cc057244088d121fc8ad36a37d49a1a7da798275c835e369a5182b943824fdf204fc6e36a8dca23023406dbf9424dc8390e31e7576ae626c01f4ce19b059fcf2c26cccafb35381f2672bdc94ba61eea3d2e8e4bfdf16dd9fb209802d8d0a7b3fbdfce48ce459387f3de8c34fb9f6750951aef38af1eb8214e69c11a86b2210c364d955ec20", &(0x7f0000000380)="2402d10f68642f374d1516fc567d2651b4720c6ddaf801a6b01b8ee60364c0003e27c174a8c9eb950d41a5f3b2bee8d53557280fe8a721760758b64b5d4fad113a7735ce7554f2fb1201c4e274ef8da41905c3da1661f802f4d7e9ad1878ca87f37bf700ff92f084717815f5bb2529ec0f38017b4b18299443455e4698a99873ab9f3bcd762d60ab29c9a8fbc55ddb4d1ea7baad61818289b4ca3fcfeb58f016c2053477bd72f118c91222c7951939a71bfc2109a1c87a61"}}, &(0x7f00000001c0)=0x0) timer_getoverrun(r4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010200000000000000050a00000808000640000000010502010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x81d0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f00000006c0)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) getsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@initdev, @rand_addr, @empty}, &(0x7f0000000480)=0xc) pipe(&(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1000.181856][T23070] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.201450][T23070] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1000.209856][T23070] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1000.217830][T23070] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1000.225796][T23070] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:04 executing program 4 (fault-call:6 fault-nth:27): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1000.233751][T23070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 1000.241704][T23070] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1000.268773][T23087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=23087 comm=syz-executor.5 09:04:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xeaffffff00000000}, 0x0) 09:04:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r3, 0x0, r5, 0x0, 0x10007, 0x0) [ 1000.308836][T23095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=23095 comm=syz-executor.5 [ 1000.326430][T23094] FAULT_INJECTION: forcing a failure. [ 1000.326430][T23094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.357669][T23094] CPU: 1 PID: 23094 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1000.367859][T23094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.377907][T23094] Call Trace: [ 1000.381198][T23094] dump_stack+0x14a/0x1ce [ 1000.385522][T23094] ? devkmsg_release+0x11c/0x11c [ 1000.390455][T23094] ? show_regs_print_info+0x12/0x12 [ 1000.395645][T23094] ? stack_trace_save+0x123/0x1f0 [ 1000.400668][T23094] ? kasan_alloc_pages+0x4a/0x60 [ 1000.405600][T23094] should_fail+0x6fb/0x860 [ 1000.410030][T23094] ? setup_fault_attr+0x3d0/0x3d0 [ 1000.415063][T23094] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1000.420435][T23094] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1000.425981][T23094] ? __rcu_read_lock+0x50/0x50 [ 1000.430745][T23094] handle_mm_fault+0x18e6/0x41e0 [ 1000.435681][T23094] ? __pagevec_release+0x130/0x130 [ 1000.440793][T23094] ? finish_fault+0x230/0x230 [ 1000.445469][T23094] ? lru_add_drain_cpu+0x3d9/0x510 [ 1000.450578][T23094] ? _raw_spin_unlock+0x5/0x20 [ 1000.455331][T23094] ? follow_page_mask+0x76a/0x1050 [ 1000.460435][T23094] __get_user_pages+0xca0/0x1420 [ 1000.465366][T23094] ? populate_vma_page_range+0xf0/0xf0 [ 1000.470810][T23094] ? memset+0x1f/0x40 [ 1000.474784][T23094] ? vmacache_update+0x9f/0xf0 [ 1000.479538][T23094] __mm_populate+0x3a0/0x560 [ 1000.484121][T23094] ? __get_user_pages+0x1420/0x1420 [ 1000.489312][T23094] ? ksys_write+0x25d/0x2c0 [ 1000.493810][T23094] do_mlock+0x4a2/0x540 [ 1000.497959][T23094] ? __ia32_sys_read+0x80/0x80 [ 1000.502717][T23094] __x64_sys_mlock+0x5c/0x70 [ 1000.507295][T23094] do_syscall_64+0xcb/0x150 [ 1000.511793][T23094] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1000.517670][T23094] RIP: 0033:0x45d239 [ 1000.521552][T23094] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.537674][T18559] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1000.541169][T23094] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1000.541181][T23094] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1000.541185][T23094] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1000.541190][T23094] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.541201][T23094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 1000.588947][T23094] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1000.917728][T18559] usb 1-1: config 194 has too many interfaces: 127, using maximum allowed: 32 [ 1000.926600][T18559] usb 1-1: config 194 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.936918][T18559] usb 1-1: config 194 has 0 interfaces, different from the descriptor's value: 127 [ 1000.946262][T18559] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1000.955300][T18559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.237754][T18559] usb 1-1: string descriptor 0 read error: -71 [ 1001.244830][T18559] usb 1-1: USB disconnect, device number 32 [ 1001.867598][T18559] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1002.137557][T18559] usb 1-1: device descriptor read/64, error 18 [ 1002.527534][T18559] usb 1-1: device descriptor read/64, error 18 [ 1002.797512][T18559] usb 1-1: new full-speed USB device number 34 using dummy_hcd 09:04:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xefffffff00000000}, 0x0) 09:04:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$netlink(0x10, 0x3, 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) splice(r6, 0x0, r5, 0x0, 0x10008, 0x2) 09:04:07 executing program 4 (fault-call:6 fault-nth:28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r0, 0xab9535e9a6578fc1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8, 0x10}]}, 0x1c}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) r2 = syz_io_uring_complete(r1) accept(r2, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80) [ 1002.995811][T23119] FAULT_INJECTION: forcing a failure. [ 1002.995811][T23119] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.009919][T23119] CPU: 0 PID: 23119 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1003.020077][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.030119][T23119] Call Trace: [ 1003.033402][T23119] dump_stack+0x14a/0x1ce [ 1003.037710][T23119] ? devkmsg_release+0x11c/0x11c [ 1003.042622][T23119] ? show_regs_print_info+0x12/0x12 [ 1003.047791][T23119] ? stack_trace_save+0x123/0x1f0 [ 1003.052786][T23119] ? kasan_alloc_pages+0x4a/0x60 [ 1003.057696][T23119] should_fail+0x6fb/0x860 [ 1003.062085][T23119] ? setup_fault_attr+0x3d0/0x3d0 [ 1003.067081][T23119] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1003.072426][T23119] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1003.077948][T23119] ? __rcu_read_lock+0x50/0x50 [ 1003.082689][T23119] handle_mm_fault+0x18e6/0x41e0 [ 1003.087597][T23119] ? __pagevec_release+0x130/0x130 [ 1003.092682][T23119] ? finish_fault+0x230/0x230 [ 1003.097328][T23119] ? lru_add_drain_cpu+0x3d9/0x510 [ 1003.102418][T23119] ? _raw_spin_unlock+0x5/0x20 [ 1003.107156][T23119] ? follow_page_mask+0x76a/0x1050 [ 1003.112241][T23119] __get_user_pages+0xca0/0x1420 [ 1003.117152][T23119] ? populate_vma_page_range+0xf0/0xf0 [ 1003.122585][T23119] ? memset+0x1f/0x40 [ 1003.126538][T23119] ? vmacache_update+0x9f/0xf0 [ 1003.131275][T23119] __mm_populate+0x3a0/0x560 [ 1003.135855][T23119] ? __get_user_pages+0x1420/0x1420 [ 1003.141026][T23119] ? ksys_write+0x25d/0x2c0 [ 1003.145502][T23119] do_mlock+0x4a2/0x540 [ 1003.149629][T23119] ? __ia32_sys_read+0x80/0x80 [ 1003.154366][T23119] __x64_sys_mlock+0x5c/0x70 [ 1003.158930][T23119] do_syscall_64+0xcb/0x150 [ 1003.163412][T23119] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1003.169382][T23119] RIP: 0033:0x45d239 [ 1003.173254][T23119] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.192833][T23119] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1003.201221][T23119] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1003.209164][T23119] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1003.217108][T23119] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.225052][T23119] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 1003.233000][T23119] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000d, 0x30, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4114) 09:04:07 executing program 1: unshare(0x64040600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000025c0)={0xb5, 0x5, [], [@pad1, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x2, [0x0]}}, @ra={0x5, 0x2, 0x7fff}]}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe}, 0x1, 0x0, 0xb803, 0x20040011}, 0x24040010) 09:04:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0) 09:04:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) ptrace$getenv(0x4201, r2, 0x4000000008, &(0x7f0000000000)) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "9758fce8"}]}}, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = dup2(r4, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) [ 1003.247634][T18559] usb 1-1: device descriptor read/64, error 18 09:04:07 executing program 4 (fault-call:6 fault-nth:29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:07 executing program 5: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000440)=0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmmsg(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="45b4205031e75666236e809903c431134188bf986965b8562212a8e0b9304a8c0b53b3544dc9550d70e14085d0d5f69a0f7aefdb2c0d037eaede42a19277e18e878d7ab6a8cad6cf39f9395073a8ce9321fc0fd94e5ab842386a5e6437c16c523cc6b3e2eb168a04612f91d8d32de98bb6c6a3b4c4aec3f7e9800af1eac82889d7dc17b6b6c4f6861f721ef065e29e47eb05becb5e517ac7c2ade93d48bd356ac29fd64e547bd7", 0xa7}, {&(0x7f0000000180)="67486b76ab85918100d649da95df311fbf920a54a413beda3b79eb769533c4cb21f96df79cfbd358a32e91f4da69ec5a4be96b0e1665d74f831bdd6bc025fe9c5e138e54e4fc5710a6b0dd27c5", 0x4d}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x110}}], 0x1, 0x200400c0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0x2}]}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dfc9f75372001a9c60f7", @ANYRES16=r8, @ANYBLOB="010000000000000001007564640014000280f100e229ff5f0000d676040000000000e252b1390856d166b9f8a2e70a5aa689a1a905dab380cbf8b26f0000e0467d7e1dc6d1fe1a82bcf4230d87637ccd95ea9e22fc7ceda21ba93f70261d5d89e4e9e84a5efb13"], 0x34}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="000228bd7000ffdbdf25140000001c0009800800010006000000080002000800000008000100000800004400028008000100aa00000008000200022b00000004000400080002000101000008000200c81a00000c0003800800020001040000080002000500006908000100fbffffff140004800900010073797a3100000000040007da6eb20bb53d8e5b21d7b326d3f29c3bb4eb03f5361e1172d2888af0cee1d4858e7f3f6bbd04a6846a342b65ec17a81fd931f8fa0d810c6afeb89a9678ceb57cdd92ae12a1b0143bbd09d71040a1da8ed20d3046541029523a0239"], 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x20000015) sched_setparam(0x0, &(0x7f0000000580)=0x20) [ 1003.359638][T23143] FAULT_INJECTION: forcing a failure. [ 1003.359638][T23143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.374331][T23143] CPU: 0 PID: 23143 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1003.384501][T23143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.394541][T23143] Call Trace: [ 1003.397825][T23143] dump_stack+0x14a/0x1ce [ 1003.402130][T23143] ? devkmsg_release+0x11c/0x11c [ 1003.407038][T23143] ? show_regs_print_info+0x12/0x12 [ 1003.412210][T23143] ? stack_trace_save+0x123/0x1f0 [ 1003.417208][T23143] ? kasan_alloc_pages+0x4a/0x60 [ 1003.422117][T23143] should_fail+0x6fb/0x860 [ 1003.426505][T23143] ? setup_fault_attr+0x3d0/0x3d0 [ 1003.431504][T23143] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1003.436848][T23143] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1003.442391][T23143] ? __rcu_read_lock+0x50/0x50 [ 1003.447130][T23143] handle_mm_fault+0x18e6/0x41e0 [ 1003.452039][T23143] ? __pagevec_release+0x130/0x130 [ 1003.457143][T23143] ? finish_fault+0x230/0x230 [ 1003.461793][T23143] ? lru_add_drain_cpu+0x3d9/0x510 [ 1003.466879][T23143] ? _raw_spin_unlock+0x5/0x20 [ 1003.471617][T23143] ? follow_page_mask+0x76a/0x1050 [ 1003.476699][T23143] __get_user_pages+0xca0/0x1420 [ 1003.481628][T23143] ? populate_vma_page_range+0xf0/0xf0 [ 1003.487074][T23143] ? memset+0x1f/0x40 [ 1003.491026][T23143] ? vmacache_update+0x9f/0xf0 [ 1003.495765][T23143] __mm_populate+0x3a0/0x560 [ 1003.500332][T23143] ? __get_user_pages+0x1420/0x1420 [ 1003.505505][T23143] ? ksys_write+0x25d/0x2c0 [ 1003.509980][T23143] do_mlock+0x4a2/0x540 [ 1003.514108][T23143] ? __ia32_sys_read+0x80/0x80 [ 1003.518846][T23143] __x64_sys_mlock+0x5c/0x70 [ 1003.523425][T23143] do_syscall_64+0xcb/0x150 [ 1003.527904][T23143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1003.533773][T23143] RIP: 0033:0x45d239 [ 1003.537643][T23143] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:04:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x8029, 0x1}) ioctl$EVIOCGID(r0, 0x80084502, 0x0) utimes(0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, 0x0, 0x404082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={{0xa7ee, 0x800, 0x41, 0xffff}, 'syz1\x00', 0x32}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x20800, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) 09:04:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xfeffffff00000000}, 0x0) [ 1003.557222][T23143] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1003.565604][T23143] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1003.573551][T23143] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1003.581497][T23143] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.589440][T23143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 1003.597382][T23143] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:07 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = getpid() sched_setattr(r3, 0x0, 0x0) r4 = pidfd_open(r3, 0x0) fadvise64(r4, 0x0, 0x8000, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:07 executing program 4 (fault-call:6 fault-nth:30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1003.695125][T23162] FAULT_INJECTION: forcing a failure. [ 1003.695125][T23162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.716135][T23162] CPU: 0 PID: 23162 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1003.726316][T23162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.736374][T23162] Call Trace: [ 1003.739673][T23162] dump_stack+0x14a/0x1ce 09:04:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1bc, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3c0e000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "d090f736969ecd1dbe2aa3a967dbf21e8e1396a508f4"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x1bc}}, 0x80) r5 = socket$inet6(0xa, 0x200000000003, 0x87) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) [ 1003.744001][T23162] ? devkmsg_release+0x11c/0x11c [ 1003.748948][T23162] ? show_regs_print_info+0x12/0x12 [ 1003.754146][T23162] ? stack_trace_save+0x123/0x1f0 [ 1003.759167][T23162] ? kasan_alloc_pages+0x4a/0x60 [ 1003.764103][T23162] should_fail+0x6fb/0x860 [ 1003.768524][T23162] ? setup_fault_attr+0x3d0/0x3d0 [ 1003.773553][T23162] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1003.778925][T23162] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1003.781624][T23170] tipc: MTU too low for tipc bearer [ 1003.784473][T23162] ? __rcu_read_lock+0x50/0x50 [ 1003.784489][T23162] handle_mm_fault+0x18e6/0x41e0 [ 1003.784503][T23162] ? __pagevec_release+0x130/0x130 [ 1003.784517][T23162] ? finish_fault+0x230/0x230 [ 1003.794186][T23171] tipc: MTU too low for tipc bearer [ 1003.794449][T23162] ? lru_add_drain_cpu+0x3d9/0x510 [ 1003.819391][T23162] ? _raw_spin_unlock+0x5/0x20 [ 1003.824157][T23162] ? follow_page_mask+0x76a/0x1050 [ 1003.829274][T23162] __get_user_pages+0xca0/0x1420 [ 1003.834223][T23162] ? populate_vma_page_range+0xf0/0xf0 [ 1003.839692][T23162] ? memset+0x1f/0x40 [ 1003.843680][T23162] ? vmacache_update+0x9f/0xf0 [ 1003.848443][T23162] __mm_populate+0x3a0/0x560 [ 1003.853035][T23162] ? __get_user_pages+0x1420/0x1420 [ 1003.858238][T23162] ? ksys_write+0x25d/0x2c0 [ 1003.862746][T23162] do_mlock+0x4a2/0x540 [ 1003.866888][T23162] ? __ia32_sys_read+0x80/0x80 [ 1003.871651][T23162] __x64_sys_mlock+0x5c/0x70 [ 1003.876250][T23162] do_syscall_64+0xcb/0x150 [ 1003.880747][T23162] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1003.886626][T23162] RIP: 0033:0x45d239 [ 1003.890505][T23162] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.910089][T23162] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1003.918491][T23162] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1003.926459][T23162] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1003.934432][T23162] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.942401][T23162] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 1003.950373][T23162] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1004.247618][T18559] usb usb1-port1: attempt power cycle [ 1004.957328][T18559] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1005.167375][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.178325][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.188201][T18559] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1005.197281][T18559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.205943][T18559] usb 1-1: config 0 descriptor?? [ 1005.547285][T18559] usbhid 1-1:0.0: can't add hid device: -71 [ 1005.553283][T18559] usbhid: probe of 1-1:0.0 failed with error -71 [ 1005.560785][T18559] usb 1-1: USB disconnect, device number 35 [ 1006.027200][T18559] usb 1-1: new high-speed USB device number 36 using dummy_hcd 09:04:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet6(0xa, 0x200000000003, 0x87) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffc8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000fb1600020000000000000002000052174435f346fbeb8278da029d8ad79847b067956a7619c37c331ad9872821559bde2c07280b4504c1ed3a1865a78348efc5527196fd5fa5", @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x8, 0x0, 0x25dfdbff, {0xa, 0x0, 0x22, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250500000008000600", @ANYRES32=r6, @ANYBLOB="05002e000100000008000b00080000a0eb91f2b473969c81000000000000000005002e0001000000050037057397a04d1334440005000001008868fd48c04ae6fdec035451f5951d57810df36a0a9820b30d59266b34af6f6dcf5f260f6abfb17ca1e61f42e019b51239932f58636237a2691af1"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x100, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet(r8, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) 09:04:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0) 09:04:10 executing program 4 (fault-call:6 fault-nth:31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1006.300534][T23185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1006.311266][T23185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=23185 comm=syz-executor.5 [ 1006.312839][T23187] FAULT_INJECTION: forcing a failure. [ 1006.312839][T23187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1006.326285][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1006.339143][T23187] CPU: 0 PID: 23187 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1006.357116][T23187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.367179][T23187] Call Trace: [ 1006.370466][T23187] dump_stack+0x14a/0x1ce [ 1006.374769][T23187] ? devkmsg_release+0x11c/0x11c [ 1006.379676][T23187] ? show_regs_print_info+0x12/0x12 [ 1006.384844][T23187] ? stack_trace_save+0x123/0x1f0 [ 1006.389842][T23187] ? kasan_alloc_pages+0x4a/0x60 [ 1006.394754][T23187] should_fail+0x6fb/0x860 [ 1006.399143][T23187] ? setup_fault_attr+0x3d0/0x3d0 [ 1006.404142][T23187] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1006.409497][T23187] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1006.415018][T23187] ? __rcu_read_lock+0x50/0x50 [ 1006.419758][T23187] handle_mm_fault+0x18e6/0x41e0 [ 1006.424669][T23187] ? __pagevec_release+0x130/0x130 [ 1006.429781][T23187] ? finish_fault+0x230/0x230 [ 1006.434430][T23187] ? lru_add_drain_cpu+0x3d9/0x510 [ 1006.439516][T23187] ? _raw_spin_unlock+0x5/0x20 [ 1006.444256][T23187] ? follow_page_mask+0x76a/0x1050 [ 1006.449340][T23187] __get_user_pages+0xca0/0x1420 [ 1006.454252][T23187] ? populate_vma_page_range+0xf0/0xf0 [ 1006.459681][T23187] ? memset+0x1f/0x40 [ 1006.463634][T23187] ? vmacache_update+0x9f/0xf0 [ 1006.468371][T23187] __mm_populate+0x3a0/0x560 [ 1006.472934][T23187] ? __get_user_pages+0x1420/0x1420 [ 1006.478101][T23187] ? ksys_write+0x25d/0x2c0 [ 1006.482576][T23187] do_mlock+0x4a2/0x540 [ 1006.486705][T23187] ? __ia32_sys_read+0x80/0x80 [ 1006.491443][T23187] __x64_sys_mlock+0x5c/0x70 [ 1006.496004][T23187] do_syscall_64+0xcb/0x150 [ 1006.500487][T23187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1006.506349][T23187] RIP: 0033:0x45d239 [ 1006.510215][T23187] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.529792][T23187] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1006.538173][T23187] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1006.546117][T23187] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1006.554061][T23187] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.562008][T23187] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 1006.569952][T23187] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1006.590907][T23189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=23189 comm=syz-executor.5 09:04:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xfffffffffffffc87, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x75e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xfffffffffffffffb, 0x1, 0x0, 0x0, 0xbce5799a58cb1aee, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1bc, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3c0e000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "d090f736969ecd1dbe2aa3a967dbf21e8e1396a508f4"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x1bc}}, 0x80) r5 = socket$inet6(0xa, 0x200000000003, 0x87) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0) 09:04:10 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) fchmod(r1, 0x80) r3 = dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x1, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000800}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r3, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:10 executing program 4 (fault-call:6 fault-nth:32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:10 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) pipe(&(0x7f0000000000)) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r5, 0x0, 0x10007, 0x0) [ 1006.637285][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.648429][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.659148][T18559] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1006.678334][T18559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:04:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0xc040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1006.698565][T18559] usb 1-1: config 0 descriptor?? [ 1006.705610][T23203] tipc: MTU too low for tipc bearer [ 1006.717289][T18559] usb 1-1: can't set config #0, error -71 [ 1006.737894][T23206] FAULT_INJECTION: forcing a failure. 09:04:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x65) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) sendfile(r1, r1, &(0x7f0000000240), 0x7f10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)=@hci={0x1f, 0x4, 0x37cb4b146d879ef9}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="62ba4e88beb9bac9e8ab568628d2c6f7b2d2dc5564446b9f07079622c322f1c4dac072e50b7839b2ffa747ceca50c0381583728d3917a9d1c9acdc2c670f817b2bc964fa824342c3f7246553e2b8098c44abb45b36c11b6ae259e01648a505e7b6ecd7dcbc9ba667f8dd6fa2127d2037d4db49f7e674e84c3088aa36fe", 0x7d}], 0x1, &(0x7f0000000280)=[{0x100, 0x115, 0x0, "8e1bcb419ea4992f61139dcf0e949ad144de952f137798790b2f8b944613d66b63f6752143d94a908642b0cc66dce39ef3e53ae41bf9573fc81493e3f09fcfea3c4524a78f220bdfcea05bcbdf3faf171fe5184e651019395be8f1d9c0db1a2d9d49a920241b76e056739df1bf087f38a167384dd927f70a881285965b04422aa1ce88f5d880504f3da763750cec2c412c5425c8bfb63ecba87a803a20895a01b882639729d2e4620042ec2bdd4f4c915f2df806dd97bcae5d582e7e6d5237d8689647c0c961f9b10ef68a8e88d64f8803b7c8255acfffe3b4c1b7ec24cd0f10a9be47316ba61d302f70c4ab589c"}, {0xb0, 0x29, 0xfb0, "c170ec3866f1b323d14a58c8139d461d7cc39306595c410ad6674531016f36ed9d31a9053b3da3337d7fb96eac849d9970cb34dc5cb67503c47ee2d267ea2cbc157280a44e7661cc7bc39a0c363104215587a25ec91cb9bf9a916c8db79cf9e701cf25f6b8a05882a5dd70e39509fd4049f9b22b061dc2b57d15a7e714f986e0ad354ae24f6f767227ca8266de416fb66e4e0032ea76beded202"}, {0xb8, 0x114, 0x5, "cf305b4703207e04f58e90759b1b0b95b1d577aa819bb0bc50e780fb22874f47a7f97edfa9091e87a67d07222394ed676bf3f795493e2c1b473accaf44587081a50f2c8a8e1c0da2dc381906238b2cd4a6336ce038f545668f153be8fd5d574369d6aa4040f7334384206b9243923a99159359c2a44d76222c0e20896040bbb76bac3ff91463acf1e55ca6f709071403e6528649386435a54589403840d7c4124c"}], 0x268}}, {{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x80000000, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="eec5d9abaa02af48c9430ab5d1c8ec85209b9f22fbae2549586db01c183573af067706aba293fb24e83a4f167cf60b3558abb98fcee3e2cc8565d0ceafca07f2ed78a58f7d24336fcd85fb4371e197ffd37ec83643b335fccfac34c3f581c3f21ac05d60ac46e50619ef90a006628a9cdf861ad527fdafca84289db970d2947c00e92016f28668739317c21b29b94db2c2af3ba631e6776669179c17c1a17bc40a4ec9c624256442", 0xa8}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="f92783ddf80095998c5bb75bfd70dc603cce18014ab42a092b0001813c5203ddc3f0c4b96bd6175109bd29e55edacf90825cbed221c98782cc96d21af0acd81a4a1179f87e8b4999afffaaa964004b87daf8713c0ee4ef4fa4d0d1bada3302b5848db09e009a3d8384a27a6c9fd3c7e8c8c0fe48f556fe2059e40812b5b5e5f2602c281d", 0x84}, {&(0x7f0000002580)="1da7b939d376a3aa2a9b10e99b5f2bd4563a8dc4b388f84f34626815345c812677a29d82df7917ae2db6ae16fba1fc04e0ef3a25481044cd8189bdbef37febd8c612d463b912e730df6f368244c05b3bc4fbc4293a10ffac0b4d51ed8004d222900ac27d816217feac63501934af881f4699fb4b27096c8014a26e13b88c59f5a0d26b1cc600bde58fbdb479ea6a500dbcc61b5225e29fc51b27f7d20fdd76bdecb0e3a1fd8b91009f0ee174be3bf18941ea4fe3af395ef4613e7c73d510f7e84f8865f474146925816685f54f78152f7b9048c7c6aee52bc22414239bdfd5f8e96d185b75104a7719bd2bfc6f768ed99328ae64b24fdfe3d4fe7063e918b45761635dbfc75298582ffb65f8b89b948997aa460a21c57418a4ea233ff132e8e6e1ecd307cabae0f0adb202da3e0b33ba2b70bcf4205f1efe3397bb646eee065f6dfc9ebbe971dd676fc5d2b42bf6effd4c7a059e6a18eab5f4ec169b4b4f16a007f3f031ba99bb2de57ad0d9b7397272519ee09b20de7f08f9a364f36433dee2c6bed1777a9ff02b114315e823c3b708272b020a96eb852aab2b7e92d5303337be15baaff4ff658a0400561d581813c6ccaed47f13d7ba52943d66d920295c187b3399e73f4ef7b172bcf38c890eb87b7939f382311850ee1fa9ea63ed4f0eaebbd748a3c4368a4568913c156e4f09df23e96f9a98c814283a0a82e568458ee0e2505193c28c1f6f6531bc4385b2a03724f83677b0742bb3a241745d7643e42e389754ef6f2111fbf39d5c604ed522388bb1be8ee2fdbc95753a62a0dbd848b73fcdeb2893f32706c6f396045ac5ed26b95205b1719e57d0c79cedf08dc1160da406b4d8150ec2155105d5b2fa76236ddb94b8a3bab3e8f08f4d900435385fea15ef20c015378cacbea8b95f956037bed101e41988be6c72b4cf0209670f9c7e1afc8fbb1c7d1b6499e1aec252316bf732833ff5c0f4ac71d755edd7222b3aa4d08e2c56e12bd667b5e5569b89a848a2b2777fc0f1acce0b54e1cfab18e303584ee556ba83effee0abd322d4cd3e5dca75d72a6e8664fba66d60634cf2e40cf68f068b6c2529c8b3371c7f412159cfcfcb323301cd218181ade2a591537c9bf0bf8aecab8c1a99ad192836c3d58c7360bf815e1a9d544dd31f07c1f73f23cd0ba5a40d339e2d75d553a137d1176ab2dcdfed329d7873d7fb053656801d0e1d4f8a1711cc0409f787cb2c94a58b224baeb7eb10d59e892767ff7544c7e5e25d0459af9c825d9aa395a39128ce1069f38b5ad1e341203435bf447a0c274e9bbfa5bb70bccd8b6526dc3787842d00560ce8f91f9afad306330f51b07cf91169d173eb23b4f98e7c2191eba82ea411949d8c42b12a4d346033d00a1ad8bacf678a0f6183eff960e1d7e04f69c9f36fd0eb2b8350efeca50919a90b2a65f80400761ce030861f6eeceeffa6c47dbc6406aad9a464869e44e07c5cf19ef69f6a7e724a036519734fc4d2f43ea16f2e9f0cf8142ab30d1ec3dc08b856038b2413e33b2f3808252351289ab5645b1d2f464902f1f5143ea5fbb356b0e0d6869f17a54b952c3081f52a97e23d2dc27adb33bd454147c18fc2412fbc9ac8408a0be9705084450bdb80f7af841a045cd5939c071ae9b5173d7e80193018d0053204a75820335946f97735473afcb3db7e66ec3cc279f7c0222e6ce235ee78247711ef1663b1eeadf8af08951b84142662777035d6ad07a3c66fac776cb1df7bad64dd717fb37b63724085c10df278c37a6e1a07265c10469d77b8cc538baf527330020b4e0627130b0c69c06db38bb9edb82970f7a99f202546131a5dc654939c9fe89faa7b68d1ba67ca1b47314147397f48b32024c282250a1f1ed026d50e4c8811a36446fa806d900ec1bdb48b79d8596271aeb0066376ab874ccf0816c8a81014533f92f8808163cec4668dcc5f17a8f9e67416c760324e16ab199020d253cd58cead04cc346c1bdcdaddd6c2ff045f985cd11005a42678d44483a321c65315b66a13c08dc34bdcabf5ef84b907d7496e5a3400218ce371ea0d4340320a5b9c740a8b4d90098c26376369011b0dca02343ac51a9cff82973830fc1bfa59ee485ace39305ca4262409500d0f43074abdced1fcda845ea49274ba81526d84ebc80adaace1cdcd1428dddea88a12338073870ef44725c10dde129cd0be6308b3ff21fae3e2cc5419b4c335ac496e8338ad34862bed2d931eefc8feeb524c1a0209e7d2c282a8b17c85ecf6fe1f909e01bc58fdcee897e96c1299276bc8def171dd59d98d8fe08c82e598754c75cc93850c16bf2ce4f67f1fc5434b20572bc3fe81266c31777be1d38112e99f57318f00f3da51e3d7b8d95230f8e49334d94e241743d38b09182ac777a16ffae8ff3ff59a5eb95c09d5cc68478f02a5cf5a40a6efeebaef6130a2820d09cc4a7002ade58e59ba4bd30e20cbce56f4fe3241a519b47384be0a26777f7947bc4b0177d0ed8a4f75b7ef489922a63e3a69dd15750bf216ef0455207ed6dadaafb6342debead805cc54a4a1effb800a12cc21af89456f8aeabfe3f51e7116742e21e5e5c6802334f8a8eb8693c3c62b2fe68bc51be8151eb439a7509fd3a3b1d6f06316c6881d100e2fd3c9452834524082ae7204cf03c7a703f5fba2f5d6d307daf782cba99a4d51822daf06d39600f53ba10969336dabc13a94b5b0e6eae08b7c629f644346344790f3faa1ebf2a0e21075657e1712973f97dd58256a60f2b5991fadb2a78688f284916c8fd64ec4707710b1a74f0aed9e4b5589562f370bf58f722e71e9a0d563d1b6c162f098b8225d6a43567b3e5d07bf17077b3ba7a834cac0324505b1104495c4af4df054beca606dc7cbe5a4f5633645b29475ce9b2dbe23e5edbf7a4c4bef25e103f0c0e71defe93e88885fe29119e5ad2e1633e47414e72f7a8c79aa4f055ce377b5a946714a1b3ed30edaf16d29048facb7cd17393f2a9310d8b6e61b8ebd06f531475e32285de7018f92f8bdeffda0dd6d0512fbcb94e2f3775612bbee29b709810873a3c53eff35cbcb9530344e81c9ba96cbac3fa925411768f4d7af6827d4a0afe8ccdec97ca16d2a19f7ca39a57727d8e99f02a113663a6f0f65272fc6c53804885e7e77101f8f01601682641eef746ec411e644a437b365c9198242d4a91c73822c4dba352df30f0c07db4d9794e4038258798ffa444a558f40df77f15aac348c3c68a40f565d48849c4dadee77c591c4b8b35facbd65445d526c0b111adb04d041fd18638cdcad353bac20c86311f98d318ef2962417e1192e64280579fd6c27e2a7558c482efffe695a2cd462f1fc669173c1eb2c5e5e50a85c719eb253f5078017559f9f02eea5ea70ae3bdccf0bf715675549d2da945f4c6191ec9c5e7818df1d7a1e27630141d29fe347281ff6369589ab047f58ffc43d1cbae14590e6c6b23704c50d56351c2d7e0007fa785186d92ff48f05be7e3849ca937eceab79186b4d75a5e36a0217135b23d1bc9b0b0b63550143bab9dc52e243316af2867464ffb3efaed7a45f2704ae38f3bb93fdffff8eec1f787327569dfad5ee838785e692cdde0e1156e194271e379c5bbb9eea255b1656b7dde63b092eba3cc5c689023bc96407fbc852e2a9a7f6614151e7fa60b32b8a4d2cb11006f26d83b8fcc91ceb9cd148116374e9d8456ba44120a5a0f2a3d99b91fa3f44932d0979c4b7afc7c7fe3a8dd1d053c286ee0e061481ee23c6a3fc425e194f3a951052b22c9cb629e6ffa5ded131bc2579320fc003cf43ec2cc64cf5aba10d51472e825bfdd2656780b0c87e135a4a6ced42ac679913a72006dcca149ec33d50aaea84f53842d684ae3717f61f98b63b28466b70ecd4be75e3002f681c3a7cbe063c122c53c40fafd0a154360e864f0d8631c5fb25895120a3a9d831c53f9937d76cd50c936b7cc9ddc80b8d8ca38d1f21d6a04c165b7124e933e14548816646bc56e5fcd55f43fd689d6c35e6b83dfcbd6d4daab0338a9be8806e9bbb61926c65eb7ba07db5d413471ae9597d5c39b8eb53890268bc7f22957a97159267f2b5c84f37c65075ade10996b330f8da7fdb92411c803e567b687a27aaf8f2152da62e91ff29e118522f20df07881e0c4f8be6b5d8b6c32529e8b8d996caf5b34aea8aa23788bd6ff6269482539423ab9f76ab7302e54cfa39f7da429cf4dd72aaf3c95fe05eba8f1a28375b7c69178d6928c1592661c44439eceb0480e9d0b4f7039dba3307ce64ec9d925e1e56cb1e7b4f5dea843a4c49faa4387ca6d48f0e4a8c2a41120a8b0b500458a86fe588fb5bc6b6d774d084e5f155f9d258104c0bdcd6e9b4556ef88f74dc715ed9c4b04b987aa2e028a198e16aa6526ae026efc20a1f40efd83f3025978a4ed82e46401b88971a9dde37347bb4d3a2333961cda5b3d6b3c1410d8aeda312ef7488a86c74fb19d3ffec9281ef60d23d1fed6a0dde1688094d7de146c858b732df2ea5c045f8d74d25f3407bc913b2e34c6954b5d01d557e543891b38d4114858a21a82d699c2230f54678a96310e8c96d1de48f62ef33a4b5ecc79cfcc200f515cf6dc4313430e1d865f4e0a9b2e1cb349ddb8367c7fe38140c52fd7b6e20eb91e2521b8dd97135ad7b36d611511964de53caf7d96fc37ddf45820db1b17b5500fab92eda7b38ced6a9ac1e332b56e123bc0da9c54b06b13accac135b699f8c10c877a90346051d54244142b60458dda0c7f5fe2c099eb6b40d7c65a7903b48a7a0efad3ed0915105ebfdc982453b342609f385d9526003f0aa72a2b044929badc1c6055ac4d4ad530d5768fb118c46d1bad12ad3bbb770b8fcc2f1c5ecc96fa954d3224bdbd4f556f72e14d1634137a07ae90653b15ec2c9c670f64fdd5acccca5e7b1ee8909a80757a04e33b0d78f1ca0b40f201f657267bb96ee5745197f7c9d16bf0e3d8174c0362b1d18653c27a00ec283f1d763c2e102470d33d9d2c0d3bdbce7d2f2adb311cbcf78276326f9825bd806657864136d3639a6cd37e59cb773777597501b3680c5927c46a88cbef1f4d72cd8cd4498af35633b385b63b15e8dd49b12ed0d5fd89c91f14d4754a40dfa992ba007e4c0515bf3a52f5396b6fcf792147a7c67883bef59c5604cc9b7ee7b30fef8cbfad36310760919869de3a30c91eee1a0083777c12e5793053d64f3be0ed1e231ae8902c206e7ddd882eb1f956a1dc34d5d97985994a35b6b3e3350d044962d6b1bc3ce962753ac5bb21966e6bb048feaccfba100faecaa227f8e062e728d65c53dcaea15e18df1459f4c18c40c280a39f2645ffa3d854e2982396ce7abf5d59647cef1a17df376cf971c5546cf077cc92489b5227d1020e5bc1e2a27728c05287002eca27e5dba3ce8b01b2a8942a388a95959e6df9db7b60153b99c02d965caf4d12347628f3e469ea18d5fb9086009af1dfea4160ded1a27974e39103b621125226b2b990d5f6e33e68760152705123c913b873205f748b8750ac6ef6c843df946cebdfc0a77dca1cab2a8a90a79319ad17d102eaa347068c1a0b1b5563ae851430324d58ac133924e2d6b671218e74f02ad4304bcec35b623b215949726620411a414bf3c3497b4e6d3407d8266bfbc20aecc60aa99e88fd8225a6c9556efedbda514a2aa303dbe2d50cc33cc513a7291d8427ddd9f7e8b7107eaefe0e3c2aaaa6021eb027217992b8e4009f7d0aa8c9ec620b64e57b70738973f4d22b9da8bed4f2618cced7bb288c412d961160ed078598d", 0x1000}, {&(0x7f00000006c0)="92cc0451cf39a96108fb1115f0", 0xd}, {&(0x7f0000003580)="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", 0x1000}, {&(0x7f0000000700)="aa846b1701ecd5451cf0bda355ddf742522d4669f2a85b97824e77288c5a5b0b5bbb5085edf0ec3562e473b9e21353399946402f010e5549af4131be8fd46c157f01954b22a096b977cdbd72c74c0bba7a6c727bbaae27bd01ff91c7862773cb20deabb0fd6e2cbf46e92e57f1f741719b87ff58aa87032f3ae20fc6f962b42c3837fbdb3ad6520e2890905f73e048ac2e239b4a55c859de431f198be644df56b76666bf5130f50016a94dcd01ab39930bb46e7fcbfa821e41d8ad0df406f5c7fd96e000a28f", 0xc6}], 0x8, &(0x7f0000000880)}}, {{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @dev={[], 0x31}, 'sit0\x00'}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000004580)="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", 0x1000}, {&(0x7f0000000940)="21578f1fdb0236e1faa23bfd76919acc83a8e3411922972ca303db5c46d931de627d96b3f94f54caf6c6b7929621df2cba28df16e0c4c3d4de931fd6d7395272c16a8093688604301b898d17a64b3f3480e26a201815a8898d7589d5c3fc0eb710c03c568a07f5b33d7134d991fe929041dec18a53a5642f", 0x78}, {&(0x7f00000009c0)="c3ddbdaa524a541f84286bdbdb015c29b4292cb9c2e523fc7b4d7b3b08272fdc9c435803c3412e7cf4ae81dd6ca5b958fa3a850e37ccd913484ae843aefe7e984738d3aee0bf61fdabcc465cd68fdd491c96baf7ae916752b573c7615ede603b38b7aea95194c8a49784d259869e4d400544b723969c5eb3befd13fd378a34204cbf3350feff51bee79af65c61e38590eb5a49f8bc2a82c23bb3870f3fc6a9926dbd0ae8d133b8d2dc02a11a5e25f921700e6d63af68f832b78c84ccc33433bc1e272b928b2926f920c79ebc17a2ff2bccf2d065c93c292b833d97813cf7a9f39fc2546efce3f60b0adabadb9387", 0xee}, {&(0x7f0000005580)="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", 0x1000}, {&(0x7f0000000ac0)="79aca4a4f41bbb578e988f1fb152a53e604f20451f3c6c82953ff1757311530a31c286fd063c7b5fd8c815e4849a56a641c987d76d7a879ac5bb37799537bdbee36fb15c6a234e3b190a6e707b5702d0a444f5b95e332ab1b5e215a9a27781", 0x5f}, {&(0x7f0000000b40)="0129c8d4af5deb6543997b345530f00f5fc821a5123ac71215be0872aad90aeec067b9cc37fd7e3ead4416ff22076ab7d91290a4347204880d4d47216908d1dbd4eb1aea47e8acffd024e9a322d8de9c9bdbae4eabceae06289951ef5afe9cbc98478dff31c9ec104ff6789e44388c1a40cbc1226be6ca2133555234699680dcc9fd46511c938a08a7c0b77349e13cac0d2d0737ddae16e723af84944b98a8348b9fa037b2979096a506d073524321e84e486058c5d728aeef9eab9f52dcc2cbf72cd592c4c4", 0xc6}, {&(0x7f0000000c40)="628791885d3b7e0422b2e17f9572fe7f20061d26cc0c3b304315a6cc44abfac6c247af42bdbfbe8ea4233930009468ff89a101127083cb25f07ecec4a71239c75dc0f41e62836952996202bef5c3535191454df09f1cd5921fa1f71ac52e9ad6e47281c612eec8992b59612aadec6b46b6aee68b273fd21016611799ff21ac1313388f99e1", 0x85}, {&(0x7f0000000d00)="effe799148328d49c15836f15e523be4815c3ae753415ba0b116502520034ee3d4d10a2485d19002e264a6bd5ccc932fbfd648c74c635cf50cadfb5bbad0c8dc437ba8bce75b1af19e7929022b2f7c054d33241fddc510b65302884083045c56f31213dd022de473a576295a6e5cfb8ff78d64baf6c383f6eced15459bfb118efd617f183491e3a408939675c73627bbc66a8fb12113efcf0b4a2457ddc2c1879cb1da4f7496afac247da30fbb69636283c0de91bf982388b0db473f73c0a411452cea5159e703ae3a6e14ff50250a6658d6dd6296bdd838d62c9bf332", 0xdd}], 0x8, &(0x7f0000006580)=[{0x30, 0x88, 0x6, "2f40a982a024034ea89c44b85adbc10eb1b7306b358b6f498cc94fe1"}, {0x28, 0x118, 0x3, "a6c4add67dad7626c4f5ad67e16db20305266f75af6556"}, {0xb8, 0x11f, 0xffffffe1, "bf640bbaccd570aa3d2e17042c96a5b4f62dc29069e62c3fda429c01e0c7cb58b49bdef2cee3eeaa07435d87dc409da4e3f343ddca137ddaec44bb61e6889cc75119f84a8517f7d8482157acc577c50fd54f7e12a33d38a35c7bdd77b1734355c3fd473ec809379f53a096bc00114d6127d36372df0b3bb67c98d0e630a4b8acc3db86b6ba6d88c2334f2e23023fb7d0e6d7f1aee2d46c6635cbf6713acf292c183a5672d495"}, {0xb8, 0x0, 0x80000001, "666d3dda47275b1b5eedff681145473d7fa830adb7e47dc321213bfc9125093d0e33db88a89316aaa91cfab5f99a79a882a299d1ff076b12e64d83b700d2a5fd4134a34a3c3b8c2bead318f7a8ef0ffecab6f40f093583ff6daeedfa24bc07d7fd0bdc79e884e2cdc7f8031b7394b270bf0bc3f62fed981133fa541cac4cb5ef8332332984a0c158687d8b2b237176ee18c9ae5b155f3f9302182d7ab85c9e9ae145ade20d0486"}, {0x40, 0x110, 0xde3f, "d61d857e08a72e799189e71d2503d8c08ba2dce019c15c6741743bb1669fc47ee12da5f23e422c34af3927967c7a3d"}, {0x1010, 0x3a, 0x2, "3265f02640c67974facb41bea7628bef97a8eb7786c4644843644b2f2ac1f535989df7da03ec866ba5ff2a1a5663ca940626cf3e41543568c0c50295e1df0dd751f48e671adf37e3022aa9f941041c5271560a1960710ad534070518b52764006cce8f21b4085ea857bc6b9456b81cac3eb79b0f6e4febcb4435b69d1a2286930693a04dec12cf9e0f9c4314a004321a585f463cb8391df3e346791567061fb273246432988a442ec48281988d50e1c0117ff5bc8d2d302e41c6402b2cd32077c0a954ae1b1e8c4a329d48a9a721424b364d0e754c9afd0919ba865fd072872d2d68d9eb09f283c8ceff64bc5a5e014b35b8197b791d9e6b25e806d9c7dff385c932711b947216ac9607f55b41e422a303b1789363796ad5f0d743f232ebb84eeddee6b380be63b7e8d9204b4178231d09fc0fd6e53fa3020375e65bbf0e0f8e708cdd89acca1769b8eee804d498b0f4af43a3713c87456caff99ce4c96b31348cc7c9dfae9d6a49c9866f05864f0e26a8d23bcdfbfc30bac4b6a96bfc67fe64eabd60ccbc2633698e6557f199ac4790d114c77bd695a6e649b9b83eca9a9facc3db02e00eb8418905c993fccc67d9c5afb459087dd5c5d059af5599903640f0bfdc36eacb9763b42eae742d25518f274ebeb4302704a36f18fa964cc41bb6f5bbf558d26c7b88951b4cb4db7b7dbe3c1db09b0d158e924420377defe77dd077394e81c8d68f7ddefe280134537f3b911fab781ffea1769cf1131872ea95edad210f17e6509250885b6ee0ea21ab7c42350a04ea8c41490694c8f3e2a8a8b99758ba62ae9a6420d0a8f6b42987f3be49b5060957c60f3fc7b24db80718a24de3599f69e337b6fb4038f0b74446545ac8dc783e50a312e5aead14b699c77b84a7c39fad3fba8267d5b9eed1ffcec7fb048bb9fca121f28ff32e91fb38d1a7839984607ce25a0d78a911f2b3fa42e6ed1003cef46352188d75900be24924306846933fd50e11db7e1d8cc543ac52ade27ea85beca439b763a7e9e44c8f50ace596bbee0ca143f7a2b20b5b0e3750f7350f540132110c896f6bdb94611be29b2f326182e3339759bc57c7a1d00a40c83ee1f62e0a0ef506bebea43f532d0774f7fc3b7459933e8aeca93a3abcc0942de023fb308563814e9c6942e2ceb15ca8d9a9aa0ff50ddc10091805f8854e40a9f3ef4f7236dccc39d046b9afcf7c087b78877c27229ec9ddbcd5cea7a8f9ec3b465194d232cc5ca18bec177be2ea30ffa248a7c32cbf0e06cace88ce60f711ea988da3d276927e5d846a4b9f49900ede556b916842a86b385b47e21696d0d1819b33dc27d1b969a07927a2add67c65741a7ad7cdada300bd6257fcff11689833561018cf0cd10a419542d3353040135011cc3c0827a9cb6d20f20d40d6e53b973cb6aa836ae236eaddeb6bc49ad9d1f0a3f9ea56e240ca4e1275356e912d82bb60dee6bb8a60095c2916061c3b604080b9febe2d19d6a559baec6d196d797f979b46bbf0a48197e1fa04a4d08681dc4a229c185402f1de09e4b7b5f6bd492e1be5f65a451c0b9b6f55295083e86dcb10202c3dd03a0c6c4918ce6ebae323fc440d9833f44720404079aee8e71a928fd9e96761abb9835eac29e75af8650395ac41d852abadb900580d5e967bb0089fcb82f148068111f69f2d2d61ffc8d183cc280b729bc009b8ab000d959b1eaf721f64f5d2450b086f64e0b2175af21dd0c03cf7f3161d50b5e66b106cb399d9e41cda1ab0c50ec65371174f31a435ff080f549d8638aa499b5b614e830879a78dbf31c1172765c5efaf93eede1ebfdcbfbe00a6c7dfb9345857c4a28117b7b65eeb01f31ebcc99c3c8779b6db4ac98e0e23ff6159aad2528d0801a4d1b9a9bd25642d5735c792e8793a940660b308d7781259769d4a660f7a4e75bf4c16119fe45d4d46793d79b36458c71ccb208d28360af2175b47df30132a07bd0ec1e8ea97f341490c8d8785aa2ce9b3e8a5a8aebf70fce498e60e3bd1fb156bc929a9c1ac6f56ebe748b88aca0a7112571cc9f1b293bad1637ee24d4bc6e5e6dc307cd14dfc54a43294398ae67480cfb53e940beab971f8c7051167a9fb50f82dfa44221c7308e3bb1fd52c5780b4f3deccaaabc47caa7eed26588d23d7dc63ef7b3543dd5e7ae506c8e01682f7a243651ad84a2828f20de9e8e0ce6569d7369cb59a2450da38d8737582baf1baafc0a2928050e9b4fb1ac22b8dd3ded2ca4deb0b8bdcde1ff03b6981539dbfadfa0fe5a79fe455621bd8da9fa9c9d2562600cafa8cd9c71c0b44cd808a305d8dc3aa2ede44945b443c3301049e82108e6ece390781cea9ef08b044741d8589ce1775d77c3b67823339fc3ab10f1f67a4318d846e2784f8e10c15399bd8ed44b5b3ca618772d8dc9166b131035354fa2034c19640899502d3c0f8a29d8b4f96639554a0bf5378155a9488987ab479cb5f2269b6cfd024e4d420d2a480887014d3e2abf093fedacf5e4b5b8f69d9d68464df4b6f8fd54a77466df3846e384e2c51053d62b84db8100569ec81c7d198c1820438de84c94b6a8d1dc553f4f14f33461bee908ed26be48dd12bef91c538a05cca1b733b6c646dc4cface0d1f1e045f521fbf2210a93eb33bd767314caeff821fb7e185e4e2ca3862332003f6498786545041e89d74b98c8c2d32387b4e388223045c2e694a2805c385bf0cba0db0a8944491802958ff1a851615b16c7aa8e8b72e82e803960cbaf8b6fc3cc998859fbaa92408c469f975258aa5f9faa533cba75ffe1732657362ad8dfefabb7b8acc13d00e22468bfa0f4ea1c3f82cd9f799e20a41689aaeb6c56a4a11520ff5fa6b5130b0f5f7d9094e1b8b9b9b3bb5a6b293eacd49a55aa49264a32a347f4a4e0f6773767398187de3218d07267bc83151237e16edf899ab465aa9c81ba51b70d4151ba76738fb405db86e4ca655c9a4b843f49e9d5b1efdeed718d4bc4bd1db85450a9e81ee730e11742bcd3385f15b8225811772764e8f26619c33e542a4ce69b656199f1a9775596930c1ae00eca024f9be1b9b9ae2825d1a03648a541a69e37e2d2d842367e577c77fa867d9e7eadd5d73055a4df74afe1e4bae2aeb48758899a5890ce648ec2e788650e6d966cde7ffb758dcd660dbca296252aead008e0ff64a4de2508829b725ddae38d2dc7461a8f760763f212aea8a42f915d07576d9113f72051f02c1ea653de5224406704d843987936e37672a1f6f25491a000101ef4a0334772323bafd77b36f79ceec415b70d77f0ce835a9e2aba6efeb653e7aa67d8a0c2579ff549ed431635341d1730ab088a4798748826ad2a6553d5706e2d302fdce7af804d294800f6259b428198a0bf39bd685e774e0bc72b0b868c67bd5fbbc9c4e075ee5c539a8a0fecebcfebd343e5633c1305725be6010b3042111d3e2c708c2492b6f7fd8fc70ddee2036853560e44a7a342262857cc785de474cfd1ca515f37cba86c5857cfad9eada85308b2b6dffb0815e61988a573060fd223841aff6518ffd57f75baaddfcd582a1045278a73c788ded4ce4ea5836838518a64a8799df3e4bbff0a0046580896e2e07a427759b2bcdca91517abecac9963af6a8425c0d67bc8ca4b5691fee4dcba851ed6145a9ea95c148fc626edaf49b001159932e0af6e7745ba693c3c9d30f1084e7d614badc3f699ea03641694dad22b3bba6708d72d5541df67dd21ae419aadd905ca3291f9a6975ceb48eaca7c38f9cf07f8ba4546908f1f7d2ee78f9c9e9f9ece9a535f95db98f9d455dcc7f92d21a549b7741741ee8b57264b5da67bc650672701217b037f27844954852b963753123b75f57588bb84e3fb8f2b8e1606cce048f1b6482a32c13096abf9fa84490db4a1a35f56509ea8f33369b43e085e6e053dd4ad8e3dd076b5be5fee856b900de31d69c1f11e0556cf54cb4402160d28bab94c5912a2c69fbaedaefbdf60207d380a11dce875a3650f238441598b195f24f8518ccd921d5ff076416106c5dc1f29fdfb1ddc3a1bbaee725454b5f5633f781dfd25f25e171c754bc644930bc105ff6ece5277cc694a783d27a47e98b315c4b5f14b7e4ace4c3333f97e22be608e4d0d4c3d64cda97e1392e3e4d88f91ef0746f7c73ea0e5ba498d7ce43b764605773f90f2f354dec9db100a89f9df2ad82a309150e8a0679cb6bc7921cd14a9f780440fb1a2c92cc8277a6ef0c7ac2ed7134cf9de54ecd7c64b0e0716b7f5d36688aa0dd12c3686865cbaa698e4ca6f1d519a04e0725cc2fa8ff43f9af64f269d9a75c9f9404434ce067dcb3dd088d4e363f161116433452dad9bcc292876e5dff20b198425ba0f1ef78a9a4ca988b42830efe90ce4fd5bbcedb5978a502baf9d79245d698ba31193199d550fba31d52146b470c3a6bb0ee90893f6bc8d0680c8e8f2bbf009ad5e221dbba4cfdb76ec3c4877c8810e53767e612429d43ee1471e99e975c7c647151aa3c532de5bdd447f646267ebe6c0e138443a80922d8890a7893926a636b6e5a02486c919152d7e9583d98a3eb5e9eec9cc3f269e64cb0a65939138687d3ee1470494de276367c283fc4b76a0ab496189b46f64396dffa6fede0c073e25e47bf6447af696b25694723423fd6c6707ce7f5bb1976e9212eb1567090e1c2261e71a20db51e616bda08dc59c9745fcbf6bb9175b02f6d408dce71ed9e7d69920b829293dc75b3f2f43c527e4c261ae577c3fb5a38395d1f29669cad34e405d82a64ff05769d593af99b4db4ed1eba65c1ac751798cdb7a4a3eb93fb07561e2ab11dd3ed3d7f8d39b2f3a81344bcd92cf4d190fcbb7832ffbf425465a54b1f6b2b885a2e565825f57406c16ea76435ae4a60590e42739a338fc6e7c60804325027bcfab988f358891c809c4865e18054ed35aebebcb5d25d6327e04522b020a1f346606f4e3a53617e1ce1b84ddb6b34c8b157afd1200e6c4f610904988db6e54c7741b97533dc8feefad44d5d345de0a9fc584c05e320df95c0cb2c515f0c045d1aa8f653a914dbcea1545f859f7bd8afe9dd69afd1ffbbfb421d2d44e3a0e29879233864ccaa303dfef3418b73cc370e6043830537e501295cc7035b6ee9734ddd8fa5b3b675f410fe803cfb4c19c207c36432ff15f25ba4d332aa447112fdb2a20451db75d634f2ea2aaa0c1da9528d8bf790bfc006fb87a21469ab87088a1ee44a3aa18600ce3242414306738ae516ea63b3970b6ae0ef5ba90735302e66c77c0a3e6f3e16a79594322ed2426ff34ec8362a1551c3c0859b0fb7f7768c66370f01690baa6d311127bf6ccd33a55819e958a30c822867e357ab8904ca3fdc8662fdaacdb6edd2a435b72f7346f9c4f8c0caf9c2a81c659a579e76a7c0afcc4aac34b4eda735f8b8fdfe63d04cbdaae0f9de9b6039f5d57227ea77d61d7369ed10232b5c16187bd42b06c4874f9836fb23b0198bfb9ca4a01bdfb3b56dc213e672b7e2ec606d4e585caef6da11df666b4388a92c9cd7a4b5676f112ebd623843a9d119515081dc54712d0c2ea43d19a95417c47148b653f374c7b92775bfa4d5102fc40663c2fb27ea20609fb67c804e1a3e7263fea53a24deef76370c4bb55a15ffea40f046647c3d008615ffa5e0034c93930c26e2ca83298f4984e06d110112a573a9a28b76b43dae5474c0938147c7fbcce13e9a2c73759d54a7dc9ec0e07407bf0b3277ac7ea4b642fd3a788a4cef71401e57ea6da99c0bcf23b5971171f37a43ed2b2128e626a0046838258cf1f96ae17"}, {0x20, 0x118, 0xffff, "151691cd5b3ab63e263d03853414"}, {0x90, 0x117, 0x6, "cdd2f9f524e34d4be4ced355d587b8baf74693cf8035e7c003ebecdc60d30031f23790045e6163c710439ec523178a64619c6e4b09a861212111370fb511c7d1e61ae61efcf86c592dc8c7c811b88f442f6b6433ce3acce151893250beb74ec57eeed7bcf7939ca5dddbff238e9f2b628a50bdac240de5388be58ff004"}, {0xf8, 0x1, 0xdce6, "f08d25be5a4add39b672e32eaacf8b36543a09e1328d8a759eb8d5ab2658202ad42f20cdc6ec4b893c832c1b5bb5427aeba761356f827abfb831ba13006472de08e350f8ff1ebbade0193a8e5e9b82d9fa5b0ebb6c3f5ee977ae4ae5c8bf362668bd7f115d0d0160054c959088a49f475aefe1b8ecb8dfce502932dc8af18ff8dab293d368d840ca2e64c032d957936afdd69ce05d33dfb110d97cf992844f3ac650c05f8f10d87494d039107264fafaa164806face30919cf224047322354c7f9703cce0a8253635b1780681e952f618781dc0291022ba6bb0fef79330ccfb8f956939cd490"}], 0x13c0}}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x8) 09:04:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0) [ 1006.737894][T23206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1006.745043][T18559] usb 1-1: USB disconnect, device number 36 [ 1006.776644][T23206] CPU: 1 PID: 23206 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1006.786924][T23206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.796981][T23206] Call Trace: [ 1006.800405][T23206] dump_stack+0x14a/0x1ce [ 1006.804741][T23206] ? devkmsg_release+0x11c/0x11c [ 1006.809683][T23206] ? show_regs_print_info+0x12/0x12 [ 1006.814876][T23206] ? stack_trace_save+0x123/0x1f0 [ 1006.819892][T23206] ? kasan_alloc_pages+0x4a/0x60 [ 1006.824817][T23206] should_fail+0x6fb/0x860 [ 1006.829208][T23206] ? setup_fault_attr+0x3d0/0x3d0 [ 1006.834210][T23206] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1006.839561][T23206] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1006.845080][T23206] ? __rcu_read_lock+0x50/0x50 [ 1006.849818][T23206] handle_mm_fault+0x18e6/0x41e0 [ 1006.854841][T23206] ? __pagevec_release+0x130/0x130 [ 1006.859936][T23206] ? finish_fault+0x230/0x230 [ 1006.864588][T23206] ? lru_add_drain_cpu+0x3d9/0x510 [ 1006.869681][T23206] ? _raw_spin_unlock+0x5/0x20 [ 1006.874414][T23206] ? follow_page_mask+0x76a/0x1050 [ 1006.879495][T23206] __get_user_pages+0xca0/0x1420 [ 1006.884407][T23206] ? populate_vma_page_range+0xf0/0xf0 [ 1006.889835][T23206] ? memset+0x1f/0x40 [ 1006.893786][T23206] ? vmacache_update+0x9f/0xf0 [ 1006.898520][T23206] __mm_populate+0x3a0/0x560 [ 1006.903081][T23206] ? __get_user_pages+0x1420/0x1420 [ 1006.908248][T23206] ? ksys_write+0x25d/0x2c0 [ 1006.912797][T23206] do_mlock+0x4a2/0x540 [ 1006.916934][T23206] ? __ia32_sys_read+0x80/0x80 [ 1006.921667][T23206] __x64_sys_mlock+0x5c/0x70 [ 1006.926227][T23206] do_syscall_64+0xcb/0x150 [ 1006.930704][T23206] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1006.936566][T23206] RIP: 0033:0x45d239 [ 1006.940430][T23206] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.960007][T23206] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1006.968390][T23206] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1006.976332][T23206] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1006.984279][T23206] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.992229][T23206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 09:04:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0) 09:04:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xffffff37, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1007.000170][T23206] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x3) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) [ 1007.327040][T18559] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1007.727037][T18559] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1007.734977][T18559] usb 1-1: can't read configurations, error -22 [ 1007.886965][T18559] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1008.287013][T18559] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1008.294957][T18559] usb 1-1: can't read configurations, error -22 [ 1008.302002][T18559] usb usb1-port1: attempt power cycle [ 1009.016845][T18559] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1009.266880][T18559] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1009.274831][T18559] usb 1-1: can't read configurations, error -22 [ 1009.426798][T18559] usb 1-1: new high-speed USB device number 40 using dummy_hcd 09:04:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0) 09:04:14 executing program 4 (fault-call:6 fault-nth:33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x100) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$setflags(r6, 0x2, 0x0) 09:04:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x3) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) 09:04:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = accept4(r1, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80000, 0x5) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', r8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', r9}) syz_usb_disconnect(r0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022050000008f32cef144"], 0x0}, 0x0) 09:04:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x40) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x180000000) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1009.696811][T18559] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1009.708158][T23251] FAULT_INJECTION: forcing a failure. [ 1009.708158][T23251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1009.709166][T18559] usb 1-1: can't read configurations, error -71 [ 1009.728047][T23251] CPU: 1 PID: 23251 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1009.738200][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.748250][T23251] Call Trace: [ 1009.751541][T23251] dump_stack+0x14a/0x1ce [ 1009.755866][T23251] ? devkmsg_release+0x11c/0x11c [ 1009.760804][T23251] ? show_regs_print_info+0x12/0x12 [ 1009.766001][T23251] ? stack_trace_save+0x123/0x1f0 [ 1009.771016][T23251] ? kasan_alloc_pages+0x4a/0x60 [ 1009.775938][T23251] should_fail+0x6fb/0x860 [ 1009.780335][T23251] ? setup_fault_attr+0x3d0/0x3d0 [ 1009.785339][T23251] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1009.790689][T23251] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1009.796207][T23251] ? __rcu_read_lock+0x50/0x50 [ 1009.800962][T23251] handle_mm_fault+0x18e6/0x41e0 [ 1009.805893][T23251] ? __pagevec_release+0x130/0x130 [ 1009.810988][T23251] ? finish_fault+0x230/0x230 [ 1009.815649][T23251] ? lru_add_drain_cpu+0x3d9/0x510 [ 1009.820745][T23251] ? _raw_spin_unlock+0x5/0x20 [ 1009.825485][T23251] ? follow_page_mask+0x76a/0x1050 [ 1009.830569][T23251] __get_user_pages+0xca0/0x1420 [ 1009.835486][T23251] ? populate_vma_page_range+0xf0/0xf0 [ 1009.840916][T23251] ? memset+0x1f/0x40 [ 1009.844870][T23251] ? vmacache_update+0x9f/0xf0 [ 1009.849609][T23251] __mm_populate+0x3a0/0x560 [ 1009.854175][T23251] ? __get_user_pages+0x1420/0x1420 [ 1009.859349][T23251] ? ksys_write+0x25d/0x2c0 [ 1009.863939][T23251] do_mlock+0x4a2/0x540 [ 1009.868082][T23251] ? __ia32_sys_read+0x80/0x80 [ 1009.872820][T23251] __x64_sys_mlock+0x5c/0x70 [ 1009.877382][T23251] do_syscall_64+0xcb/0x150 [ 1009.881863][T23251] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1009.887740][T23251] RIP: 0033:0x45d239 [ 1009.891619][T23251] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.911209][T23251] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1009.919593][T23251] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1009.927536][T23251] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1009.935483][T23251] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0) 09:04:14 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom(r1, 0x0, 0x0, 0x2143, &(0x7f0000005bc0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x1c542) fgetxattr(0xffffffffffffffff, &(0x7f0000000240)=@random={'os2.', '\x00'}, &(0x7f0000000280)=""/119, 0x77) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 1009.943431][T23251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 1009.951377][T23251] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1009.961366][T18559] usb usb1-port1: unable to enumerate USB device 09:04:14 executing program 4 (fault-call:6 fault-nth:34): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x5}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @dev={[], 0xc}}, 0x10) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1010.039667][T23273] FAULT_INJECTION: forcing a failure. [ 1010.039667][T23273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.061463][T23273] CPU: 0 PID: 23273 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1010.071643][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.081699][T23273] Call Trace: [ 1010.084993][T23273] dump_stack+0x14a/0x1ce [ 1010.089313][T23273] ? devkmsg_release+0x11c/0x11c [ 1010.094245][T23273] ? show_regs_print_info+0x12/0x12 [ 1010.099441][T23273] ? stack_trace_save+0x123/0x1f0 [ 1010.104464][T23273] ? kasan_alloc_pages+0x4a/0x60 [ 1010.109396][T23273] should_fail+0x6fb/0x860 [ 1010.113818][T23273] ? setup_fault_attr+0x3d0/0x3d0 [ 1010.118843][T23273] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1010.124213][T23273] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1010.129759][T23273] ? __rcu_read_lock+0x50/0x50 [ 1010.134525][T23273] handle_mm_fault+0x18e6/0x41e0 [ 1010.139463][T23273] ? __pagevec_release+0x130/0x130 [ 1010.144581][T23273] ? finish_fault+0x230/0x230 [ 1010.149256][T23273] ? lru_add_drain_cpu+0x3d9/0x510 [ 1010.154369][T23273] ? _raw_spin_unlock+0x5/0x20 [ 1010.159132][T23273] ? follow_page_mask+0x76a/0x1050 [ 1010.164245][T23273] __get_user_pages+0xca0/0x1420 [ 1010.169190][T23273] ? populate_vma_page_range+0xf0/0xf0 [ 1010.174648][T23273] ? memset+0x1f/0x40 [ 1010.178639][T23273] ? vmacache_update+0x9f/0xf0 [ 1010.183403][T23273] __mm_populate+0x3a0/0x560 [ 1010.187991][T23273] ? __get_user_pages+0x1420/0x1420 [ 1010.193186][T23273] ? ksys_write+0x25d/0x2c0 [ 1010.197684][T23273] do_mlock+0x4a2/0x540 [ 1010.201834][T23273] ? __ia32_sys_read+0x80/0x80 [ 1010.206706][T23273] __x64_sys_mlock+0x5c/0x70 [ 1010.211309][T23273] do_syscall_64+0xcb/0x150 [ 1010.215812][T23273] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.221702][T23273] RIP: 0033:0x45d239 [ 1010.225589][T23273] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.245188][T23273] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1010.253599][T23273] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1010.261570][T23273] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1010.269540][T23273] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.277515][T23273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 09:04:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x8}, 0x0) 09:04:14 executing program 4 (fault-call:6 fault-nth:35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1010.285485][T23273] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0) [ 1010.361176][T23289] FAULT_INJECTION: forcing a failure. [ 1010.361176][T23289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.385439][T23289] CPU: 0 PID: 23289 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1010.395619][T23289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.405670][T23289] Call Trace: [ 1010.408968][T23289] dump_stack+0x14a/0x1ce [ 1010.413300][T23289] ? devkmsg_release+0x11c/0x11c [ 1010.418231][T23289] ? show_regs_print_info+0x12/0x12 [ 1010.423427][T23289] ? stack_trace_save+0x123/0x1f0 [ 1010.428448][T23289] ? kasan_alloc_pages+0x4a/0x60 [ 1010.433381][T23289] should_fail+0x6fb/0x860 [ 1010.437791][T23289] ? setup_fault_attr+0x3d0/0x3d0 [ 1010.442815][T23289] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1010.448188][T23289] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1010.453729][T23289] ? __rcu_read_lock+0x50/0x50 [ 1010.458484][T23289] ? __mod_node_page_state+0x99/0xb0 [ 1010.463762][T23289] handle_mm_fault+0x18e6/0x41e0 [ 1010.468696][T23289] ? __pagevec_release+0x130/0x130 [ 1010.473805][T23289] ? finish_fault+0x230/0x230 [ 1010.478479][T23289] ? lru_add_drain_cpu+0x3d9/0x510 [ 1010.483589][T23289] ? _raw_spin_unlock+0x5/0x20 [ 1010.488352][T23289] ? follow_page_mask+0x76a/0x1050 [ 1010.493459][T23289] __get_user_pages+0xca0/0x1420 [ 1010.498393][T23289] ? populate_vma_page_range+0xf0/0xf0 [ 1010.503841][T23289] ? memset+0x1f/0x40 [ 1010.507823][T23289] ? vmacache_update+0x9f/0xf0 [ 1010.512579][T23289] __mm_populate+0x3a0/0x560 [ 1010.517166][T23289] ? __get_user_pages+0x1420/0x1420 [ 1010.522358][T23289] ? ksys_write+0x25d/0x2c0 [ 1010.526853][T23289] do_mlock+0x4a2/0x540 [ 1010.531001][T23289] ? __ia32_sys_read+0x80/0x80 [ 1010.535761][T23289] __x64_sys_mlock+0x5c/0x70 [ 1010.540345][T23289] do_syscall_64+0xcb/0x150 [ 1010.544839][T23289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1010.550720][T23289] RIP: 0033:0x45d239 [ 1010.554604][T23289] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.574199][T23289] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1010.582610][T23289] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1010.590579][T23289] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1010.598549][T23289] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xa}, 0x0) [ 1010.606519][T23289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 1010.614489][T23289] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1010.627371][ T150] usb 2-1: new high-speed USB device number 75 using dummy_hcd 09:04:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xb}, 0x0) [ 1010.766723][T18559] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1010.886645][ T150] usb 2-1: Using ep0 maxpacket: 8 [ 1011.016726][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1011.033207][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1011.055286][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1011.067067][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1011.077821][ T150] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1011.136693][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.153074][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.168573][T18559] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1011.186732][ T150] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1011.186750][T18559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.200227][ T150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1011.225355][ T150] usb 2-1: SerialNumber: syz [ 1011.227434][T18559] usb 1-1: config 0 descriptor?? [ 1011.256693][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.263597][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.277080][ T150] hub 2-1:1.0: bad descriptor, ignoring hub [ 1011.283042][ T150] hub: probe of 2-1:1.0 failed with error -5 [ 1011.476938][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.483831][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1011.586629][T18559] usbhid 1-1:0.0: can't add hid device: -71 [ 1011.592658][T18559] usbhid: probe of 1-1:0.0 failed with error -71 [ 1011.601774][T18559] usb 1-1: USB disconnect, device number 41 [ 1011.717726][ T150] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1012.056535][T18559] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1012.196515][T23318] usb 2-1: reset high-speed USB device number 75 using dummy_hcd [ 1012.416529][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.427460][T18559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.437889][T18559] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1012.446454][T23318] usb 2-1: Using ep0 maxpacket: 8 [ 1012.448084][T18559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.460936][T18559] usb 1-1: config 0 descriptor?? [ 1012.606532][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1012.613493][T23270] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1012.676456][ C1] usblp0: nonzero read bulk status received: -71 [ 1012.827859][ T142] usb 2-1: USB disconnect, device number 75 [ 1012.857175][ T142] usblp0: removed [ 1012.938175][T18559] betop 0003:11C2:2208.0033: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1012.949318][T18559] betop 0003:11C2:2208.0033: no output reports found [ 1013.137872][ T142] usb 1-1: USB disconnect, device number 42 [ 1013.636330][ T150] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1013.876326][ T150] usb 2-1: Using ep0 maxpacket: 8 [ 1013.906311][ T142] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1013.996389][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1014.007385][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1014.018055][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1014.029457][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1014.039878][ T150] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1014.106355][ T150] usb 2-1: string descriptor 0 read error: -71 [ 1014.112602][ T150] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1014.122649][ T150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1014.146356][ T150] usb 2-1: can't set config #1, error -71 [ 1014.152864][ T150] usb 2-1: USB disconnect, device number 76 09:04:18 executing program 4 (fault-call:6 fault-nth:36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x10}, 0x0) 09:04:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d5, &(0x7f0000000380)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={r5, 0x101, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000040)=r5) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r5, 0x0, r6, 0x6}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfec8) r10 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r7, 0x0, r9, 0x0, 0x10007, 0x0) 09:04:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0xfffffffffffffffc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:18 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom(r1, 0x0, 0x0, 0x2143, &(0x7f0000005bc0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x1c542) fgetxattr(0xffffffffffffffff, &(0x7f0000000240)=@random={'os2.', '\x00'}, &(0x7f0000000280)=""/119, 0x77) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 1014.296338][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.307227][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.316988][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1014.326000][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.334858][ T142] usb 1-1: config 0 descriptor?? [ 1014.356386][ T142] usb 1-1: can't set config #0, error -71 [ 1014.363794][T23346] FAULT_INJECTION: forcing a failure. [ 1014.363794][T23346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.367208][ T142] usb 1-1: USB disconnect, device number 43 [ 1014.387974][T23349] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1014.392716][T23346] CPU: 1 PID: 23346 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1014.405060][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.415251][T23346] Call Trace: [ 1014.418539][T23346] dump_stack+0x14a/0x1ce [ 1014.422866][T23346] ? devkmsg_release+0x11c/0x11c [ 1014.427805][T23346] ? show_regs_print_info+0x12/0x12 [ 1014.433002][T23346] ? stack_trace_save+0x123/0x1f0 [ 1014.438152][T23346] ? kasan_alloc_pages+0x4a/0x60 [ 1014.443072][T23346] should_fail+0x6fb/0x860 [ 1014.447461][T23346] ? setup_fault_attr+0x3d0/0x3d0 [ 1014.452462][T23346] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1014.457810][T23346] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1014.463334][T23346] ? __rcu_read_lock+0x50/0x50 [ 1014.468075][T23346] handle_mm_fault+0x18e6/0x41e0 [ 1014.472986][T23346] ? __pagevec_release+0x130/0x130 [ 1014.478130][T23346] ? finish_fault+0x230/0x230 [ 1014.482785][T23346] ? lru_add_drain_cpu+0x3d9/0x510 [ 1014.487880][T23346] ? _raw_spin_unlock+0x5/0x20 [ 1014.492622][T23346] ? follow_page_mask+0x76a/0x1050 [ 1014.497716][T23346] __get_user_pages+0xca0/0x1420 [ 1014.502629][T23346] ? populate_vma_page_range+0xf0/0xf0 [ 1014.508057][T23346] ? memset+0x1f/0x40 [ 1014.512024][T23346] ? vmacache_update+0x9f/0xf0 [ 1014.516758][T23346] __mm_populate+0x3a0/0x560 [ 1014.521322][T23346] ? __get_user_pages+0x1420/0x1420 [ 1014.526492][T23346] ? ksys_write+0x25d/0x2c0 [ 1014.530968][T23346] do_mlock+0x4a2/0x540 [ 1014.535096][T23346] ? __ia32_sys_read+0x80/0x80 [ 1014.539836][T23346] __x64_sys_mlock+0x5c/0x70 [ 1014.544399][T23346] do_syscall_64+0xcb/0x150 [ 1014.548878][T23346] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1014.554746][T23346] RIP: 0033:0x45d239 [ 1014.558615][T23346] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.578193][T23346] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1014.586577][T23346] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1014.594520][T23346] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 09:04:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x11}, 0x0) 09:04:18 executing program 4 (fault-call:6 fault-nth:37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1014.602466][T23346] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1014.610409][T23346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 1014.618374][T23346] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x12}, 0x0) [ 1014.664310][T23365] FAULT_INJECTION: forcing a failure. [ 1014.664310][T23365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.678001][T23365] CPU: 0 PID: 23365 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1014.688187][T23365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.698255][T23365] Call Trace: [ 1014.701545][T23365] dump_stack+0x14a/0x1ce [ 1014.705873][T23365] ? devkmsg_release+0x11c/0x11c 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x13}, 0x0) 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x14}, 0x0) [ 1014.710813][T23365] ? show_regs_print_info+0x12/0x12 [ 1014.716016][T23365] ? stack_trace_save+0x123/0x1f0 [ 1014.721039][T23365] ? kasan_alloc_pages+0x4a/0x60 [ 1014.725972][T23365] should_fail+0x6fb/0x860 [ 1014.730389][T23365] ? setup_fault_attr+0x3d0/0x3d0 [ 1014.735419][T23365] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1014.740804][T23365] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1014.746340][T23365] ? __rcu_read_lock+0x50/0x50 [ 1014.751098][T23365] handle_mm_fault+0x18e6/0x41e0 [ 1014.756036][T23365] ? __pagevec_release+0x130/0x130 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x111}, 0x0) [ 1014.761146][T23365] ? finish_fault+0x230/0x230 [ 1014.765823][T23365] ? lru_add_drain_cpu+0x3d9/0x510 [ 1014.770933][T23365] ? _raw_spin_unlock+0x5/0x20 [ 1014.775691][T23365] ? follow_page_mask+0x76a/0x1050 [ 1014.780800][T23365] __get_user_pages+0xca0/0x1420 [ 1014.785736][T23365] ? populate_vma_page_range+0xf0/0xf0 [ 1014.791185][T23365] ? memset+0x1f/0x40 [ 1014.795167][T23365] ? vmacache_update+0x9f/0xf0 [ 1014.799925][T23365] __mm_populate+0x3a0/0x560 [ 1014.804511][T23365] ? __get_user_pages+0x1420/0x1420 [ 1014.809711][T23365] ? ksys_write+0x25d/0x2c0 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x194}, 0x0) [ 1014.814211][T23365] do_mlock+0x4a2/0x540 [ 1014.818362][T23365] ? __ia32_sys_read+0x80/0x80 [ 1014.823125][T23365] __x64_sys_mlock+0x5c/0x70 [ 1014.827712][T23365] do_syscall_64+0xcb/0x150 [ 1014.832210][T23365] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1014.838089][T23365] RIP: 0033:0x45d239 [ 1014.841982][T23365] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:04:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x196}, 0x0) 09:04:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSBRKP(r4, 0x5425, 0x1) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1014.861583][T23365] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1014.869998][T23365] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1014.877968][T23365] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1014.885938][T23365] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1014.893910][T23365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 1014.901876][T23365] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1014.996263][ T150] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1015.066176][ T142] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1015.246137][ T150] usb 2-1: Using ep0 maxpacket: 8 [ 1015.366241][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1015.377295][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1015.387460][ T150] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1015.398528][ T150] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1015.408539][ T150] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1015.426234][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.437230][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.446983][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1015.455994][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.466573][ T142] usb 1-1: config 0 descriptor?? [ 1015.496211][ T150] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1015.505373][ T150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1015.513520][ T150] usb 2-1: SerialNumber: syz [ 1015.536175][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.542994][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.556598][ T150] hub 2-1:1.0: bad descriptor, ignoring hub [ 1015.562659][ T150] hub: probe of 2-1:1.0 failed with error -5 [ 1015.757681][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.764549][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1015.816153][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1015.822256][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1015.830584][ T142] usb 1-1: USB disconnect, device number 44 [ 1015.987139][ T150] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1016.296023][ T142] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1016.466036][T23405] usb 2-1: reset high-speed USB device number 77 using dummy_hcd [ 1016.566018][ T142] usb 1-1: device descriptor read/64, error 18 [ 1016.715978][T23405] usb 2-1: Using ep0 maxpacket: 8 [ 1016.856063][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.862958][T23350] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1016.915971][ C0] usblp0: nonzero read bulk status received: -71 [ 1016.965990][ T142] usb 1-1: device descriptor read/64, error 18 [ 1017.078051][T18559] usb 2-1: USB disconnect, device number 77 [ 1017.106668][T18559] usblp0: removed [ 1017.235924][ T142] usb 1-1: new high-speed USB device number 46 using dummy_hcd 09:04:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x14) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x268}, 0x0) [ 1017.365218][T23416] ion_dma_buf_mmap: failure mapping buffer to userspace 09:04:21 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x1, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x34, @local, @dev={0xfe, 0x80, [], 0x1b}}}) dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x1f, 0x0, 0x9, 0x0, 0x0, 0x18e, 0x8004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0x2}, 0x400, 0xff, 0x7a9, 0x2, 0x1000, 0x20, 0x4}, r7, 0x3, 0xffffffffffffffff, 0x2) sendto(r2, &(0x7f0000000200)="bbcb7b102dc97769f00eeb316a1c0dc7911a459d16346d9199bd7d75153470fb38ac904313727750e9376a2a1f1b3b5effd338ac3614dd477b4a163df8d931c8ee4ec80332cefd65e057b30c1359702884373a213dd29de9a7861ea144da0091b823bb0311f5f808dba8e14d80aa41bce83d1aee17e1dfb1611d9fb20452c805c3b9bdbb26bbfb3294027493c301105aabd83bc9ec1693469399272dcbf1aa63f83c05698fdd2a732ac400d3a2ac7fa694aec5fcd2a54cf9e9897f88488c743fc964076f8ef5b2d0b840b98b9b861522a5d707d75440c5ed8e790b3409efcd774cfbdb5366737d6541b2ff57ef423951b91671ca0d4910", 0xf7, 0x34048080, &(0x7f0000000140)=@can={0x1d, r4}, 0x80) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x7ff, 0x2}, {0x81, 0x3f}], r6}, 0x18, 0x2) 09:04:21 executing program 4 (fault-call:6 fault-nth:38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:21 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsopen(&(0x7f0000000040)='cpuset\x00', 0x1) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r8, 0x111, 0x3, 0x1, 0x4) 09:04:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x26a}, 0x0) [ 1017.644015][T23427] FAULT_INJECTION: forcing a failure. [ 1017.644015][T23427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.673102][T23427] CPU: 1 PID: 23427 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1017.683401][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:04:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0) 09:04:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0) [ 1017.693551][T23427] Call Trace: [ 1017.696849][T23427] dump_stack+0x14a/0x1ce [ 1017.701180][T23427] ? devkmsg_release+0x11c/0x11c [ 1017.706115][T23427] ? show_regs_print_info+0x12/0x12 [ 1017.711317][T23427] ? stack_trace_save+0x123/0x1f0 [ 1017.716338][T23427] ? kasan_alloc_pages+0x4a/0x60 [ 1017.721272][T23427] should_fail+0x6fb/0x860 [ 1017.725691][T23427] ? setup_fault_attr+0x3d0/0x3d0 [ 1017.730731][T23427] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1017.736114][T23427] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1017.741670][T23427] ? __rcu_read_lock+0x50/0x50 [ 1017.746440][T23427] handle_mm_fault+0x18e6/0x41e0 [ 1017.751367][T23427] ? __pagevec_release+0x130/0x130 [ 1017.756457][T23427] ? finish_fault+0x230/0x230 [ 1017.761110][T23427] ? lru_add_drain_cpu+0x3d9/0x510 [ 1017.766196][T23427] ? _raw_spin_unlock+0x5/0x20 [ 1017.770934][T23427] ? follow_page_mask+0x76a/0x1050 [ 1017.776020][T23427] __get_user_pages+0xca0/0x1420 [ 1017.780932][T23427] ? populate_vma_page_range+0xf0/0xf0 [ 1017.786385][T23427] ? memset+0x1f/0x40 [ 1017.790352][T23427] ? vmacache_update+0x9f/0xf0 [ 1017.795108][T23427] __mm_populate+0x3a0/0x560 [ 1017.799695][T23427] ? __get_user_pages+0x1420/0x1420 [ 1017.804881][T23427] ? ksys_write+0x25d/0x2c0 [ 1017.809465][T23427] do_mlock+0x4a2/0x540 [ 1017.813601][T23427] ? __ia32_sys_read+0x80/0x80 [ 1017.818356][T23427] __x64_sys_mlock+0x5c/0x70 [ 1017.822952][T23427] do_syscall_64+0xcb/0x150 [ 1017.827439][T23427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1017.833304][T23427] RIP: 0033:0x45d239 [ 1017.837290][T23427] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.856875][T23427] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1017.865265][T23427] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1017.873209][T23427] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1017.881153][T23427] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:22 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) unshare(0x44060400) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0xc0000) dup2(r2, r3) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/232) ioctl$PPPIOCSNPMODE(r1, 0x4004743c, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 09:04:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="a4339d057764", 0x6}, {&(0x7f0000000280)="3b7ab0f43fda9442027fb7a27e0bd7f0c1a5c4ff90338f4a608c8735b42261af2b4cdd691807435bc8efdf99db9d5aa551e215a2f76bbb079c46fdcdf1be6676d311d3c2673e563ca930ea5e6b95281cb20405ed67a0191a1324e5d482f7d783e0706eaa1daf9f6e1c7125d85ba2fd11b2c8c7991e9bb8669bb84109ca6a3ff571b97e7bed3388ba839d38ed002e", 0x8e}, {&(0x7f0000000380)="3382688cfd9dec6b80842e4b507108d2930a1dfac5d4dbbaf1e84864992e13d134bb09e77178d37db3505708d383e070f1a3c57e8deed9364523467c6c30d92ccdcd809c4f656b62f2cd5f79e79ae85be24de4a2f1918568d506de32", 0x5c}], 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = signalfd4(r3, &(0x7f0000000000)={[0x9]}, 0x8, 0x80800) ioctl$CHAR_RAW_PG(r4, 0x1269, &(0x7f0000000040)={0xff, 0x1, 0x92, &(0x7f00000000c0)="b0390c8419a5a424c5ccfeb59019c16ba60f9f57bfea299dfda0faeb2065eac1977c505adb8047d9bda90221e38c42b8d983e3573a396f6dd3dcecdabc638830719bf3a7817688cd201a5a62949b34cda2cb0d89539e78ef524641a40154b94b837ab07c27697624340e79e0aecfdf11a7f8bb371da9fbdabd1f9f9626a4c7cac99018b8c162de6c8ce4a7cf85d592adf772"}) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000001c0)={0x8, 0x4}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:22 executing program 4 (fault-call:6 fault-nth:39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1017.889096][T23427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 1017.897053][T23427] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1017.950421][T23453] FAULT_INJECTION: forcing a failure. [ 1017.950421][T23453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.971666][T23453] CPU: 1 PID: 23453 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1017.981872][T23453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.991921][T23453] Call Trace: [ 1017.995205][T23453] dump_stack+0x14a/0x1ce [ 1017.999518][T23453] ? devkmsg_release+0x11c/0x11c [ 1018.004436][T23453] ? show_regs_print_info+0x12/0x12 [ 1018.009612][T23453] ? stack_trace_save+0x123/0x1f0 [ 1018.014609][T23453] ? kasan_alloc_pages+0x4a/0x60 [ 1018.019521][T23453] should_fail+0x6fb/0x860 [ 1018.023911][T23453] ? setup_fault_attr+0x3d0/0x3d0 [ 1018.028912][T23453] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1018.034258][T23453] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1018.039775][T23453] ? __rcu_read_lock+0x50/0x50 [ 1018.044510][T23453] handle_mm_fault+0x18e6/0x41e0 [ 1018.049443][T23453] ? __pagevec_release+0x130/0x130 [ 1018.054529][T23453] ? finish_fault+0x230/0x230 [ 1018.059176][T23453] ? lru_add_drain_cpu+0x3d9/0x510 [ 1018.064265][T23453] ? _raw_spin_unlock+0x5/0x20 [ 1018.069004][T23453] ? follow_page_mask+0x76a/0x1050 [ 1018.074091][T23453] __get_user_pages+0xca0/0x1420 [ 1018.079002][T23453] ? populate_vma_page_range+0xf0/0xf0 [ 1018.084431][T23453] ? memset+0x1f/0x40 [ 1018.088386][T23453] ? vmacache_update+0x9f/0xf0 [ 1018.093120][T23453] __mm_populate+0x3a0/0x560 [ 1018.097685][T23453] ? __get_user_pages+0x1420/0x1420 [ 1018.102856][T23453] ? ksys_write+0x25d/0x2c0 [ 1018.107331][T23453] do_mlock+0x4a2/0x540 [ 1018.111459][T23453] ? __ia32_sys_read+0x80/0x80 [ 1018.116196][T23453] __x64_sys_mlock+0x5c/0x70 [ 1018.120759][T23453] do_syscall_64+0xcb/0x150 [ 1018.125235][T23453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1018.131101][T23453] RIP: 0033:0x45d239 [ 1018.134971][T23453] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.154547][T23453] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1018.162930][T23453] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1018.170894][T23453] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1018.178842][T23453] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.186786][T23453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 1018.194741][T23453] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1018.206665][T23458] syz-executor.1 (23458) used obsolete PPPIOCDETACH ioctl [ 1018.275881][ T142] usb 1-1: device descriptor read/64, error -71 [ 1018.675796][ T142] usb 1-1: device descriptor read/64, error 18 [ 1018.795860][ T142] usb usb1-port1: attempt power cycle [ 1019.505703][ T142] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1019.675751][ T142] usb 1-1: device descriptor read/8, error -61 [ 1019.945705][ T142] usb 1-1: device descriptor read/8, error -61 [ 1020.215605][ T142] usb 1-1: new high-speed USB device number 48 using dummy_hcd 09:04:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000100)={0x87, @multicast2, 0x4e21, 0x4, 'rr\x00', 0x3a, 0xee8, 0x47}, 0x2c) 09:04:24 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) getpeername$tipc(r1, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x4) r6 = socket$inet6(0xa, 0x200000000003, 0x87) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socket(0x1d, 0x5, 0x2) 09:04:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0) 09:04:24 executing program 4 (fault-call:6 fault-nth:40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:24 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) fadvise64(r1, 0x0, 0x0, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fadvise64(r3, 0x0, 0x0, 0x4) [ 1020.374992][T23464] FAULT_INJECTION: forcing a failure. [ 1020.374992][T23464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1020.385615][ T142] usb 1-1: device descriptor read/8, error -61 [ 1020.397340][T23464] CPU: 1 PID: 23464 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1020.405094][T23473] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1020.407507][T23464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.407510][T23464] Call Trace: [ 1020.407531][T23464] dump_stack+0x14a/0x1ce [ 1020.407543][T23464] ? devkmsg_release+0x11c/0x11c [ 1020.407551][T23464] ? show_regs_print_info+0x12/0x12 [ 1020.407560][T23464] ? stack_trace_save+0x123/0x1f0 [ 1020.407574][T23464] ? kasan_alloc_pages+0x4a/0x60 [ 1020.452124][T23464] should_fail+0x6fb/0x860 [ 1020.456538][T23464] ? setup_fault_attr+0x3d0/0x3d0 [ 1020.461566][T23464] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1020.466949][T23464] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1020.472495][T23464] ? __rcu_read_lock+0x50/0x50 [ 1020.477262][T23464] handle_mm_fault+0x18e6/0x41e0 [ 1020.482198][T23464] ? __pagevec_release+0x130/0x130 [ 1020.487304][T23464] ? finish_fault+0x230/0x230 [ 1020.491973][T23464] ? lru_add_drain_cpu+0x3d9/0x510 [ 1020.497082][T23464] ? _raw_spin_unlock+0x5/0x20 [ 1020.501845][T23464] ? follow_page_mask+0x76a/0x1050 [ 1020.506957][T23464] __get_user_pages+0xca0/0x1420 [ 1020.511899][T23464] ? populate_vma_page_range+0xf0/0xf0 [ 1020.517352][T23464] ? memset+0x1f/0x40 [ 1020.521329][T23464] ? vmacache_update+0x9f/0xf0 [ 1020.523601][T23473] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1020.526085][T23464] __mm_populate+0x3a0/0x560 [ 1020.526095][T23464] ? __get_user_pages+0x1420/0x1420 [ 1020.526105][T23464] ? ksys_write+0x25d/0x2c0 [ 1020.526117][T23464] do_mlock+0x4a2/0x540 [ 1020.551404][T23464] ? __ia32_sys_read+0x80/0x80 [ 1020.556173][T23464] __x64_sys_mlock+0x5c/0x70 [ 1020.560765][T23464] do_syscall_64+0xcb/0x150 [ 1020.565285][T23464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1020.571168][T23464] RIP: 0033:0x45d239 [ 1020.575050][T23464] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.594652][T23464] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1020.603059][T23464] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1020.611023][T23464] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 09:04:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0) 09:04:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x100000001, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x40000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1020.618989][T23464] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.626965][T23464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 1020.634935][T23464] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1020.685619][ T142] usb 1-1: device descriptor read/8, error -71 [ 1020.687322][T23491] ion_dma_buf_mmap: failure mapping buffer to userspace 09:04:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xa00}, 0x0) 09:04:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000001580)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r0], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) r5 = socket$netlink(0x10, 0x3, 0x5) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0xffdff02c}, {0x80000006}]}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001500)={0x2, &(0x7f0000000340)=[{0x20, 0x10, 0x0, 0x6}, {0x9}]}, 0x10) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)={0xfd, 0x75, 0x2, {0xf2, "e805857a60e0234d27a19b509c4a09a46a23e11c09b420a54b560b0c403debe6d036b3733be8fa71becd49bc1a4ec43753884ca0d69b3ad05e6c4dbe20fba0417f41a2d5d1831a9c4cc4223d89319c7694f662a4abc78d1b782ec769391c679c30788c7ea19a916dc61978680e65c2130773af91ae4128961fe066ecce0856b883c1d0de82229262e23f8d4f605f30e6236c2ae49c398123deaad6323d306876891240ddc31e1f95325cb26eb291bc8e6d297567afa86c6cf1da126d9e3506636cb409cad4092d95988e38c5026d69d4960703ecef71a15d88824c0f3c4e2e81e07e85af9aad62dc7a1cc8258840a99226ff"}}, 0xfd) signalfd4(r6, &(0x7f00000001c0)={[0x2]}, 0x8, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x2e, &(0x7f0000000000)="b83fbf4f49154dc063611cf82dc89286fdd004b327486c6ccb135b3f6ca0ffe03ed102b460149c69459e67c6d255", 0xca, 0x0, &(0x7f00000000c0)="afd346e5455c294bcab6ac1babf0d8843f8cc57a7195afc3da8415d692183ee4c0d4e18963818b3eca7235ffa7a547db413fa2931e79b4a57ad7dd59316bf7aa474b72ed9f2c9bb210df7d974fad1118a755465e48e71d189abc4af6ac2f7e0cd4206c153f58e5e3abadb719a2eecca7659ea8d46b7b478feda52d922e118e174435135c34a2bb6258a59111b8de9c03668b93adcc5175ecbd5c41fc5ebaca13f015d612185ec7828a0b49a56a450e000adfe1b277cc108a316828bf4ab46c7dde78ddc7d24123094391"}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000001540)=[{0x5, 0x40, 0x3f, 0x5}, {0x101, 0x71, 0x4}, {0x1, 0x80, 0x8, 0x4}]}, 0x10) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000014c0)=@add_del={0x2, &(0x7f0000000300)='vcan0\x00'}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x84000, 0x0) 09:04:25 executing program 4 (fault-call:6 fault-nth:41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1020.805754][ T142] usb usb1-port1: unable to enumerate USB device [ 1020.812922][T23504] FAULT_INJECTION: forcing a failure. [ 1020.812922][T23504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1020.856652][T23504] CPU: 0 PID: 23504 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1020.870740][T23504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.880884][T23504] Call Trace: [ 1020.884187][T23504] dump_stack+0x14a/0x1ce [ 1020.888516][T23504] ? devkmsg_release+0x11c/0x11c [ 1020.893451][T23504] ? show_regs_print_info+0x12/0x12 [ 1020.898649][T23504] ? stack_trace_save+0x123/0x1f0 [ 1020.903672][T23504] ? kasan_alloc_pages+0x4a/0x60 [ 1020.908588][T23504] should_fail+0x6fb/0x860 [ 1020.912986][T23504] ? setup_fault_attr+0x3d0/0x3d0 [ 1020.917993][T23504] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1020.923337][T23504] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1020.928853][T23504] ? __rcu_read_lock+0x50/0x50 [ 1020.933590][T23504] handle_mm_fault+0x18e6/0x41e0 [ 1020.938520][T23504] ? __pagevec_release+0x130/0x130 [ 1020.943611][T23504] ? finish_fault+0x230/0x230 [ 1020.948260][T23504] ? lru_add_drain_cpu+0x3d9/0x510 [ 1020.953346][T23504] ? _raw_spin_unlock+0x5/0x20 [ 1020.958081][T23504] ? follow_page_mask+0x76a/0x1050 [ 1020.963164][T23504] __get_user_pages+0xca0/0x1420 [ 1020.968075][T23504] ? populate_vma_page_range+0xf0/0xf0 [ 1020.973504][T23504] ? memset+0x1f/0x40 [ 1020.977456][T23504] ? vmacache_update+0x9f/0xf0 [ 1020.982190][T23504] __mm_populate+0x3a0/0x560 [ 1020.986756][T23504] ? __get_user_pages+0x1420/0x1420 [ 1020.991926][T23504] ? ksys_write+0x25d/0x2c0 [ 1020.996402][T23504] do_mlock+0x4a2/0x540 [ 1021.000532][T23504] ? __ia32_sys_read+0x80/0x80 [ 1021.005269][T23504] __x64_sys_mlock+0x5c/0x70 [ 1021.009835][T23504] do_syscall_64+0xcb/0x150 [ 1021.014313][T23504] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.020177][T23504] RIP: 0033:0x45d239 [ 1021.024044][T23504] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.043620][T23504] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:04:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xb00}, 0x0) [ 1021.052006][T23504] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1021.059949][T23504] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1021.067893][T23504] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1021.075846][T23504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1021.083791][T23504] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:25 executing program 5: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x1, 0x401, 0x7c, 0x200, 0x5}, 0x331, [0x2, 0x3, 0x10001, 0x7, 0x0, 0x10000, 0x7ff, 0x0, 0x100, 0x5, 0x97, 0x8, 0x72, 0x7, 0x0, 0xfffffffc, 0x4, 0x7, 0x8001, 0x57190787, 0xc5, 0x8, 0x9, 0x1, 0x400, 0x1ff, 0xfffffffc, 0x0, 0x5d, 0x2, 0x0, 0xfffffffb, 0x3f, 0xb0e, 0x10000, 0x20, 0x7ff, 0x80000000, 0x1, 0x6, 0xdcee, 0xf169, 0xa8, 0x3, 0x80000000, 0xfffffffc, 0x246c6c67, 0x9, 0x4, 0x3, 0x7, 0x81, 0x0, 0x100, 0x0, 0x9, 0x200, 0x3f, 0x7f, 0xae3c, 0x7, 0x101, 0x79, 0x2, 0x0, 0xf0000000, 0x1ff, 0x0, 0x5, 0x2, 0x1000, 0x10001, 0x6, 0x7, 0x6, 0x1, 0x4, 0x7fff, 0x5, 0x6, 0xa0, 0xd54, 0x800, 0x3f, 0x800, 0xb50, 0x7fb, 0x3, 0x81, 0x8, 0x16e4e56f, 0x0, 0x8001, 0x1, 0x91b, 0x400, 0x3, 0x1, 0x9, 0xc7ec, 0x13, 0x60a, 0x1, 0x6, 0x5, 0x101, 0xfff, 0x7, 0x3, 0x3, 0x9, 0x6, 0x7fff, 0x5, 0x7, 0x7, 0xfffff1b7, 0x369293d3, 0xffff7796, 0x3, 0xffff, 0x1, 0x9, 0x304, 0x4, 0x9, 0x2, 0x10000, 0xff, 0x5, 0xe3, 0x1f, 0x1, 0x5792, 0x2, 0x40, 0x2, 0x1, 0x3, 0x5, 0x10000, 0x401, 0x9c8, 0x5, 0x0, 0x1f, 0x0, 0x71, 0x80000001, 0x10001, 0x4413, 0xffffffff, 0x9, 0x1, 0x9, 0x2, 0x6, 0xb3, 0x3, 0x7, 0x6, 0x5, 0xffffffff, 0x9, 0x800, 0x9, 0x67, 0x0, 0x0, 0x9, 0xfffffffd, 0x6, 0x400, 0xffffff7f, 0x7f, 0x6, 0x5, 0x5, 0x296, 0x8, 0x5, 0x1, 0x200, 0xfff, 0x8, 0xe2, 0x3bba9be6, 0x7ff, 0x9, 0x1, 0x4e70, 0x2, 0x53d, 0x7fffffff, 0x8, 0xa8d, 0x8e, 0x414, 0x1, 0x3, 0x7fffffff, 0x5, 0x4, 0xfffffffc, 0x1ff, 0x2, 0x8f7, 0x0, 0xe60, 0x2, 0x80000001, 0x2, 0x5, 0x5cfcf51b, 0x4d7f, 0x2, 0xffff29c5, 0x6, 0x0, 0x8, 0x0, 0x9, 0xfffffffb, 0x4, 0x4, 0x8, 0x2, 0x1000, 0xccdf, 0x7, 0x100, 0x6, 0x6, 0x1, 0x9, 0x0, 0x3, 0xffffffff, 0x1ff, 0x3, 0x6, 0x7, 0x1dcf7759, 0x4, 0x0, 0x0, 0x2, 0x1f, 0xffff916b, 0x80, 0x80000000, 0x3, 0x101, 0x5, 0x80000000, 0xffff, 0x1f, 0x8, 0x1, 0xcf, 0x7f, 0x0, 0x0, 0x1f, 0x0, 0xf5, 0x3, 0x8001, 0xd9b4, 0x6, 0x1000, 0x3ff, 0x7, 0x6, 0x9, 0xfff, 0xfffff05b, 0x4, 0x6, 0x7, 0x400, 0x9, 0x8, 0x6, 0x2800000, 0x5, 0x3, 0x80000000, 0x7ff, 0xfca1, 0x1, 0x1ff, 0x3ff, 0xed, 0x6, 0x3, 0x3, 0xb3a, 0x7, 0x7, 0x3, 0xff, 0x9, 0x7f, 0x100, 0xfffffbb3, 0x1e, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8, 0x1, 0x5, 0xfffffff7, 0x9, 0x4, 0x3, 0xcf52, 0x20, 0x2, 0x3, 0x0, 0x5c5, 0x9, 0x8, 0x8, 0x6, 0x4, 0x0, 0xdc0, 0x3, 0x80000001, 0x1, 0x0, 0x9718, 0xb7, 0xfffff3b3, 0x4, 0x7, 0x2, 0x4, 0xfa39, 0x3ff, 0x708f, 0x7fff, 0x6, 0x2, 0xffffff01, 0x2, 0x101, 0x5, 0x5, 0x40, 0xfffffffe, 0x0, 0x40, 0x80000000, 0x1, 0x3, 0x40, 0x8, 0x0, 0x4, 0x7ff, 0x3, 0x7fff, 0x6000, 0x6, 0x1, 0x3, 0x5, 0x2, 0xf5, 0x800, 0x401, 0xffff8000, 0x3f, 0x1f, 0x1, 0x7f5e, 0x7, 0x101, 0x8, 0xb686, 0x1, 0xc8, 0x30000000, 0x7ff, 0x2, 0x1d89, 0xdd8, 0x7ff, 0x400, 0x10001, 0x7fffffff, 0x2, 0x8001, 0xcf6, 0x1, 0x3, 0x2, 0xffffff82, 0x100, 0x2, 0x5, 0x3ff, 0x1, 0x101, 0x9, 0x8a, 0x2, 0x9, 0x81, 0x8, 0x2, 0x1, 0x4, 0x5, 0x0, 0x0, 0x3, 0xe57, 0x9, 0x7fffffff, 0x8, 0x2, 0xd3f, 0xfff, 0x7, 0x3f, 0x1000, 0x3, 0x5, 0x20f0, 0x9, 0x10000, 0x9, 0x6, 0xfffffffb, 0x0, 0x9, 0x7, 0x80000001, 0x9, 0xc3, 0x400, 0x0, 0x81, 0x5, 0x8001, 0x400, 0x666b, 0x7, 0x4, 0x8, 0xfffffff9, 0x10001, 0x6, 0x3, 0xffffff8f, 0x2, 0x5, 0x5, 0x81, 0x3ff, 0x0, 0x1ff, 0x100, 0x3, 0x9, 0x8cc9, 0x1f, 0x1c, 0x0, 0x5a9, 0x3, 0x10d, 0x7, 0x2000000, 0x8, 0x8000, 0xfffffff8, 0x1, 0x9, 0xf4, 0x2, 0x9, 0x0, 0x2, 0x1f, 0x100, 0x1ff, 0x7, 0x5, 0x3, 0x9000, 0x3ff, 0x8, 0xd7b, 0x4, 0x4, 0x7, 0x0, 0xd2, 0x9, 0x1fc, 0x0, 0x7, 0x9, 0x7, 0x0, 0x9, 0x89, 0x1, 0x1a, 0x100, 0x101, 0xd1d2, 0x1, 0x3a77, 0x5, 0x2, 0x200, 0x3f, 0x36, 0x3, 0x0, 0xfffffffe, 0x2405c6d5, 0x6, 0x1f, 0x8, 0x5, 0x1, 0x100, 0xde8, 0x765, 0x8, 0x9, 0x8, 0x80, 0x7, 0x2, 0x4cd, 0x1, 0xfff, 0xfff, 0x9, 0x2, 0x95d, 0xfffffffd, 0x5b54, 0xffff, 0x5, 0x4, 0x0, 0x4, 0xffffffff, 0x1800000, 0xb80, 0x8, 0xffffffff, 0x6, 0x34b5, 0xc49, 0x404, 0x2, 0x2, 0x8, 0x80000001, 0x0, 0xffffffff, 0x0, 0x2, 0x3ff, 0xbe6, 0x6, 0x8, 0xfff, 0xffffffc1, 0x3, 0x2, 0x9, 0x80000001, 0xffffffff, 0x3ff, 0x7ab1, 0x2c2c, 0x28, 0x88, 0xffff8000, 0x74b, 0x5, 0xa4fb, 0x2df5, 0x0, 0x4, 0x0, 0x46, 0x9, 0x4, 0xff, 0x6, 0x0, 0x6, 0x1, 0x5, 0x2cd08e55, 0xffffffff, 0x1, 0x4, 0x4, 0x3, 0x100, 0x4, 0x400, 0x0, 0x7ff, 0x7, 0x8, 0x2, 0xfffffff9, 0x6763, 0x7fffffff, 0x9311, 0x51a, 0x7fffffff, 0x1, 0x1, 0x5d, 0x9, 0x10000, 0x2, 0x81, 0x6ba, 0x92, 0x8000, 0x200, 0x6, 0x7, 0x0, 0x9, 0x9, 0xd1b0, 0x7, 0xc240, 0x9d, 0x101, 0x800, 0x3, 0x10001, 0xffff, 0xaf6, 0x1, 0x6, 0xfffff800, 0x1, 0xfa9, 0x6, 0xff, 0x401, 0xfffffffb, 0x8, 0x80000001, 0x7f, 0xc8, 0x8000, 0x7ff, 0x0, 0x1f7, 0xa102, 0x42, 0x2, 0x6, 0x20, 0x8000, 0xfffffe00, 0x5, 0x3, 0x5, 0x1, 0x9, 0x8060, 0x7f, 0xfff, 0x3, 0xffff, 0x5, 0xfff, 0x1, 0x1, 0x9, 0x9, 0x6, 0xff, 0x8, 0x7, 0x569, 0x7, 0xd0d6, 0x9, 0x9fb, 0x8, 0x53bf93cb, 0xffffff62, 0x9, 0x7f3f7fd3, 0x0, 0xc1, 0x780, 0x101, 0x6, 0x6, 0x7, 0x5, 0xfff, 0x29, 0xa4, 0x8, 0x5, 0xfffffff8, 0x3, 0x1000, 0xa759, 0x400, 0xffd9, 0xe71f, 0x0, 0x1000, 0x7, 0x1, 0x0, 0xfdd, 0x400, 0x3, 0x200, 0x3, 0x9, 0x4, 0x6, 0x2, 0x10000, 0x0, 0x9, 0x3, 0x7, 0x2, 0xfffffffd, 0x23, 0x3f, 0x2, 0x0, 0x7, 0x401, 0xffff, 0x3f, 0x5, 0x8, 0x40, 0x80, 0x6c, 0x1, 0x800, 0x3, 0x2d7, 0x6e0c, 0x0, 0x6, 0x101, 0x10000, 0x200, 0x20, 0x9, 0x28, 0x7, 0x6, 0x4, 0x4753, 0x0, 0x10000, 0x3, 0x4, 0x8, 0x1, 0xf9, 0x1, 0x5, 0x7fffffff, 0x8, 0xfffff9a1, 0x4, 0x2, 0x401, 0x5, 0x6, 0x3, 0xff, 0x7fffffff, 0x4, 0x2, 0x7, 0x3ff, 0x8, 0x0, 0x4, 0xcd23, 0xfffff6da, 0x93a, 0x6, 0x800, 0x1, 0x401, 0x7, 0x29, 0x1, 0x7, 0x51, 0x240786b9, 0x8, 0x80000001, 0x9, 0x7ff, 0x43f1, 0x3, 0x3, 0x76, 0x10000, 0x80000000, 0x6, 0x2, 0x2, 0x10001, 0x4, 0x3c57, 0x294a, 0x9, 0x9, 0xfffffffc, 0x7, 0xecd, 0x200, 0x8001, 0x7f, 0x101, 0xff, 0x10000, 0x2, 0x8000, 0x3, 0x1, 0x80, 0x7ff, 0xfffffff8, 0x1, 0x85, 0xffff, 0x3ff, 0x9, 0x0, 0x7fffffff, 0x80, 0x5, 0xd3, 0xe3e, 0x4, 0xc7fd, 0x5, 0x4, 0x1ff, 0x9, 0x3ff, 0xffff84df, 0x800, 0x3, 0x1, 0x3, 0x1, 0x1, 0x40, 0xff, 0x81, 0x1, 0x3, 0x9, 0x1, 0x6, 0x3, 0x3, 0x550, 0x4, 0x4, 0x5, 0x40000000, 0x401, 0x4, 0x3a, 0x6, 0xd9c1, 0xffff, 0x9, 0x0, 0x4, 0x5, 0x2, 0x100, 0x7f, 0xfffffffc, 0x1f, 0xffffffff, 0xa6, 0x9, 0x3, 0x80000000, 0x8, 0x9, 0x3, 0x32, 0xffffff0a, 0xff, 0x5, 0x6, 0x2, 0x7ff, 0x3, 0xffffffff, 0x3, 0x1, 0x5, 0x4, 0x101, 0x6, 0x5, 0x3ff, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x2, 0x401, 0x2, 0x2, 0xfc9, 0x7508, 0x7, 0x7, 0x3f, 0x7ff, 0x200, 0x32, 0x10000, 0x6, 0x3, 0x6, 0xee, 0x1, 0x1000, 0x9, 0x0, 0x23ec, 0x7ff, 0xfffffff8, 0x60, 0x20, 0x3, 0x4, 0x8, 0x10001, 0x1f, 0x10001, 0x25a, 0x5, 0x2, 0xffffffff, 0x3, 0x101, 0xfffffff8, 0x5, 0x9, 0x6, 0x100, 0x0, 0x5, 0x2ae, 0x5, 0x3, 0x4c, 0x3, 0xfffffffd, 0xe9, 0x40, 0x9, 0x4, 0x10000, 0x8, 0x2, 0xe01d, 0x7, 0x7, 0x8, 0x7, 0x80000001, 0x7, 0x1ff, 0x6, 0x0, 0x7ff, 0xd42, 0xa8, 0x9, 0x216, 0x200, 0x7, 0x3f, 0x2, 0x8, 0x2, 0x200, 0x6, 0x6, 0x7f, 0xffe0]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:25 executing program 4 (fault-call:6 fault-nth:42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1100}, 0x0) 09:04:25 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) fadvise64(r1, 0x0, 0x0, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc080) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fadvise64(r3, 0x0, 0x0, 0x4) [ 1021.257914][T23524] FAULT_INJECTION: forcing a failure. [ 1021.257914][T23524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1021.289131][T23524] CPU: 1 PID: 23524 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1021.299315][T23524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.309368][T23524] Call Trace: [ 1021.312663][T23524] dump_stack+0x14a/0x1ce [ 1021.317005][T23524] ? devkmsg_release+0x11c/0x11c [ 1021.321942][T23524] ? show_regs_print_info+0x12/0x12 [ 1021.327152][T23524] ? stack_trace_save+0x123/0x1f0 [ 1021.332173][T23524] ? kasan_alloc_pages+0x4a/0x60 [ 1021.337107][T23524] should_fail+0x6fb/0x860 [ 1021.341529][T23524] ? setup_fault_attr+0x3d0/0x3d0 [ 1021.346558][T23524] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1021.351930][T23524] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1021.357479][T23524] ? __rcu_read_lock+0x50/0x50 [ 1021.362248][T23524] handle_mm_fault+0x18e6/0x41e0 [ 1021.367198][T23524] ? __pagevec_release+0x130/0x130 [ 1021.372318][T23524] ? finish_fault+0x230/0x230 [ 1021.376994][T23524] ? lru_add_drain_cpu+0x3d9/0x510 [ 1021.382109][T23524] ? _raw_spin_unlock+0x5/0x20 [ 1021.386973][T23524] ? follow_page_mask+0x76a/0x1050 [ 1021.392102][T23524] __get_user_pages+0xca0/0x1420 [ 1021.397048][T23524] ? populate_vma_page_range+0xf0/0xf0 [ 1021.402508][T23524] ? memset+0x1f/0x40 [ 1021.406493][T23524] ? vmacache_update+0x9f/0xf0 [ 1021.411258][T23524] __mm_populate+0x3a0/0x560 [ 1021.415855][T23524] ? __get_user_pages+0x1420/0x1420 [ 1021.421059][T23524] ? ksys_write+0x25d/0x2c0 [ 1021.425568][T23524] do_mlock+0x4a2/0x540 [ 1021.429726][T23524] ? __ia32_sys_read+0x80/0x80 [ 1021.434491][T23524] __x64_sys_mlock+0x5c/0x70 [ 1021.439079][T23524] do_syscall_64+0xcb/0x150 [ 1021.443581][T23524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1021.449472][T23524] RIP: 0033:0x45d239 09:04:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1101}, 0x0) [ 1021.453362][T23524] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.472964][T23524] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1021.481376][T23524] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1021.489343][T23524] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1021.497318][T23524] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'bond_slave_1\x00', {0x1}, 0x8}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000000c0)="58ed29475147bc88aa16c660e065c49aab5c237d6f6bab5eb63f5cb098f99da641c47d61e7c30ff0c4070025cc065e02e436810f8cb5981f7d08ba2e8cd88c40c981d0a56cde9cbff97c10851f47a121bbb908e4e0c1df5a9a6d836252e4f663e581dc60daceb0d182cacad2891f76b6") write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1021.505294][T23524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 1021.513262][T23524] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa3, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x8, 0x24, 0x7, 0x0, 0x0, 0x0, '\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "70a5"}, @format_type_i_discrete={0x8}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x23, &(0x7f00000007c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa}, @generic={0x14, 0x10, 0xa, "8e2047ce2df11a45df75861662b77b8f89"}]}}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendfile(r4, r6, &(0x7f0000000140)=0xa4, 0x6) dup3(r4, r5, 0x80000) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7f}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000140), 0x0, 0x20000800, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) getsockname$unix(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) [ 1021.905652][ T142] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1022.355420][ T142] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1022.367730][ T142] usb 6-1: config 1 has no interface number 1 [ 1022.381807][ T142] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1022.408923][ T142] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.585426][ T142] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.597836][ T142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.606745][ T142] usb 6-1: Product: syz [ 1022.610988][ T142] usb 6-1: Manufacturer: syz [ 1022.616576][ T142] usb 6-1: SerialNumber: syz [ 1022.955409][ T142] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1022.978016][ T142] usb 6-1: USB disconnect, device number 16 09:04:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) fchmod(0xffffffffffffffff, 0x1db) r3 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r3, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:27 executing program 4 (fault-call:6 fault-nth:43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1200}, 0x0) 09:04:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=ANY=[], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800ff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000dfdaf00008001b0000000000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 09:04:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040c211082240000000982f8a2fee7fd14a000000090400000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYRESOCT=r5, @ANYRES32], 0x38}}, 0x24041) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r8) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$netlink(r4, &(0x7f0000004540)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000480)={0x18, 0x32, 0x8, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x81, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000000600)={0x11c, 0x21, 0x12, 0x70bd28, 0x25dfdbff, "", [@typed={0xa, 0x47, 0x0, 0x0, @str='team0\x00'}, @nested={0xa3, 0x47, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0xe4db}, @generic="c03e7d1b4562f6ba57086e285cbbf0ce098f5c76794376937298800fcbb187886511090fff68765270599c3f97e4dd4f6af0100e2ac02a394ab4dc8583d7769b211533b8021c51c7c67fdc9423962e4ff30d87dbb2fd81ded21614d31ec8a381e79a6044e4f3fbac320c25f7a664590cdf35e0d6512c1add806cc9e692a74acc127973302f580b1156d82e938368de16fee49a007ef9d8"]}, @nested={0x4, 0x31}, @generic="739623e3841f7794af047dc7b054e58684d2c94eebf1431020fe52976d583d2a4123b0df05d22d45fde2c212b868df52a04451a462b1f9fe29ba3dd8a50bc18e429750", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, [], 0x1}}]}, 0x11c}, {&(0x7f0000000380)={0x88, 0x26, 0x2, 0x70bd29, 0x25dfdbfc, "", [@generic="49250ff1afec35c6f274ef567e2e4bacdac0ce3dc3da6b124932f86e13469c2bd79d3cde039d779243b2e4f39096cf445fc19193a4a152e852c7d01d2e28587bfa94aea208b3c7718a2461a039ce768d2ac27866d24baf66725916a1d7681304173419be4ed5749ffa514d862ca0d2f3086e634953"]}, 0x88}, {&(0x7f0000000740)={0x508, 0x33, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x3b7, 0x44, 0x0, 0x1, [@generic="b30b8db20ebc4e043b649bffaff6c7088b4eb7191ca3961d29a9ddc50f929991836dd3ec3b167cb95ebb2a742a8d1d788a3fbe115e22edc8d4b868d424eef425a6085af36aef197f5496d95efe967a63b7be6c8b1eafd7257866eeeaa33c9329c64b9d6868f47024ecaff37cc2540e6a380436bdb6860c9669f8f96c8e312fc802f9b751339c74a891226b13feb22de2d87c579853bd115dd3f686563e4aa4320db214a6567be99b12caaea34395d9ac8b9fd1bf7128203a89c3922311acc6", @generic="76f5a115e8bf6e8b474b50a98091e8763ec5426e64722a5af77670ed6e9b6058d40f59352ac82faf8d69f6c05f505291477dc63df299746bb22d2c7986e5fb00b1d42d17fa7386664f4d25245f629f895cbacceb3cbbce22f6424a7c09417bbc7e10242ef96e4bbc2d46a425917e2b83ecccc431f9465056adccdd6c8fa8b426f115912d61313c6bdb4c59446588d5aa8621a4bfd49f0327602749f0d98b83b51004f976ed01669b17ceef756ad926a80eb020d0d3c3c5310197de744e0c94f2410e63c1489ad90048608290cc2939a1314e50dffee635d9d150da7214", @generic="5a1f8d44cdce92509ee4c8f41e172cf60817a0f1acc80121b893c44c1f0f3201e8f7cf62d80c7050b60612672bf5feefb737c4ded9c22a81d47a44bebcc72d134ddb02217201eabd9eaa5b647d056ba5b895a1ecdacc1a1702553913ee87a9cd8cdb2c6846a660e5f5d68fccb3555c892b734c94e94523edd9a964c6fcc875a4a191d38b3911306d1c4890d0a8a9136fc4ec746d8115d81e849db2e6f04613abc84cec489091dab5dea56b27", @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x1000}, @typed={0x22, 0x6f, 0x0, 0x0, @binary="11f865da3bcf2da78f9416ab446126608907ed47f99449c79d8a327eefa5"}, @typed={0x8, 0x55, 0x0, 0x0, @uid}, @generic="7131eb759db8f99a1931a120ad77ece13e9487b65d2892cad1c0c2", @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x7}, @typed={0x100, 0x49, 0x0, 0x0, @binary="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"}]}, @typed={0x7, 0x1c, 0x0, 0x0, @str=' \x01\x00'}, @generic="9f12d7b4bd1726b53f9d1f3bfe5db9fe9da130bbc3d07855825514b4b6b78b70efe6911198cdbb5e2d8e36f2735720c1d573a10ae2c1221dbc5f5e75348f47cb95e70010a78fa68639669b6c3c1534305676e1363c195e60f91cab4bc81c6a3f748da84ac14cf020dc6dc6994549399675618efa1de61d1d5021423592de6d0932ff9fe8c976128561c7f79be97966ba12aae0ed62ad3ac6d5c0c068477b2d061fc45fb5b794fd56140e405f480af5a438", @nested={0x81, 0x3a, 0x0, 0x1, [@generic="00c6cfccc53891c06a1d4f5dcbf1816c229bf8dbf54ccded18d91b9066e7cd816e8287feeedb2cacb6de3c970cfe8d98530480f2a869caecc212c0cc5591a127c56f4173bf2681b966dcc4a433979f2cc88c97c393dda65f6b1a40b97f105ee200298bb2eb9e6a5f86", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x7fff}, @typed={0x7, 0x19, 0x0, 0x0, @str=' \x01\x00'}, @generic]}]}, 0x508}, {&(0x7f0000000c80)={0x248, 0x14, 0x20, 0x70bd29, 0x25dfdbff, "", [@nested={0x61, 0xc, 0x0, 0x1, [@generic="98fc733d8a4b7b30dd62d013c8fd210c0cd430a0c0fe4cacd78fb0304d18d9ea521ef4f6c8a426efc7408672d332092633874df8c641886b0e62d0f8a59962f728d00825b51acd71bc1223311e4294af817d2adae83f63718578beeb29"]}, @nested={0x1d1, 0x70, 0x0, 0x1, [@generic="b0526e84ca7ae44148a7577d933ba462c425a931a91619c821887f6626075fe04ef5244fcc5a880fa34e856f625e16e39a46f415a5c851a954eeeb02b0050a60b0b92e90a61753a8b9a188c2a1a6a2212272343b8303f2b6f17fb5d63e4a6c480efe9d", @generic="0ee9715cb5dddb284679252b58a53f297b25ab3a8f164798b49d22647af573c83988194c897726a55e1f1d5e7b7c759f6752da8607cf4357541d3cd743572e8b273266b0e16c3c05", @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x3}, @generic="d7ddbf5f24b9ba6033ddd856463d22bcafed90691f503399c1e3abc7df9b0a1abaf18983d49697a16bfe5363e71ea11e4f045fb2ffa3bf606cc6ad6ca38518a7b5a034d59685143828ca6b4a4a36a05112ffa94b9f3ba5aa8f228483b20004177bb9a788bd2459286a92750a5eebeca2d43bb8b113ba5a78a415543c2796a7a30563447371bad3167689e4dea652d84dc9934a210dff212928240fc19081ceced95070d28f01804f458435c8e6b33635d0115e7726d9b01137cbf7519b4fc8338b", @generic="72c11b5273c727d9db765afd8d7ebaaff3d9976a197514291244c97ea3f8247e88de47e052d78506e4158474c3da356d2b2e4c3c2ce75563e83a3d51d49c352cd9cbc6a2e46b49e7de", @typed={0x8, 0x2f, 0x0, 0x0, @uid}, @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x248}, {&(0x7f0000007f00)={0x2498, 0x42, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x2217, 0x7, 0x0, 0x1, [@generic="c641327c5e0000b1d072be4acbad78c15736a326e787b12d1cb5796a8dd4540dace4d88064df55f76b96e0e5839439ccdbb13681c203ffd3ebc9f992adfacce097b5381703d811fd8dab466725d2a92cba7c72400a2c8f", @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @typed={0x4, 0x87}, @generic="cfad096966b3735919a0ed16574ecd4509bf26681c4822045f36b255d96a79c387786cffd7027f099495ec4aca1440b322aaecbede8c4b32803e621e2ba22a284c5a51940c58dcc53729de468ff7f6256f29a3394bc6e725", @generic="231f480d2c9766063df6e6abc66bf805f6c09259aae0fe38793e4c35316b903befe66f04a3c2a79fc3e3ec609d47bbc05a010141b237c957e0111c76b17e489833b1d0d76c6e6086fa71016502e78e46df3b53f22f732a01edfab6988d02f169f58ea34813017bb400ca91b3bb93dc73e63ab7c01bf833e839e0f66dac3e8c45a3c6dedf37a3e285e9f8f60b2f505bd8b3f123bbbf74a5c63518baab7a8cddf4aac68a2c27c05333032631389ee9a8d07388356f8eb24ecef93de98029bc41886a20bad1bc257f88306b35d36d3ecc6ead688de2bf9eeaa0567b12eac2dd0ac2d53efbc9bde050a68ff897cff407d5eda27ef9be1887", @generic="349d664bb8f7175a588d4eefbf0b292bb8b92ff1aac258f29c9f31e9c3e659bff9b05437230ac1f0e9fed006fbbe5d65ac97ff88a7234da9ce4d344665696b3e9e819e6ff86843647ab7", @generic="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", @generic="cabace0c5db419597d17c0801433539c35f6518c4de0ade6", @generic="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"]}, @generic="2db15741305ca09cf35998571b1201bfd17415cde0911c1130a70ff7ab579048bb3dc55b957260e647aaafb139c38d49e291df994f5641144c44d5f633c9ca75c693a6b77dd85f6ad108cf7557ec6176f40b690cbde1d2a76d0ee8b0418ad135d275a2d6e867a02e4b484b4bea42cadebb869a7283e556a67c4582fef3bf46c146a1f146ccf8da4fc4fda70b6a881948e9dfa91f418aebca6ad4f0c55b78c66a58a059", @nested={0x1b5, 0x43, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid=r7}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x89, 0x0, 0x0, @fd}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r4}, @generic="21337b523c33f73411d15ebeead0350a89f4d4898b89c441252f4ee835f505e49fc4438cb34919b6f1af7291b7817ed7408e5bebe90a3321ae15bb334724b0cd9fb000eccb1a010cfc", @generic="5859ab19444499b40a52e530cf1a0bf411cb75a359c060daf7eb704997e726312f79c520078651a0e4c7cbb37af0690a27820a8525b7eb5f15d1928a8c3010d9dbd834ca2287d2cea8ca324a42459de76a570cbdbf90bf42390071815c1713aedf8c3e4433e96593572824908a6d76b0e455b60cf6fc5810055e3a811fe909ba4ef2b67891eaf01a72c64b86b3cb532b5988a6b2744a3acb01391759c86253f33fbf7b3947c5362dd0e3e9c3c74b4ef4bff59f251d42527fdf10da7260798954adb3170a6ce8b740b014176db49578361f9f72fc74168fd2d6843a6edfc30d4c1a3bf1", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@multicast1}, @generic="9fe29590234854a4ded8093c088710b83371412558d10ffec9905d4372181429ca8bcf419fef588676efe4cfee79ab5101a3201303"]}, @nested={0x4, 0x52, 0x0, 0x1, [@generic]}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x3e, 0x0, 0x0, @uid}]}, 0x2498}, {&(0x7f0000004580)={0x1bcc, 0x18, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x271, 0x74, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @typed={0x14, 0x59, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @generic="171a0d7ac62928d39bfd47abbf531ec3478808d31e285ed27576f2eaecd52e7af8fc2c613d02ce4aae5a53200933b67f8cc9fe5dd7e6e9a52d834a5bfafb97887868012bb6c39e9b90d7d60c1a0e6645fb89687bcb192d5b9b888dd28273c100491ed06f6e05e37c0ccf8fa6d57e610a63d3807a61a25e9e2bb17d7bddc054fd282b1a0ba08ec11c9d209a4b296a5d9d12f3a45707b5e3", @generic="c158de1251684d6defc3b7191e8e95b596a381cf226af10c02c68b3fb785ffb28c40344b41ad6468cf5b653153a16a06fb1834904bb1cea7e60e4450dc0e692719239350a260d8696e7ec860885f8c7a9abafff286996a67056753c70e53bba10d02615b4186695a37b167d38337820edf8df65e11e0e50ad0850bb11a42456149ce5e8ba7491dd02fba47696229d4af8e4cb24f2922b9b87765a90338fc1a914416e75582ab3e8168247b193869853e5dbdbb7484eb362b7f0b989e7adf4ba5ee43c0af869d", @typed={0x8, 0x75, 0x0, 0x0, @uid}, @generic="c654ae907e937f8724a7f82d5138c9329ec6852c914d93bf19ef3fe679d51cf420edc72a4c3000b095f5e30626aed76ae03efa6b49315b6751882e26e60e5eb2be71ffa2e16439c9676d54278fbb7a6e85551eed70585d2cdea72ca4a1dbafd5d6339bfe2cfe1886b8d5227b378155c8579fffa827f09f26ea1d8f7e0528ed53d1d32168f74346c1dde0026a9447438900f53a62003be0bf00508aeb4807976f8ae1c5e82b144279d82a227f337f49da3b1e5473a26af3b8222a704906194cc4803f17746a19aedaeabfb0c30f0c037b75fb3fe60b00058a5dec853afc7b659a"]}, @nested={0x126c, 0x4e, 0x0, 0x1, [@generic="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", @generic="1c33fe2710adf5d94d656d5aa93775b97ff587db1edf4456d9e60f73ebe845464c872124eaaeec96600eb831dcf198", @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="000e841e893be06855378c9dc89402460ec31e1b4f4748f2efccefa5561ab2630c989c22fddcf4e8e628862275480cd71f10a09a6a76911bc0e8fec64df4a6fa09156035a19c0da20417029bd8ef39812a15b7701c1dee77d020d6c68f5225ae89e742c931491761a7d853d4084b9fb0b58d027c261e031b62dc13b5e7b38622683f1b83e348320dd500daeb29256b1fee769e41c731daebc9af3deb", @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @generic="b17f604b6846f9a4d8e0786ecca7f0bbefe360e1611bde86c566ac90a054b1", @generic="699882ac72d70f0c2a02ad2312d9ca4f585cdd864381b3453ab0a81fffeb2f8b0631679520d6b38e3704534438e2548cc47a0c9958f61f2e6ac3efd70e16c59b8a7bf3e1f9991dc0609a21e35ac65f83b83a42f66d000f3d0c01ae238ba13a46ab9a1a57622fe82ce0bb107b1924c26d8465d6b307be3a030c9adf156ebf654edca3436e9f3ce5cc20fe2b1290954ca248dc094d", @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@remote}, @generic="cf205865421cf78977366f27ed21b0ee5cdec3a0208e2b9cfc2d52c7d7b52ec08a1eec8f44c4aa8e4eaf8de13bb53b9b40b0ecb09c6d222cc55bb393f75340f627a09604", @generic="af9e8abe074b1658a4539dfaa46d02eb84f2df7a8401ddbda3ef55e2e7e4c36021d7fb32f5237b19597ec4b98c68a47f4aa7c04f22a271b6b818a5a9bed7753e7251d1004d31e2cb38f8de3d9d7f6baaa283e2a161735e629dc9752a1d567b71e5b05c7c32f534b3689b788ea49c7f7a663934ad6ff7"]}, @nested={0x26d, 0x71, 0x0, 0x1, [@generic="475be84f0f9b54b500b6d899d8b958f6bdd573570f3af6173732faaece267cf12a09acf90ab44eb6e761a2fa5db2f17d", @generic="d40f70b2a39fe766055f2315eb02aa17929d19550c64afc9b8df20024fea2861f7db1c4e22588bc9da259792b00bfb249d7ace9608acba5248f62b34afc1cbc842ab15414b6aa219fec0424747fdc24b59d370de60098cf2eaf0d44dd1ed166461262b8e945cc745663de90f0c516cabb75d9f6481bd44e8bc1880611cde96092871b8f8acb9e04bb7e92a6ebcd819d4cb71a115064915a16ca5669cec41f840873887f0bce49d4b4afc6752e49a195b20af9e", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@local}, @generic="9a8caa9d7491035160999a28c4dcd0beb60b4c129b5d73c60143d57941238fdbd7aef7cf22f214f0e5ca78e02540ab84b9a649a28c40048305cbd52a6609f0ffc2e20a16af85e977b624df1eac8a879da8b7f6e41f485aebe88ff89b030eb1cc8419fc3bbedf7d7aaa7e42cc21fa159c7de9443be5903aa850ccf3026825adb8da97b7d046f4823cd7cfca192ef72ad7f5fc5be6bb3ec12dc7ad1eb0ca0994d67c78401efbb14f3fb0", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x6b, 0x0, 0x0, @fd}, @generic="e30b1b2455c28432373b7e2ce54e7de61ba1c02e4b94db36f8d03511825b123494a66ff72bdab6562eb33f36cbab129bb65c376ff597deced701998d8683a8effedc9c6af6c470890525b61564936d77532f609c840f17a26825500e9bc2af077a5803b02903de5e157111", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @generic="53da8d7c2f09c784228cc285d89fa86ac17299dd6b605f7fa7c16d0843c2f9b389489f4c81f259bf62e4340bb0c34d5e34c00449a19c199bfa62ce801ddb3d19c4dccd4914450f19613567194478c36376d23ba5ffdd"]}, @generic="0deba69eb54acb05525a5e60b9f228559a2ed09624269ba88db07abe3f2f49a09a67f9bfc8189c76e7bf68ef2204236992626ca37e28adbf0cf55e476b4a220fab2fa9a85f5632343f80d94652449f5bd3680087d68e930876d59c92aeddea876f1bce93a314de5ba960c1651a4702da3270837dc78f247f58ffd7be247780e856b4769fdcbed1e9e06064ac67480bd00a29c7aed51d786a97b4f4533c1cf1dd34fbe5a90a460d98fa02ffe6bafde6cea8", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x4}, @nested={0x18f, 0x90, 0x0, 0x1, [@typed={0xa, 0x5a, 0x0, 0x0, @str='team0\x00'}, @generic="0b479dacf72d60e66301e9f140c581d7914d904b06aba6056e75912153a31a5e7716ce89181f9663570604915e09ddde8e413ef2c547678277041a947db3e62f0d93d8a588c55712660c9e43", @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@remote}, @typed={0x78, 0x27, 0x0, 0x0, @binary="7025d471aa51999a29b2b53d8d148ac11be5b82484c72d56ef31f77a2f302bbcb8bca3d3e9d9717a1e4cb8cc642961fc05dba39ae9ab7cdeb3f3778b0e3d6c848706e6c7fa1fdb937637bba855783b58b01c14804c29bd0fc93d2d26a482b1768ba42fde5cdc765a32e756f428dda1e732c28554"}, @generic="1329292b", @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x3425}, @generic="ed96376d68de160ecdb9c4dbb4ae915cf2802886209380696ffd787841353b340f86fdde1050ffaf36d75cff8192eaa59be9d8c6a721fdef6e3283e108fc347164f0deb19f4b968401ec78d0b021c4850ced3c15cb6418439bf3e6f91816afad3b5c9a1c9319aa0b97b6271a2f219ae6b817f694f7043d20889cd8e7f80f16aa2ec84658f98eee", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}}]}, @nested={0x127, 0x54, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="80024b3ce58a057f7fa94e5a53fc98364f4070705d45512d72949f6a1639a6e92471db09e41ec0ee9aab", @generic="bedd18a2f28395bb54121f7c0ad25ead277b320106479f6169f86a2e3d109e8ace5126695304699963f5027e17a3ff29ab66a835cf4ef87edb07b142ea0ca181afc0055acaa1d1da3df259b1dbde757f8fc1787571b4bc61dc82f4f37e1ec3d4c796147b2aa0556c05a1903a427e0a10881e13e0b9f2099843beb5e7e1f4d4ed1b5ef0031530a6e78e02ddf234096df133f180652057f76bf278c1be1f3aaa533000180aaa49bb9052e68ce42c0d2f2525be3f00b485f655072a1250874ecd43e260395f6b598f34854b766e0b05e1850052d0d615b99b58ecd9b0be0e990d0d1dc5658790d6ae5f730168182e6cbfdf44"]}, @generic="52929d307723b11e2f11ffcb538c0a15606059c0ac65303ac89b5f167c909a68fcde6e742c64a7c7159b8a332a7ab1d42d81cc9579240a16d5ef278db9edae9882ae3876d3ba3d467249e331e2453589848ac525bd8235d56eb3d30740afe65662dcd3f630a426f130d4911c683fbe7af42958fe461aeb6a9ac6362e", @nested={0x10, 0x91, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x45, 0x56}]}, @generic="9a2f16597f72cb60ea2836685dda068509e56d31e81baa7f9c0f8978ad99ab0426b0125e2fa4d0865ff94b281d0f0e9060624c4188551b5b9d0dd29b2903d7ad07f4da66ea76bfb7d42ede3bd82fb58d34bd8cf9beb7edf745ea92b67207daa1a4fb58741f51b87aac1d9c5f8f"]}, 0x1bcc}], 0x7, &(0x7f0000004480)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @rights={{0x18, 0x1, 0x1, [r5, r9]}}], 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00'}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) [ 1023.625207][T13097] usb 6-1: new high-speed USB device number 17 using dummy_hcd 09:04:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1300}, 0x0) [ 1023.695085][T23574] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1023.707451][T23569] FAULT_INJECTION: forcing a failure. [ 1023.707451][T23569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.721056][T23569] CPU: 0 PID: 23569 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1023.731229][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.741280][T23569] Call Trace: [ 1023.744569][T23569] dump_stack+0x14a/0x1ce [ 1023.748883][T23569] ? devkmsg_release+0x11c/0x11c [ 1023.753797][T23569] ? show_regs_print_info+0x12/0x12 [ 1023.758969][T23569] ? stack_trace_save+0x123/0x1f0 [ 1023.763974][T23569] ? kasan_alloc_pages+0x4a/0x60 [ 1023.768892][T23569] should_fail+0x6fb/0x860 [ 1023.773280][T23569] ? setup_fault_attr+0x3d0/0x3d0 [ 1023.778286][T23569] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1023.783633][T23569] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1023.789157][T23569] ? __rcu_read_lock+0x50/0x50 [ 1023.793949][T23569] handle_mm_fault+0x18e6/0x41e0 [ 1023.798878][T23569] ? __pagevec_release+0x130/0x130 [ 1023.803966][T23569] ? finish_fault+0x230/0x230 [ 1023.808634][T23569] ? lru_add_drain_cpu+0x3d9/0x510 [ 1023.813735][T23569] ? _raw_spin_unlock+0x5/0x20 [ 1023.818481][T23569] ? follow_page_mask+0x76a/0x1050 [ 1023.823588][T23569] __get_user_pages+0xca0/0x1420 [ 1023.828631][T23569] ? populate_vma_page_range+0xf0/0xf0 [ 1023.834077][T23569] ? memset+0x1f/0x40 [ 1023.838044][T23569] ? vmacache_update+0x9f/0xf0 [ 1023.842788][T23569] __mm_populate+0x3a0/0x560 [ 1023.847367][T23569] ? __get_user_pages+0x1420/0x1420 [ 1023.852545][T23569] ? ksys_write+0x25d/0x2c0 [ 1023.857029][T23569] do_mlock+0x4a2/0x540 [ 1023.861162][T23569] ? __ia32_sys_read+0x80/0x80 [ 1023.865920][T23569] __x64_sys_mlock+0x5c/0x70 [ 1023.870500][T23569] do_syscall_64+0xcb/0x150 [ 1023.874981][T23569] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1023.880847][T23569] RIP: 0033:0x45d239 [ 1023.884718][T23569] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.904300][T23569] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1023.912689][T23569] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1023.920644][T23569] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1023.928595][T23569] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.936541][T23569] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b 09:04:28 executing program 4 (fault-call:6 fault-nth:44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1023.944489][T23569] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1023.945341][ T150] usb 1-1: new high-speed USB device number 49 using dummy_hcd 09:04:28 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000140)={0x7d4c, 0xf54, 0x2, 0x2, 0x9, 0x400, 0x5}) 09:04:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1400}, 0x0) [ 1024.020759][T23585] FAULT_INJECTION: forcing a failure. [ 1024.020759][T23585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1024.045737][T23585] CPU: 1 PID: 23585 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1024.055917][T23585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.065975][T23585] Call Trace: [ 1024.069274][T23585] dump_stack+0x14a/0x1ce [ 1024.073609][T23585] ? devkmsg_release+0x11c/0x11c [ 1024.078551][T23585] ? show_regs_print_info+0x12/0x12 [ 1024.083757][T23585] ? stack_trace_save+0x123/0x1f0 [ 1024.088787][T23585] ? kasan_alloc_pages+0x4a/0x60 [ 1024.093727][T23585] should_fail+0x6fb/0x860 [ 1024.098150][T23585] ? setup_fault_attr+0x3d0/0x3d0 [ 1024.103192][T23585] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1024.108571][T23585] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1024.114122][T23585] ? __rcu_read_lock+0x50/0x50 [ 1024.118886][T23585] ? __mod_node_page_state+0x99/0xb0 [ 1024.124178][T23585] handle_mm_fault+0x18e6/0x41e0 [ 1024.129118][T23585] ? __pagevec_release+0x130/0x130 [ 1024.134236][T23585] ? finish_fault+0x230/0x230 [ 1024.138914][T23585] ? lru_add_drain_cpu+0x3d9/0x510 [ 1024.144027][T23585] ? _raw_spin_unlock+0x5/0x20 [ 1024.148796][T23585] ? follow_page_mask+0x76a/0x1050 [ 1024.153998][T23585] __get_user_pages+0xca0/0x1420 [ 1024.158940][T23585] ? populate_vma_page_range+0xf0/0xf0 [ 1024.164397][T23585] ? memset+0x1f/0x40 [ 1024.168380][T23585] ? vmacache_update+0x9f/0xf0 [ 1024.173138][T23585] __mm_populate+0x3a0/0x560 [ 1024.177725][T23585] ? __get_user_pages+0x1420/0x1420 [ 1024.182918][T23585] ? ksys_write+0x25d/0x2c0 [ 1024.187413][T23585] do_mlock+0x4a2/0x540 [ 1024.191563][T23585] ? __ia32_sys_read+0x80/0x80 [ 1024.196325][T23585] __x64_sys_mlock+0x5c/0x70 [ 1024.200905][T23585] do_syscall_64+0xcb/0x150 [ 1024.205402][T23585] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1024.211288][T23585] RIP: 0033:0x45d239 09:04:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x3f00}, 0x0) 09:04:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x4000}, 0x0) [ 1024.215176][T23585] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.234775][T23585] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1024.243184][T23585] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1024.251150][T23585] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1024.259143][T23585] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.267110][T23585] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 1024.275135][T23585] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1024.295211][T13097] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1024.304175][T13097] usb 6-1: config 1 has no interface number 1 [ 1024.315209][T13097] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1024.331845][T13097] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1024.435214][ T150] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 1024.515575][T13097] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.524834][T13097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.533775][T13097] usb 6-1: Product: syz [ 1024.538543][T13097] usb 6-1: Manufacturer: syz [ 1024.543134][T13097] usb 6-1: SerialNumber: syz [ 1024.555185][ T150] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1024.563149][ T150] usb 1-1: can't read configurations, error -61 09:04:28 executing program 4 (fault-call:6 fault-nth:45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1024.629770][T23614] FAULT_INJECTION: forcing a failure. [ 1024.629770][T23614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1024.643133][T23614] CPU: 1 PID: 23614 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1024.653287][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.663344][T23614] Call Trace: [ 1024.666652][T23614] dump_stack+0x14a/0x1ce [ 1024.670992][T23614] ? devkmsg_release+0x11c/0x11c [ 1024.675942][T23614] ? show_regs_print_info+0x12/0x12 [ 1024.681136][T23614] ? stack_trace_save+0x123/0x1f0 [ 1024.686136][T23614] ? kasan_alloc_pages+0x4a/0x60 [ 1024.691161][T23614] should_fail+0x6fb/0x860 [ 1024.695550][T23614] ? setup_fault_attr+0x3d0/0x3d0 [ 1024.700550][T23614] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1024.705899][T23614] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1024.711418][T23614] ? __rcu_read_lock+0x50/0x50 [ 1024.716159][T23614] handle_mm_fault+0x18e6/0x41e0 [ 1024.721072][T23614] ? __pagevec_release+0x130/0x130 [ 1024.726155][T23614] ? finish_fault+0x230/0x230 [ 1024.730799][T23614] ? lru_add_drain_cpu+0x3d9/0x510 [ 1024.735888][T23614] ? _raw_spin_unlock+0x5/0x20 [ 1024.740622][T23614] ? follow_page_mask+0x76a/0x1050 [ 1024.745721][T23614] __get_user_pages+0xca0/0x1420 [ 1024.750634][T23614] ? populate_vma_page_range+0xf0/0xf0 [ 1024.756064][T23614] ? memset+0x1f/0x40 [ 1024.760151][T23614] ? vmacache_update+0x9f/0xf0 [ 1024.764885][T23614] __mm_populate+0x3a0/0x560 [ 1024.769446][T23614] ? __get_user_pages+0x1420/0x1420 [ 1024.774614][T23614] ? ksys_write+0x25d/0x2c0 [ 1024.779242][T23614] do_mlock+0x4a2/0x540 [ 1024.783371][T23614] ? __ia32_sys_read+0x80/0x80 [ 1024.788224][T23614] __x64_sys_mlock+0x5c/0x70 [ 1024.792796][T23614] do_syscall_64+0xcb/0x150 [ 1024.797280][T23614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1024.803155][T23614] RIP: 0033:0x45d239 [ 1024.807025][T23614] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.826604][T23614] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1024.835000][T23614] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1024.842949][T23614] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1024.850896][T23614] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.858845][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 1024.866849][T23614] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1024.915272][T13097] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1024.937800][T13097] usb 6-1: USB disconnect, device number 17 [ 1024.946013][ T150] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1025.225129][ T150] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 1025.355068][ T150] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1025.362674][ T150] usb 1-1: can't read configurations, error -61 [ 1025.369059][ T150] usb usb1-port1: attempt power cycle [ 1026.074964][ T150] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1026.204993][ T150] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 1026.324962][ T150] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1026.332565][ T150] usb 1-1: can't read configurations, error -61 [ 1026.484913][ T150] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1026.614986][ T150] usb 1-1: too many configurations: 47, using maximum allowed: 8 09:04:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r7 = signalfd4(r6, &(0x7f0000000080)={[0x401]}, 0x8, 0x80800) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x5256, 0x0, 0x6, 0x0, 0x1, {0x0, r8}}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000018000903000000000000000002200000ff0000080000000008000100ac1414aa68c7129965b74f5467e0fb012391451aedd2be11810a137f8209f982c8cfd1ca6444255fd8eee9ab082ebc31304964677cbecc22cce4b7987e95f9f90b60aab37a929e2429ff081137796c6b63fd3d8a6ab374e3cf337600"/139], 0x24}}, 0x0) 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6802}, 0x0) 09:04:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#_\x01-'}, {0x20, '^\'*'}, {0x20, 'NLBL_CIPSOv4\x00'}], 0xa, "1d351a564806a8ee955ada401216ce28510701c6d6fe82a09baab0f3fa460fc5e1ae504c33ed85a4f459e90aa0189250668105d08ca3a8a97626902aab73fec5b0672959e95abd2cf166f9f9b9362c77309b57673e3004258903089ab481ea6f84f5cdbaf2cda08a9388a6dd9725141e2eb790220d8559d78a5a02b5d714a4ca94d9d3a5dc7edb21739949118a7f9a85131b"}, 0xb4) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_io_uring_setup(0x7bf6, &(0x7f0000000180)={0x0, 0x7776, 0x8, 0x0, 0x117}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r9, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}, 0x7fffffff) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:31 executing program 4 (fault-call:6 fault-nth:46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x5) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:31 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0xc2e00, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2a, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) fchmod(r1, 0x80) r3 = dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x7, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r3, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1026.674837][ C1] raw-gadget gadget: ignoring, device is not running [ 1026.694914][ T150] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1026.705004][ T150] usb 1-1: can't read configurations, error -71 [ 1026.717998][T23624] FAULT_INJECTION: forcing a failure. [ 1026.717998][T23624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1026.734288][ T150] usb usb1-port1: unable to enumerate USB device [ 1026.751659][T23624] CPU: 1 PID: 23624 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1026.761831][T23624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.771882][T23624] Call Trace: [ 1026.775170][T23624] dump_stack+0x14a/0x1ce [ 1026.779478][T23624] ? devkmsg_release+0x11c/0x11c [ 1026.784396][T23624] ? show_regs_print_info+0x12/0x12 [ 1026.789572][T23624] ? stack_trace_save+0x123/0x1f0 [ 1026.794571][T23624] ? kasan_alloc_pages+0x4a/0x60 [ 1026.799501][T23624] should_fail+0x6fb/0x860 [ 1026.803899][T23624] ? setup_fault_attr+0x3d0/0x3d0 [ 1026.808902][T23624] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1026.814248][T23624] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1026.819772][T23624] ? __rcu_read_lock+0x50/0x50 [ 1026.824508][T23624] handle_mm_fault+0x18e6/0x41e0 [ 1026.829421][T23624] ? __pagevec_release+0x130/0x130 [ 1026.834503][T23624] ? finish_fault+0x230/0x230 [ 1026.839277][T23624] ? lru_add_drain_cpu+0x3d9/0x510 [ 1026.844379][T23624] ? _raw_spin_unlock+0x5/0x20 [ 1026.849128][T23624] ? follow_page_mask+0x76a/0x1050 [ 1026.854220][T23624] __get_user_pages+0xca0/0x1420 [ 1026.859136][T23624] ? populate_vma_page_range+0xf0/0xf0 [ 1026.864568][T23624] ? memset+0x1f/0x40 [ 1026.868521][T23624] ? vmacache_update+0x9f/0xf0 [ 1026.873255][T23624] __mm_populate+0x3a0/0x560 [ 1026.877820][T23624] ? __get_user_pages+0x1420/0x1420 [ 1026.882992][T23624] ? ksys_write+0x25d/0x2c0 [ 1026.887466][T23624] do_mlock+0x4a2/0x540 [ 1026.891594][T23624] ? __ia32_sys_read+0x80/0x80 [ 1026.896331][T23624] __x64_sys_mlock+0x5c/0x70 [ 1026.900893][T23624] do_syscall_64+0xcb/0x150 [ 1026.905374][T23624] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1026.911238][T23624] RIP: 0033:0x45d239 [ 1026.915111][T23624] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1026.934686][T23624] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1026.943069][T23624] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1026.951013][T23624] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1026.958958][T23624] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.966904][T23624] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6a02}, 0x0) 09:04:31 executing program 4 (fault-call:6 fault-nth:47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1026.974853][T23624] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9401}, 0x0) [ 1027.041127][T23654] FAULT_INJECTION: forcing a failure. [ 1027.041127][T23654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1027.061585][T23654] CPU: 0 PID: 23654 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1027.071765][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.081814][T23654] Call Trace: [ 1027.085108][T23654] dump_stack+0x14a/0x1ce 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9601}, 0x0) 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0) [ 1027.089435][T23654] ? devkmsg_release+0x11c/0x11c [ 1027.094371][T23654] ? show_regs_print_info+0x12/0x12 [ 1027.099572][T23654] ? stack_trace_save+0x123/0x1f0 [ 1027.104593][T23654] ? kasan_alloc_pages+0x4a/0x60 [ 1027.109529][T23654] should_fail+0x6fb/0x860 [ 1027.113940][T23654] ? setup_fault_attr+0x3d0/0x3d0 [ 1027.118967][T23654] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1027.124340][T23654] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1027.129883][T23654] ? __rcu_read_lock+0x50/0x50 [ 1027.134643][T23654] ? __mod_node_page_state+0x99/0xb0 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0) [ 1027.139926][T23654] handle_mm_fault+0x18e6/0x41e0 [ 1027.144864][T23654] ? __pagevec_release+0x130/0x130 [ 1027.149972][T23654] ? finish_fault+0x230/0x230 [ 1027.154644][T23654] ? lru_add_drain_cpu+0x3d9/0x510 [ 1027.159758][T23654] ? _raw_spin_unlock+0x5/0x20 [ 1027.164520][T23654] ? follow_page_mask+0x76a/0x1050 [ 1027.169759][T23654] __get_user_pages+0xca0/0x1420 [ 1027.174706][T23654] ? populate_vma_page_range+0xf0/0xf0 [ 1027.180157][T23654] ? memset+0x1f/0x40 [ 1027.184225][T23654] ? vmacache_update+0x9f/0xf0 [ 1027.188993][T23654] __mm_populate+0x3a0/0x560 [ 1027.193584][T23654] ? __get_user_pages+0x1420/0x1420 [ 1027.198788][T23654] ? ksys_write+0x25d/0x2c0 [ 1027.203304][T23654] do_mlock+0x4a2/0x540 [ 1027.207464][T23654] ? __ia32_sys_read+0x80/0x80 [ 1027.212319][T23654] __x64_sys_mlock+0x5c/0x70 [ 1027.216890][T23654] do_syscall_64+0xcb/0x150 [ 1027.221372][T23654] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.227240][T23654] RIP: 0033:0x45d239 [ 1027.231112][T23654] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.250691][T23654] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1027.259131][T23654] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1027.267075][T23654] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1027.275020][T23654] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1027.282962][T23654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f 09:04:31 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x14) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0xffff, 0xfffffffffffffffc, 0x0, 0x400000000, 0x7c, 0x80}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x16, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0xfffffffffffff18b}, 0x8a02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, 0x0, 0x240408dd) keyctl$search(0xa, 0x0, &(0x7f0000000300)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0xfffffffffffffffc) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', 0x0) 09:04:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0) 09:04:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x7) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000000)) 09:04:31 executing program 4 (fault-call:6 fault-nth:48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1027.290919][T23654] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1027.307800][ T150] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1027.361569][T23682] FAULT_INJECTION: forcing a failure. [ 1027.361569][T23682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1027.375684][T23682] CPU: 0 PID: 23682 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1027.385845][T23682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.395903][T23682] Call Trace: [ 1027.399202][T23682] dump_stack+0x14a/0x1ce [ 1027.403530][T23682] ? devkmsg_release+0x11c/0x11c [ 1027.408466][T23682] ? show_regs_print_info+0x12/0x12 [ 1027.413663][T23682] ? stack_trace_save+0x123/0x1f0 [ 1027.418677][T23682] ? kasan_alloc_pages+0x4a/0x60 [ 1027.423586][T23682] should_fail+0x6fb/0x860 [ 1027.427979][T23682] ? setup_fault_attr+0x3d0/0x3d0 [ 1027.432981][T23682] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1027.438337][T23682] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1027.443867][T23682] ? __rcu_read_lock+0x50/0x50 [ 1027.448610][T23682] handle_mm_fault+0x18e6/0x41e0 [ 1027.453518][T23682] ? __pagevec_release+0x130/0x130 [ 1027.458602][T23682] ? finish_fault+0x230/0x230 [ 1027.463249][T23682] ? lru_add_drain_cpu+0x3d9/0x510 [ 1027.468335][T23682] ? _raw_spin_unlock+0x5/0x20 [ 1027.473069][T23682] ? follow_page_mask+0x76a/0x1050 [ 1027.478151][T23682] __get_user_pages+0xca0/0x1420 [ 1027.483064][T23682] ? populate_vma_page_range+0xf0/0xf0 [ 1027.488491][T23682] ? memset+0x1f/0x40 [ 1027.492440][T23682] ? vmacache_update+0x9f/0xf0 [ 1027.497179][T23682] __mm_populate+0x3a0/0x560 [ 1027.501742][T23682] ? __get_user_pages+0x1420/0x1420 [ 1027.506926][T23682] ? ksys_write+0x25d/0x2c0 [ 1027.511415][T23682] do_mlock+0x4a2/0x540 [ 1027.515546][T23682] ? __ia32_sys_read+0x80/0x80 [ 1027.520280][T23682] __x64_sys_mlock+0x5c/0x70 [ 1027.524840][T23682] do_syscall_64+0xcb/0x150 [ 1027.529314][T23682] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1027.535176][T23682] RIP: 0033:0x45d239 [ 1027.539042][T23682] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.558616][T23682] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1027.566996][T23682] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1027.574937][T23682] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1027.582901][T23682] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1027.590847][T23682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 1027.598789][T23682] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1027.704858][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.716105][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.725982][ T150] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1027.735194][ T150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.747597][ T150] usb 1-1: config 0 descriptor?? [ 1028.084752][ T150] usbhid 1-1:0.0: can't add hid device: -71 [ 1028.090751][ T150] usbhid: probe of 1-1:0.0 failed with error -71 [ 1028.099265][ T150] usb 1-1: USB disconnect, device number 53 [ 1028.554658][ T150] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1028.914694][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.925703][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.936185][ T150] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1028.945668][ T150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.954323][ T150] usb 1-1: config 0 descriptor?? [ 1029.436413][ T150] betop 0003:11C2:2208.0034: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1029.447546][ T150] betop 0003:11C2:2208.0034: not enough fields in the report: 0 [ 1029.635960][ T150] usb 1-1: USB disconnect, device number 54 [ 1030.404454][ T142] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1030.764534][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.775416][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.785874][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1030.795333][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.803976][ T142] usb 1-1: config 0 descriptor?? 09:04:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x13, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20048815) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0) 09:04:35 executing program 4 (fault-call:6 fault-nth:49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:35 executing program 1: symlink(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000006c0)='./file0\x00') r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000700)={{0xcc, 0x1f, 0x5, 0x292, 0x2dc, 0x4, 0x6d}, "be344c497dc80e59d4ed3ab8dbd4c97270f4200a4f48a9e80e493879a3daae5d1bb85220f81796a642b4c7784ee037cf5590ab51d086fc1c5640f288b581a0c80222a96d4b9ad0852b0c1453f399f90b6d40e6b6c926c2721a940509164915c7a5be809ad0ca", [[], [], [], [], [], [], []]}, 0x786) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2002a480}, 0xc805) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x2c942}, 0x8000) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x360, 0x0, 0x148, 0x360, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x240, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 09:04:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x39, 0x0, "a03ac8e3d3597c094e998bb29d3dbcb0ffd8d5f885137f31baf7ac018694392aff9e3658a8646805538ab8fbfb8cdba73a547399f9da39f786ab2fe44bf18985dca56a60c7feb0443b8883cf7b35b855"}, 0xd8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) fchmod(r1, 0x80) r2 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x62}, {&(0x7f0000000080)="66018000000000000033760036394048b45f7963b7ce5abcc66d", 0xfffffffffffffeab}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x8000000000000020, 0x0, {0x170, 0x10000, 0x0, {0x1, 0xfffffffffffffff9, 0x0, 0x7, 0x10001, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r2, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet6(0xa, 0x200000000003, 0x87) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x800, 0x7fff, 0x0, 0x80000000}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0) [ 1030.988216][T23718] FAULT_INJECTION: forcing a failure. [ 1030.988216][T23718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1031.010764][T23718] CPU: 0 PID: 23718 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1031.020948][T23718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.030996][T23718] Call Trace: [ 1031.034274][T23718] dump_stack+0x14a/0x1ce [ 1031.038583][T23718] ? devkmsg_release+0x11c/0x11c [ 1031.043506][T23718] ? show_regs_print_info+0x12/0x12 [ 1031.048680][T23718] ? stack_trace_save+0x123/0x1f0 [ 1031.053674][T23718] ? kasan_alloc_pages+0x4a/0x60 [ 1031.058582][T23718] should_fail+0x6fb/0x860 [ 1031.062968][T23718] ? setup_fault_attr+0x3d0/0x3d0 [ 1031.067967][T23718] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1031.073323][T23718] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1031.078840][T23718] ? __rcu_read_lock+0x50/0x50 [ 1031.083577][T23718] handle_mm_fault+0x18e6/0x41e0 [ 1031.088500][T23718] ? __pagevec_release+0x130/0x130 [ 1031.093586][T23718] ? finish_fault+0x230/0x230 [ 1031.098237][T23718] ? lru_add_drain_cpu+0x3d9/0x510 [ 1031.103322][T23718] ? _raw_spin_unlock+0x5/0x20 [ 1031.108053][T23718] ? follow_page_mask+0x76a/0x1050 [ 1031.113133][T23718] __get_user_pages+0xca0/0x1420 [ 1031.118044][T23718] ? populate_vma_page_range+0xf0/0xf0 [ 1031.123472][T23718] ? memset+0x1f/0x40 [ 1031.127427][T23718] ? vmacache_update+0x9f/0xf0 [ 1031.132162][T23718] __mm_populate+0x3a0/0x560 [ 1031.136725][T23718] ? __get_user_pages+0x1420/0x1420 [ 1031.141894][T23718] ? ksys_write+0x25d/0x2c0 [ 1031.146368][T23718] do_mlock+0x4a2/0x540 [ 1031.150495][T23718] ? __ia32_sys_read+0x80/0x80 [ 1031.155232][T23718] __x64_sys_mlock+0x5c/0x70 [ 1031.159793][T23718] do_syscall_64+0xcb/0x150 [ 1031.164271][T23718] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1031.170133][T23718] RIP: 0033:0x45d239 [ 1031.174008][T23718] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1031.193672][T23718] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1031.202053][T23718] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1031.209995][T23718] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1031.217936][T23718] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.225879][T23718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 1031.233823][T23718] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1031.242682][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1031.244722][T23716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23716 comm=syz-executor.1 [ 1031.249215][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1031.275131][ T142] usb 1-1: USB disconnect, device number 55 09:04:35 executing program 4 (fault-call:6 fault-nth:50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x288) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1031.288443][T23732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23732 comm=syz-executor.1 [ 1031.332511][T23741] FAULT_INJECTION: forcing a failure. [ 1031.332511][T23741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1031.346988][T23741] CPU: 0 PID: 23741 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1031.357146][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.367214][T23741] Call Trace: [ 1031.370489][T23741] dump_stack+0x14a/0x1ce [ 1031.374798][T23741] ? devkmsg_release+0x11c/0x11c [ 1031.379724][T23741] ? show_regs_print_info+0x12/0x12 [ 1031.384908][T23741] ? stack_trace_save+0x123/0x1f0 [ 1031.389902][T23741] ? kasan_alloc_pages+0x4a/0x60 [ 1031.394809][T23741] should_fail+0x6fb/0x860 [ 1031.399194][T23741] ? setup_fault_attr+0x3d0/0x3d0 [ 1031.404191][T23741] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1031.409533][T23741] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1031.415066][T23741] ? __rcu_read_lock+0x50/0x50 [ 1031.419803][T23741] handle_mm_fault+0x18e6/0x41e0 [ 1031.424712][T23741] ? __pagevec_release+0x130/0x130 [ 1031.429807][T23741] ? finish_fault+0x230/0x230 [ 1031.434456][T23741] ? lru_add_drain_cpu+0x3d9/0x510 [ 1031.439544][T23741] ? _raw_spin_unlock+0x5/0x20 [ 1031.444281][T23741] ? follow_page_mask+0x76a/0x1050 [ 1031.449366][T23741] __get_user_pages+0xca0/0x1420 [ 1031.454277][T23741] ? populate_vma_page_range+0xf0/0xf0 [ 1031.459706][T23741] ? memset+0x1f/0x40 [ 1031.463659][T23741] ? vmacache_update+0x9f/0xf0 [ 1031.468392][T23741] __mm_populate+0x3a0/0x560 [ 1031.472971][T23741] ? __get_user_pages+0x1420/0x1420 [ 1031.478142][T23741] ? ksys_write+0x25d/0x2c0 [ 1031.482615][T23741] do_mlock+0x4a2/0x540 [ 1031.486741][T23741] ? __ia32_sys_read+0x80/0x80 [ 1031.491475][T23741] __x64_sys_mlock+0x5c/0x70 [ 1031.496039][T23741] do_syscall_64+0xcb/0x150 [ 1031.500518][T23741] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1031.506381][T23741] RIP: 0033:0x45d239 [ 1031.510250][T23741] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:04:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) [ 1031.529825][T23741] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1031.538206][T23741] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1031.546150][T23741] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1031.554090][T23741] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.562032][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 1031.569976][T23741] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r4, &(0x7f00000000c0)={'syz0', "a4a5a92820db1f0bd838dbc9f0525894afa45961c9f18740d008b9f269a242bfeeb75540c1fa1c346bab51a47fc324430fc724ec318f7a24096dfc0dffd377bb20105b1b1024b0c75e86a41426072e4f3020800af5e52315e349fd272006eec2aec3f70bb9d5d673212016eec507ed1c5c33448c0edc4be059b5e73e59343ac8049b9324f447374fb3ef1b70878d154ecf1160bf599734dad7bf8c45804fdef313d3516967e99ef7eb9025b99621a8df54"}, 0xb5) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x803, 0x2) 09:04:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0) 09:04:35 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @broadcast}, &(0x7f0000000380)=0xc) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5) syz_io_uring_complete(r5) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000000)=0x7fffffff) sendmsg$nl_route(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r6, @ANYBLOB="000000000000000004001680140001801000060019870000cbd1000000000000080004"], 0x40}}, 0x0) 09:04:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0) [ 1031.719021][T23757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:04:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x8000000}, 0x0) [ 1031.834330][ T142] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1032.204341][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.215805][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.225706][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1032.235418][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.245410][ T142] usb 1-1: config 0 descriptor?? [ 1032.574299][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1032.580513][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1032.589328][ T142] usb 1-1: USB disconnect, device number 56 [ 1033.044158][ T142] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1033.404224][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.415283][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.425854][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1033.435453][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.445341][ T142] usb 1-1: config 0 descriptor?? [ 1033.927533][ T142] betop 0003:11C2:2208.0035: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1033.938969][ T142] betop 0003:11C2:2208.0035: not enough fields in the report: 0 [ 1034.125247][ T142] usb 1-1: USB disconnect, device number 57 [ 1034.893973][T13097] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1035.254014][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.264921][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.274689][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1035.283700][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.294187][T13097] usb 1-1: config 0 descriptor?? 09:04:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0xd9c80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x20040041) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0) 09:04:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000340)}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:39 executing program 4 (fault-call:6 fault-nth:51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfff8, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x3, 0xffffffff, 0x4, 0x10001, 0x80000001, 0x7f}) 09:04:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0) 09:04:39 executing program 1: r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x18) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000036c0)=ANY=[@ANYBLOB="581300001300000427bd7000fddbdf252d7fbd3f4e244e240700000000000000090000000400000002000000070000000400000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1358}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e59ddb7d1a"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x28001500, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}, 0x3075}], 0x1, 0x100, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 1035.466588][T23796] FAULT_INJECTION: forcing a failure. [ 1035.466588][T23796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1035.492173][T23803] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1035.510940][T23796] CPU: 0 PID: 23796 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1035.521106][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.531146][T23796] Call Trace: [ 1035.534424][T23796] dump_stack+0x14a/0x1ce [ 1035.538741][T23796] ? devkmsg_release+0x11c/0x11c [ 1035.543659][T23796] ? show_regs_print_info+0x12/0x12 [ 1035.548845][T23796] ? stack_trace_save+0x123/0x1f0 [ 1035.553848][T23796] ? kasan_alloc_pages+0x4a/0x60 [ 1035.558765][T23796] should_fail+0x6fb/0x860 [ 1035.563161][T23796] ? setup_fault_attr+0x3d0/0x3d0 [ 1035.568176][T23796] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1035.573534][T23796] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1035.579068][T23796] ? __rcu_read_lock+0x50/0x50 [ 1035.583816][T23796] handle_mm_fault+0x18e6/0x41e0 [ 1035.588735][T23796] ? __pagevec_release+0x130/0x130 [ 1035.593830][T23796] ? finish_fault+0x230/0x230 [ 1035.598586][T23796] ? lru_add_drain_cpu+0x3d9/0x510 [ 1035.603674][T23796] ? _raw_spin_unlock+0x5/0x20 [ 1035.608418][T23796] ? follow_page_mask+0x76a/0x1050 [ 1035.613513][T23796] __get_user_pages+0xca0/0x1420 [ 1035.618439][T23796] ? populate_vma_page_range+0xf0/0xf0 [ 1035.623872][T23796] ? memset+0x1f/0x40 [ 1035.627831][T23796] ? vmacache_update+0x9f/0xf0 [ 1035.632567][T23796] __mm_populate+0x3a0/0x560 [ 1035.637144][T23796] ? __get_user_pages+0x1420/0x1420 [ 1035.642330][T23796] ? ksys_write+0x25d/0x2c0 [ 1035.646814][T23796] do_mlock+0x4a2/0x540 [ 1035.650947][T23796] ? __ia32_sys_read+0x80/0x80 [ 1035.655689][T23796] __x64_sys_mlock+0x5c/0x70 [ 1035.660261][T23796] do_syscall_64+0xcb/0x150 [ 1035.664756][T23796] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1035.670635][T23796] RIP: 0033:0x45d239 [ 1035.674519][T23796] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1035.694115][T23796] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1035.702527][T23796] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 09:04:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xa000000}, 0x0) [ 1035.710478][T23796] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1035.718429][T23796] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.726382][T23796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000033 [ 1035.734341][T23796] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1035.743963][T13097] usbhid 1-1:0.0: can't add hid device: -71 09:04:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xb000000}, 0x0) 09:04:40 executing program 4 (fault-call:6 fault-nth:52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1035.768733][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1035.792599][T13097] usb 1-1: USB disconnect, device number 58 09:04:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x10000000}, 0x0) 09:04:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = syz_io_uring_complete(r4) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000010007, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r6) r7 = syz_io_uring_complete(r6) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f00000000c0)=0x2) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100001) ioctl(r8, 0x3, &(0x7f0000000040)="9cc0c4230bfa3a4c7c29daded54031c17bc231d9e23b6f62e1f130463c5ed51ed2bda9b8f9454bc493638cb57ca966e0bc87") [ 1035.851516][T23824] FAULT_INJECTION: forcing a failure. [ 1035.851516][T23824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1035.874092][T23824] CPU: 0 PID: 23824 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1035.884269][T23824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.894320][T23824] Call Trace: [ 1035.897614][T23824] dump_stack+0x14a/0x1ce [ 1035.901948][T23824] ? devkmsg_release+0x11c/0x11c [ 1035.906883][T23824] ? show_regs_print_info+0x12/0x12 [ 1035.912068][T23824] ? stack_trace_save+0x123/0x1f0 [ 1035.917070][T23824] ? kasan_alloc_pages+0x4a/0x60 [ 1035.921984][T23824] should_fail+0x6fb/0x860 [ 1035.926395][T23824] ? setup_fault_attr+0x3d0/0x3d0 [ 1035.931417][T23824] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1035.936769][T23824] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1035.942292][T23824] ? __rcu_read_lock+0x50/0x50 [ 1035.947042][T23824] handle_mm_fault+0x18e6/0x41e0 [ 1035.951965][T23824] ? __pagevec_release+0x130/0x130 [ 1035.957057][T23824] ? finish_fault+0x230/0x230 [ 1035.961715][T23824] ? lru_add_drain_cpu+0x3d9/0x510 [ 1035.966811][T23824] ? _raw_spin_unlock+0x5/0x20 [ 1035.971550][T23824] ? follow_page_mask+0x76a/0x1050 [ 1035.976646][T23824] __get_user_pages+0xca0/0x1420 [ 1035.981569][T23824] ? populate_vma_page_range+0xf0/0xf0 [ 1035.987084][T23824] ? memset+0x1f/0x40 [ 1035.991045][T23824] ? vmacache_update+0x9f/0xf0 [ 1035.995784][T23824] __mm_populate+0x3a0/0x560 [ 1036.000351][T23824] ? __get_user_pages+0x1420/0x1420 [ 1036.005527][T23824] ? ksys_write+0x25d/0x2c0 [ 1036.010008][T23824] do_mlock+0x4a2/0x540 [ 1036.014148][T23824] ? __ia32_sys_read+0x80/0x80 [ 1036.018904][T23824] __x64_sys_mlock+0x5c/0x70 [ 1036.023470][T23824] do_syscall_64+0xcb/0x150 [ 1036.027952][T23824] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1036.033824][T23824] RIP: 0033:0x45d239 [ 1036.037695][T23824] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1036.057280][T23824] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1036.065681][T23824] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1036.073633][T23824] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1036.081587][T23824] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1036.089541][T23824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000034 [ 1036.097495][T23824] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1036.363845][T13097] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1036.723827][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.734807][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.744877][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1036.753958][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.762851][T13097] usb 1-1: config 0 descriptor?? [ 1037.103753][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1037.109804][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1037.117626][T13097] usb 1-1: USB disconnect, device number 59 [ 1037.206094][T23797] tipc: MTU too low for tipc bearer [ 1037.583665][T13097] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1037.853634][T13097] usb 1-1: device descriptor read/64, error 18 [ 1038.243590][T13097] usb 1-1: device descriptor read/64, error 18 09:04:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x454000, 0x0) renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x11000000}, 0x0) 09:04:42 executing program 4 (fault-call:6 fault-nth:53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88400101}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x144, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IFACE={0x14, 0x17, 'virt_wifi0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_virt_wifi\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9c}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @multicast2}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1a}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x200}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) getpeername(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x10007, 0x0) 09:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x40000000ad}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x11, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000140)) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f35a179", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) 09:04:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, 0x0, 0x4, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3a) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1038.481814][T23851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=23851 comm=syz-executor.5 [ 1038.487571][T23855] FAULT_INJECTION: forcing a failure. [ 1038.487571][T23855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1038.512841][T23855] CPU: 1 PID: 23855 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1038.523008][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.533042][T23855] Call Trace: [ 1038.536319][T23855] dump_stack+0x14a/0x1ce [ 1038.540622][T23855] ? devkmsg_release+0x11c/0x11c [ 1038.545527][T23855] ? show_regs_print_info+0x12/0x12 [ 1038.550696][T23855] ? stack_trace_save+0x123/0x1f0 [ 1038.555700][T23855] ? kasan_alloc_pages+0x4a/0x60 [ 1038.560608][T23855] should_fail+0x6fb/0x860 [ 1038.564993][T23855] ? setup_fault_attr+0x3d0/0x3d0 [ 1038.569989][T23855] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1038.575333][T23855] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1038.580851][T23855] ? __rcu_read_lock+0x50/0x50 [ 1038.585586][T23855] handle_mm_fault+0x18e6/0x41e0 [ 1038.590495][T23855] ? __pagevec_release+0x130/0x130 [ 1038.595576][T23855] ? finish_fault+0x230/0x230 [ 1038.600222][T23855] ? lru_add_drain_cpu+0x3d9/0x510 [ 1038.605306][T23855] ? _raw_spin_unlock+0x5/0x20 [ 1038.610041][T23855] ? follow_page_mask+0x76a/0x1050 [ 1038.615122][T23855] __get_user_pages+0xca0/0x1420 [ 1038.620036][T23855] ? populate_vma_page_range+0xf0/0xf0 [ 1038.625463][T23855] ? memset+0x1f/0x40 [ 1038.629439][T23855] ? vmacache_update+0x9f/0xf0 [ 1038.634201][T23855] __mm_populate+0x3a0/0x560 [ 1038.638816][T23855] ? __get_user_pages+0x1420/0x1420 [ 1038.644421][T23855] ? ksys_write+0x25d/0x2c0 [ 1038.648904][T23855] do_mlock+0x4a2/0x540 [ 1038.653035][T23855] ? __ia32_sys_read+0x80/0x80 [ 1038.657772][T23855] __x64_sys_mlock+0x5c/0x70 [ 1038.662338][T23855] do_syscall_64+0xcb/0x150 [ 1038.666815][T23855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1038.672683][T23855] RIP: 0033:0x45d239 [ 1038.676563][T23855] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1038.696148][T23855] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1038.704538][T23855] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1038.712489][T23855] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1038.720440][T23855] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x800, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:43 executing program 4 (fault-call:6 fault-nth:54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1038.728400][T23855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000035 [ 1038.736342][T23855] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1038.745111][T13097] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1038.755050][T23851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=23851 comm=syz-executor.5 [ 1038.770922][T23869] ion_dma_buf_mmap: failure mapping buffer to userspace 09:04:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x11010000}, 0x0) [ 1038.850538][T23876] fuse: Unknown parameter 'group_5y00000000000000000000' [ 1038.875279][T23880] FAULT_INJECTION: forcing a failure. [ 1038.875279][T23880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:04:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x12000000}, 0x0) [ 1038.904405][T23880] CPU: 1 PID: 23880 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1038.914583][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.924648][T23880] Call Trace: [ 1038.927940][T23880] dump_stack+0x14a/0x1ce [ 1038.932271][T23880] ? devkmsg_release+0x11c/0x11c [ 1038.937211][T23880] ? show_regs_print_info+0x12/0x12 [ 1038.942404][T23880] ? stack_trace_save+0x123/0x1f0 [ 1038.947423][T23880] ? kasan_alloc_pages+0x4a/0x60 [ 1038.952359][T23880] should_fail+0x6fb/0x860 [ 1038.956769][T23880] ? setup_fault_attr+0x3d0/0x3d0 [ 1038.961792][T23880] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1038.967169][T23880] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1038.972711][T23880] ? __rcu_read_lock+0x50/0x50 [ 1038.977471][T23880] ? __mod_node_page_state+0x99/0xb0 [ 1038.982751][T23880] handle_mm_fault+0x18e6/0x41e0 [ 1038.987685][T23880] ? __pagevec_release+0x130/0x130 [ 1038.992794][T23880] ? finish_fault+0x230/0x230 [ 1038.997466][T23880] ? lru_add_drain_cpu+0x3d9/0x510 09:04:43 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000000069000000c9fcda45a337ffcd6a00000000000000d241aec8a6d4df29a42a23d274ec000071e716296212a4e2ba9487b35248944c5a2a1153ac6c31f588975419c368fd56e314d14ca5e6ca243002059c22b05189e57a11f91028cef7230e057f515deef5ba270e3a0f09f497285d4d2793890cd9943c21200897d8172638771f82c732aeedb7a51f8eb868f78d3b49ab180cf797e077d7d23d000000000000000000"], 0xc0}}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe4, 0x0, 0x80008000, 0x9}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) fsync(r2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x227) sendfile(r3, r4, 0x0, 0x80000001c501) renameat(0xffffffffffffffff, &(0x7f0000000040)='\x00', r4, &(0x7f0000000100)='./file0/file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x16c, 0x0, 0x112c888d8c8b363d, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xffffff85, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) [ 1039.002577][T23880] ? _raw_spin_unlock+0x5/0x20 [ 1039.007330][T23880] ? follow_page_mask+0x76a/0x1050 [ 1039.012437][T23880] __get_user_pages+0xca0/0x1420 [ 1039.017371][T23880] ? populate_vma_page_range+0xf0/0xf0 [ 1039.022826][T23880] ? memset+0x1f/0x40 [ 1039.026810][T23880] ? vmacache_update+0x9f/0xf0 [ 1039.031567][T23880] __mm_populate+0x3a0/0x560 [ 1039.036151][T23880] ? __get_user_pages+0x1420/0x1420 [ 1039.041343][T23880] ? ksys_write+0x25d/0x2c0 [ 1039.045841][T23880] do_mlock+0x4a2/0x540 [ 1039.049988][T23880] ? __ia32_sys_read+0x80/0x80 [ 1039.054751][T23880] __x64_sys_mlock+0x5c/0x70 [ 1039.054884][ T22] audit: type=1326 audit(1597655083.229:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23890 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 [ 1039.059327][T23880] do_syscall_64+0xcb/0x150 [ 1039.059344][T23880] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1039.091384][T23880] RIP: 0033:0x45d239 [ 1039.095272][T23880] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1039.103443][T23892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23892 comm=syz-executor.1 [ 1039.114867][T23880] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1039.114876][T23880] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1039.114879][T23880] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1039.114883][T23880] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.114887][T23880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 1039.114891][T23880] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1039.193555][T13097] usb 1-1: device descriptor read/64, error -71 [ 1039.673498][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.684463][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.695007][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1039.704524][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.713304][T13097] usb 1-1: config 0 descriptor?? [ 1039.857777][ T22] audit: type=1326 audit(1597655084.179:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23890 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46007a code=0x0 [ 1040.053462][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1040.059614][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1040.068335][T13097] usb 1-1: USB disconnect, device number 61 [ 1040.523365][T13097] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1040.883378][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.894367][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.904850][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1040.914242][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.922901][T13097] usb 1-1: config 0 descriptor?? [ 1041.405187][T13097] betop 0003:11C2:2208.0036: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1041.416324][T13097] betop 0003:11C2:2208.0036: not enough fields in the report: 0 [ 1041.604325][ T142] usb 1-1: USB disconnect, device number 62 [ 1042.373145][T13097] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1042.733212][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.744093][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.754554][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1042.763980][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.772628][T13097] usb 1-1: config 0 descriptor?? 09:04:47 executing program 4 (fault-call:6 fault-nth:55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x13000000}, 0x0) 09:04:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6, @ANYRES64=r2, @ANYBLOB="fa1eaefd1525c612276c1c8570d5d4cf8f3f43be2da5e866ccf00cea5c8200ccc26929ff5f8f32e7a170ec373dbe1e76e04e8349147b35634e8668884bcce0ff970152c0a4357263c3", @ANYRES32=r5], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r8 = getpid() sched_setattr(r8, 0x0, 0x0) ptrace$cont(0x18, r8, 0xb4, 0x3dc) 09:04:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd74, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000005cc0), &(0x7f0000005d40)=0x68) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) recvfrom(0xffffffffffffffff, &(0x7f0000005b80)=""/16, 0x10, 0x0, &(0x7f0000005bc0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="0e"}) accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044013}, 0xc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000bc082800800479"], 0x12) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 09:04:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(r4, &(0x7f0000000100)={0x78, 0x0, 0x4000, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1042.813222][T13097] usb 1-1: can't set config #0, error -71 [ 1042.820513][T13097] usb 1-1: USB disconnect, device number 63 09:04:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040c21108225f0000000001010000000100000000090400000103010000262100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0xf, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90d60106}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x2021, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40090}, 0x8800) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000240)={0x80002000}) 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x14000000}, 0x0) [ 1042.863039][T23924] FAULT_INJECTION: forcing a failure. [ 1042.863039][T23924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1042.873574][T23926] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1042.892121][T23924] CPU: 1 PID: 23924 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1042.902292][T23924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.912341][T23924] Call Trace: [ 1042.915638][T23924] dump_stack+0x14a/0x1ce [ 1042.919969][T23924] ? devkmsg_release+0x11c/0x11c [ 1042.924903][T23924] ? show_regs_print_info+0x12/0x12 [ 1042.930101][T23924] ? stack_trace_save+0x123/0x1f0 [ 1042.935120][T23924] ? kasan_alloc_pages+0x4a/0x60 [ 1042.940050][T23924] should_fail+0x6fb/0x860 [ 1042.944459][T23924] ? setup_fault_attr+0x3d0/0x3d0 [ 1042.949485][T23924] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1042.954852][T23924] ? gfp_pfmemalloc_allowed+0x130/0x130 09:04:47 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x8010, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2004, @fd=r5, 0x8, 0x0, 0x0, 0x12, 0x0, {0x1, r8}}, 0xffff8001) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xfec8) r12 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r9, 0x0, r11, 0x0, 0x10007, 0x0) [ 1042.960396][T23924] ? __rcu_read_lock+0x50/0x50 [ 1042.965164][T23924] handle_mm_fault+0x18e6/0x41e0 [ 1042.970099][T23924] ? __pagevec_release+0x130/0x130 [ 1042.975204][T23924] ? finish_fault+0x230/0x230 [ 1042.979895][T23924] ? lru_add_drain_cpu+0x3d9/0x510 [ 1042.985020][T23924] ? _raw_spin_unlock+0x5/0x20 [ 1042.989761][T23924] ? follow_page_mask+0x76a/0x1050 [ 1042.994850][T23924] __get_user_pages+0xca0/0x1420 [ 1042.999766][T23924] ? populate_vma_page_range+0xf0/0xf0 [ 1043.005232][T23924] ? memset+0x1f/0x40 [ 1043.009186][T23924] ? vmacache_update+0x9f/0xf0 [ 1043.013921][T23924] __mm_populate+0x3a0/0x560 [ 1043.018487][T23924] ? __get_user_pages+0x1420/0x1420 [ 1043.023658][T23924] ? ksys_write+0x25d/0x2c0 [ 1043.028138][T23924] do_mlock+0x4a2/0x540 [ 1043.032268][T23924] ? __ia32_sys_read+0x80/0x80 [ 1043.037008][T23924] __x64_sys_mlock+0x5c/0x70 [ 1043.041569][T23924] do_syscall_64+0xcb/0x150 [ 1043.046044][T23924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1043.051907][T23924] RIP: 0033:0x45d239 [ 1043.055774][T23924] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.075348][T23924] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1043.083727][T23924] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1043.091669][T23924] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1043.099612][T23924] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:47 executing program 4 (fault-call:6 fault-nth:56): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x3f000000}, 0x0) [ 1043.107554][T23924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 1043.115498][T23924] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1043.178109][T23947] FAULT_INJECTION: forcing a failure. [ 1043.178109][T23947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1043.195726][T23947] CPU: 0 PID: 23947 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1043.205897][T23947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.215948][T23947] Call Trace: [ 1043.219238][T23947] dump_stack+0x14a/0x1ce [ 1043.223559][T23947] ? devkmsg_release+0x11c/0x11c [ 1043.228496][T23947] ? show_regs_print_info+0x12/0x12 [ 1043.233685][T23947] ? stack_trace_save+0x123/0x1f0 [ 1043.238700][T23947] ? kasan_alloc_pages+0x4a/0x60 [ 1043.243635][T23947] should_fail+0x6fb/0x860 [ 1043.248045][T23947] ? setup_fault_attr+0x3d0/0x3d0 [ 1043.253067][T23947] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1043.258442][T23947] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1043.263988][T23947] ? __rcu_read_lock+0x50/0x50 [ 1043.268752][T23947] handle_mm_fault+0x18e6/0x41e0 [ 1043.273687][T23947] ? __pagevec_release+0x130/0x130 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x40000000}, 0x0) 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x5e67328e}, 0x0) [ 1043.278794][T23947] ? finish_fault+0x230/0x230 [ 1043.283552][T23947] ? lru_add_drain_cpu+0x3d9/0x510 [ 1043.288661][T23947] ? _raw_spin_unlock+0x5/0x20 [ 1043.293416][T23947] ? follow_page_mask+0x76a/0x1050 [ 1043.298526][T23947] __get_user_pages+0xca0/0x1420 [ 1043.303468][T23947] ? populate_vma_page_range+0xf0/0xf0 [ 1043.308925][T23947] ? memset+0x1f/0x40 [ 1043.312906][T23947] ? vmacache_update+0x9f/0xf0 [ 1043.317666][T23947] __mm_populate+0x3a0/0x560 [ 1043.322254][T23947] ? __get_user_pages+0x1420/0x1420 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x68020000}, 0x0) [ 1043.327451][T23947] ? ksys_write+0x25d/0x2c0 [ 1043.331958][T23947] do_mlock+0x4a2/0x540 [ 1043.336119][T23947] ? __ia32_sys_read+0x80/0x80 [ 1043.340881][T23947] __x64_sys_mlock+0x5c/0x70 [ 1043.345530][T23947] do_syscall_64+0xcb/0x150 [ 1043.350028][T23947] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1043.355914][T23947] RIP: 0033:0x45d239 [ 1043.359801][T23947] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:04:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6a020000}, 0x0) [ 1043.379395][T23947] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1043.387799][T23947] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1043.395798][T23947] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1043.403766][T23947] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.411735][T23947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 1043.419795][T23947] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:47 executing program 4 (fault-call:6 fault-nth:57): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1043.483020][T13097] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1043.501791][T23970] FAULT_INJECTION: forcing a failure. [ 1043.501791][T23970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1043.516281][T23970] CPU: 1 PID: 23970 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1043.526445][T23970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.536511][T23970] Call Trace: [ 1043.539780][T23970] dump_stack+0x14a/0x1ce [ 1043.544082][T23970] ? devkmsg_release+0x11c/0x11c [ 1043.548989][T23970] ? show_regs_print_info+0x12/0x12 [ 1043.554164][T23970] ? stack_trace_save+0x123/0x1f0 [ 1043.559161][T23970] ? kasan_alloc_pages+0x4a/0x60 [ 1043.564069][T23970] should_fail+0x6fb/0x860 [ 1043.568461][T23970] ? setup_fault_attr+0x3d0/0x3d0 [ 1043.573468][T23970] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1043.578808][T23970] ? memcg_check_events+0xf8/0x520 [ 1043.583894][T23970] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1043.589410][T23970] ? __rcu_read_lock+0x50/0x50 [ 1043.594146][T23970] handle_mm_fault+0x18e6/0x41e0 [ 1043.599058][T23970] ? __pagevec_release+0x130/0x130 [ 1043.604139][T23970] ? finish_fault+0x230/0x230 [ 1043.608784][T23970] ? lru_add_drain_cpu+0x3d9/0x510 [ 1043.613866][T23970] ? _raw_spin_unlock+0x5/0x20 [ 1043.618597][T23970] ? follow_page_mask+0x76a/0x1050 [ 1043.623746][T23970] __get_user_pages+0xca0/0x1420 [ 1043.628670][T23970] ? populate_vma_page_range+0xf0/0xf0 [ 1043.634285][T23970] ? memset+0x1f/0x40 [ 1043.638241][T23970] ? vmacache_update+0x9f/0xf0 [ 1043.642982][T23970] __mm_populate+0x3a0/0x560 [ 1043.647698][T23970] ? __get_user_pages+0x1420/0x1420 [ 1043.652871][T23970] ? ksys_write+0x25d/0x2c0 [ 1043.657351][T23970] do_mlock+0x4a2/0x540 [ 1043.661478][T23970] ? __ia32_sys_read+0x80/0x80 [ 1043.666213][T23970] __x64_sys_mlock+0x5c/0x70 [ 1043.670783][T23970] do_syscall_64+0xcb/0x150 [ 1043.675263][T23970] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1043.681185][T23970] RIP: 0033:0x45d239 [ 1043.685055][T23970] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1043.704631][T23970] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1043.713019][T23970] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1043.720965][T23970] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 09:04:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$hidraw(r3, &(0x7f00000005c0)="9ad6f3ce2553c1f94d2ffc013643176cd9545e5e6bc580106d2db3021bc8d5bebd20464a557967b1ee0e28ee03d656d6af8fb7795a7625eade4a119c932bf914dc8c3da8af9179d929d4ed87b7469d3cd832e7a730d629a49032cfc331bff5f9a2c78941998e232cb58ed17ce2a94a4cb1bab9b34f6aef43c386ac7c4a80082a7b0329d2b474ee57986db9710625473f696f9d8e4f6f9e134fb16824afa030d563e85998846818c46351af52819cf91a33d5a0f484d8366644b44fd23ae88d67978706ed249008c594f5c73d27d7d18e8263cba037", 0xd5) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r6, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0xef, 0x5, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9c87e5c46e71aeac478a0e75a6dab89c101881d35c184b3349d8c67044ae18b3876727142bc9ee9bc5fd02ce02ce1eabd3d00ddba9e1bb165197bd35cb2daa8aa3ff23ec10ee3b2aae68fea07f39a4b3a26c4af2f9b377e9474a117fc2815265b0b747ad6537baba495494a29ecaaada85eb484dc60f4368dbdaa2c71582457c4d812e56ca401acb7657ab1077238f0cc69ff8250cc5b19661a36d9ad1e3d3f92866eddddfc76c4607ecd12c69a046e144f7addb45c6fd61cb87c4aa2a026d04b7f5e447b1eba491d2ff382d431bbf", 0xcf, 0xffffffff00000001}, {&(0x7f0000000240)="70302563926f3482772d3f020f00bf9a7270946f6be3e22e22419036150f34dd57f2ca80c26710d7ad811e7af9bcb97de882a06fdaee6f04fc6e81622f0dcd2e50d15176ec7bafdecd14553808623c708029aa8b06d6ab3f62f317d3da7cf1c3c7cc07a831889a8b912c832a308fe91f40a190b2452c8934994d3df876716f7797f5bff3994ce23d", 0x88}, {&(0x7f0000000300)="28cf4fea16a73f5342f7d34bfd937820ab27f0204cc1315bd6985d65d7866de5cce0a21af739e103f6423f74f680cc53f047c5ffe70c2f40a668e308b488d8498ed1173ded94fed29b6e787528c84cb6eade8faeec8b8ddb82f068951822972c6734a5", 0x63, 0x1}, {&(0x7f0000000380)="6de72d8a9b189093463a1abece0ee341d9108900ed37db1e0a918dbb8864ef86a50f1a869d3e2f6cbe182b89730ce655edd6822f8099f9c676fdc2ca00efd9669edc05a6e4e3276423bffaf951489e0cb9cb154cf4a5ced234b6dcb4d5c11757", 0x60, 0x7}, {&(0x7f0000000400)="03f93a02fda2bf3475de7afc0b16bc86323ae852debb8e2df9944546ff92a88c25ee4ca6ae15c811195dbcaea722b8f9850d9b99ac365cfabf2eca4187061a3cef3f94982f5bc6bb690cfe15ec2e3e1daef6f3ef6b6c052be4740647939cbe7d8a166d47a1c38402192f506332aa7bbbeee844398bc0d1acf05adcbc2b712093a050dabe40f9", 0x86, 0x1f}], 0x10, &(0x7f0000000540)={[{@mode={'mode', 0x3d, 0x7fffffff}}, {@huge_within_size={'huge=within_size'}}, {@uid={'uid', 0x3d, r6}}], [{@context={'context', 0x3d, 'user_u'}}, {@appraise='appraise'}]}) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r4, 0x0, 0x10007, 0x0) [ 1043.728962][T23970] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1043.736906][T23970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000039 [ 1043.744855][T23970] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1044.113043][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1044.120641][T13097] usb 1-1: can't read configurations, error -61 [ 1044.272984][T13097] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1044.673002][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1044.680609][T13097] usb 1-1: can't read configurations, error -61 [ 1044.687685][T13097] usb usb1-port1: attempt power cycle [ 1045.402821][T13097] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1045.652855][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1045.660444][T13097] usb 1-1: can't read configurations, error -61 09:04:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1045.812783][T13097] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1045.842249][T23984] ion_dma_buf_mmap: failure mapping buffer to userspace 09:04:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0x1f, {0x1f, 0xe, "28617f07dc6f5d65b558413a377d4f25a6055c050535d8f6296281e62c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000080)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x91, 0x0, 0x7, 0x20}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x29, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x1f, 0x1}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x0, 0xfc, "34dc8310", "2e90f7e1"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x7ff}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0xd, 0x6a, "d89dc033dc794c24f692c47682236ec1366e00d904961d1a2525bd47f3a23a8236fe6ebbb0c51c5a16d6da242c19f840f6aefdf9093a49cab2e80b37248fe022785302f21ab082fe26132a692d40723b67d8dd493b681a084f8516d91e3d5eaa152f4d67cb972ec79672"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xda}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "df26"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x1427}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @random="cc96ebbf8a19"}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "8e10"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xd8}}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd74, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000005cc0), &(0x7f0000005d40)=0x68) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) recvfrom(0xffffffffffffffff, &(0x7f0000005b80)=""/16, 0x10, 0x0, &(0x7f0000005bc0)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="0e"}) accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044013}, 0xc000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000bc082800800479"], 0x12) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 09:04:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x8e32675e}, 0x0) 09:04:50 executing program 4 (fault-call:6 fault-nth:58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES16, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r5], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKFRASET(r8, 0x1264, &(0x7f0000000000)=0x85) 09:04:50 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) fchmod(r1, 0x80) r3 = dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x1, 0xfffff02c}, {0x80000006}, {0x0, 0x9, 0x20, 0x7}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r3, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x94010000}, 0x0) 09:04:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) dup2(r1, r2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1045.929614][T23997] FAULT_INJECTION: forcing a failure. [ 1045.929614][T23997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1045.943959][T13097] usb 1-1: device descriptor read/8, error -71 [ 1045.957848][T23997] CPU: 0 PID: 23997 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1045.968018][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:04:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2d420030}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x3}, 0xfc, 0xff, 0x5, 0x4, 0xe, 'syz1\x00', "932d1b066c092cfc33fd732002df1acf7c0c6ce0421f092035efb461b2517219", "ef3b4acd9cfb45ab3fb0695563bd272e4a9bb0447559673436dc1675491a6f0b", [{0x101, 0x9, {0x2}}, {0x0, 0x8, {0x2}}, {0x1, 0x100, {0x1, 0x80000000}}, {0xf1, 0xfffe, {0x1, 0xb0}}, {0x3f, 0x1, {0x1, 0x7fff}}, {0xfe, 0x8, {0x3, 0x7}}, {0x32f6, 0x21e, {0x1, 0x81}}, {0x5, 0x4, {0x2, 0x8}}, {0x5, 0x2, {0x1, 0x2}}, {0x7, 0x3b, {0x1, 0x4}}, {0x4, 0x7f, {0x3, 0x4}}, {0x7, 0x5, {0x2}}, {0x5, 0x8001, {0x0, 0x1000}}, {0x8001, 0x200, {0x2, 0x1}}, {0x2c2, 0x0, {0x0, 0x7}}, {0x2c, 0x0, {0x1, 0x1}}, {0x3f9, 0x3, {0x1, 0x2}}, {0x8001, 0x7, {0x2, 0xf41}}, {0x6, 0x9, {0x0, 0x100}}, {0x20, 0xfff, {0x0, 0x8000}}, {0xfffa, 0x5, {0x0, 0x9}}, {0x40, 0x81, {0x3, 0xf0}}, {0x7, 0x7be4, {0x1, 0x8001}}, {0x3, 0x401, {0x1, 0x9}}, {0xff, 0xac9, {0x2, 0xffffffff}}, {0x3f, 0x1, {0x2, 0x1b0abc30}}, {0x400, 0x3, {0x0, 0xc9}}, {0x3ff, 0x6, {0x3, 0x1000}}, {0x40, 0x7, {0x1, 0xfc25}}, {0x2, 0x0, {0x1, 0x2}}, {0x1, 0x8, {0x2, 0x6}}, {0x8, 0x6, {0x0, 0xef}}, {0x3, 0x4, {0x3, 0x401}}, {0x7, 0x101, {0x1, 0x4}}, {0x6, 0x8, {0x2, 0x3f}}, {0x8, 0xeb01, {0x0, 0x9}}, {0x1, 0xfc00, {0x1, 0x2}}, {0x8, 0x9, {0x3}}, {0x8, 0x80, {0x3, 0x5a8}}, {0xf64, 0xdc, {0x0, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4050}, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x10007, 0x0) [ 1045.978074][T23997] Call Trace: [ 1045.981368][T23997] dump_stack+0x14a/0x1ce [ 1045.985700][T23997] ? devkmsg_release+0x11c/0x11c [ 1045.990631][T23997] ? show_regs_print_info+0x12/0x12 [ 1045.995820][T23997] ? stack_trace_save+0x123/0x1f0 [ 1046.000841][T23997] ? kasan_alloc_pages+0x4a/0x60 [ 1046.005779][T23997] should_fail+0x6fb/0x860 [ 1046.010189][T23997] ? setup_fault_attr+0x3d0/0x3d0 [ 1046.015224][T23997] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1046.020597][T23997] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1046.026140][T23997] ? __rcu_read_lock+0x50/0x50 [ 1046.030905][T23997] ? mm_trace_rss_stat+0x4b/0x1a0 [ 1046.035931][T23997] handle_mm_fault+0x18e6/0x41e0 [ 1046.040870][T23997] ? __pagevec_release+0x130/0x130 [ 1046.045979][T23997] ? finish_fault+0x230/0x230 [ 1046.050643][T23997] ? lru_add_drain_cpu+0x3d9/0x510 [ 1046.055734][T23997] ? _raw_spin_unlock+0x5/0x20 [ 1046.060477][T23997] ? follow_page_mask+0x76a/0x1050 [ 1046.065564][T23997] __get_user_pages+0xca0/0x1420 [ 1046.070477][T23997] ? populate_vma_page_range+0xf0/0xf0 [ 1046.075905][T23997] ? memset+0x1f/0x40 [ 1046.079859][T23997] ? vmacache_update+0x9f/0xf0 [ 1046.084624][T23997] __mm_populate+0x3a0/0x560 [ 1046.089186][T23997] ? __get_user_pages+0x1420/0x1420 [ 1046.094369][T23997] ? ksys_write+0x25d/0x2c0 [ 1046.098841][T23997] do_mlock+0x4a2/0x540 [ 1046.102970][T23997] ? __ia32_sys_read+0x80/0x80 [ 1046.107704][T23997] __x64_sys_mlock+0x5c/0x70 [ 1046.112295][T23997] do_syscall_64+0xcb/0x150 [ 1046.116777][T23997] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1046.122638][T23997] RIP: 0033:0x45d239 [ 1046.126628][T23997] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1046.146204][T23997] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1046.154587][T23997] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1046.162528][T23997] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1046.170470][T23997] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:04:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x96010000}, 0x0) [ 1046.178412][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 1046.186356][T23997] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 1046.219836][T24020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=24020 comm=syz-executor.5 [ 1046.250014][T24020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=24020 comm=syz-executor.5 09:04:50 executing program 4 (fault-call:6 fault-nth:59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1046.282822][T13097] usb 1-1: device descriptor read/8, error -71 [ 1046.315828][T24031] FAULT_INJECTION: forcing a failure. [ 1046.315828][T24031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1046.331160][T24031] CPU: 0 PID: 24031 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1046.341321][T24031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.351381][T24031] Call Trace: [ 1046.354675][T24031] dump_stack+0x14a/0x1ce [ 1046.359003][T24031] ? devkmsg_release+0x11c/0x11c [ 1046.363934][T24031] ? show_regs_print_info+0x12/0x12 [ 1046.369119][T24031] ? _raw_spin_unlock_irq+0x5/0x20 [ 1046.374225][T24031] ? kasan_alloc_pages+0x4a/0x60 [ 1046.379143][T24031] should_fail+0x6fb/0x860 [ 1046.383546][T24031] ? setup_fault_attr+0x3d0/0x3d0 [ 1046.388572][T24031] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1046.393945][T24031] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1046.399477][T24031] ? __rcu_read_lock+0x50/0x50 [ 1046.402816][T13097] usb usb1-port1: unable to enumerate USB device [ 1046.404230][T24031] handle_mm_fault+0x18e6/0x41e0 [ 1046.404245][T24031] ? __pagevec_release+0x130/0x130 [ 1046.404261][T24031] ? finish_fault+0x230/0x230 [ 1046.425233][T24031] ? lru_add_drain_cpu+0x3d9/0x510 [ 1046.430453][T24031] ? _raw_spin_unlock+0x5/0x20 [ 1046.435216][T24031] ? follow_page_mask+0x76a/0x1050 [ 1046.440331][T24031] __get_user_pages+0xca0/0x1420 [ 1046.445269][T24031] ? populate_vma_page_range+0xf0/0xf0 [ 1046.450720][T24031] ? memset+0x1f/0x40 [ 1046.454681][T24031] ? vmacache_update+0x9f/0xf0 [ 1046.459540][T24031] __mm_populate+0x3a0/0x560 [ 1046.464155][T24031] ? __get_user_pages+0x1420/0x1420 [ 1046.469338][T24031] ? ksys_write+0x25d/0x2c0 [ 1046.473814][T24031] do_mlock+0x4a2/0x540 [ 1046.477947][T24031] ? __ia32_sys_read+0x80/0x80 [ 1046.482698][T24031] __x64_sys_mlock+0x5c/0x70 [ 1046.487273][T24031] do_syscall_64+0xcb/0x150 [ 1046.491757][T24031] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1046.497630][T24031] RIP: 0033:0x45d239 [ 1046.501516][T24031] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1046.521106][T24031] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1046.529495][T24031] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1046.537449][T24031] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1046.545404][T24031] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.553370][T24031] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b [ 1046.561327][T24031] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1046.762705][T13097] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1047.132714][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.143613][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.153419][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1047.162430][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.173020][T13097] usb 1-1: config 0 descriptor?? [ 1047.502629][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1047.508602][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1047.516957][T13097] usb 1-1: USB disconnect, device number 68 [ 1047.972547][T13097] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1048.332589][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.343591][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.354137][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1048.363585][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.372237][T13097] usb 1-1: config 0 descriptor?? [ 1048.844172][T13097] betop 0003:11C2:2208.0037: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1048.855293][T13097] betop 0003:11C2:2208.0037: no output reports found 09:04:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fcntl$notify(r4, 0x402, 0x21) splice(r0, 0x0, r2, 0x0, 0x0, 0xa) 09:04:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xeaffffff}, 0x0) 09:04:54 executing program 4 (fault-call:6 fault-nth:60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x454000, 0x0) renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:04:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x200, 0x10000, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02d}, {0x4006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x59, 0x1) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:54 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0x80}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYBLOB="70f3822eb6fcd0f49b8189f70a06995bc300422caa39b8b3905ee39d0518500d394267df317d0fd29a992a69c1a08354f01904097c74fba4f9e607d31be3d396904a291723d05812831c6f40f730c41e11f356acd56b90", @ANYBLOB="9fc745616bff341e39f1f6de9e1db07950077903dfca6324fad0594bcafed37c4d7559295b1177baf6b6e1a20bc5a2eb4d99307e719b081fa57a6c9eec36e4a0f481cc941c25fb4b15f13e26a057675e1948c4ee4077a21e23313a49967f271b4c6dca35292863ec9f224dd0fac0b0146654d605285b3656e994b58cd425f4a88896d4ae2c486622bbba4057474388f26e3eb750b013822d65cb5d4e9e1d9406b760ee4bde391033a51847465534113a16d2ceb3f5d3aa085c"], 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x40c00) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x20009, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)=0x8000) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x0) [ 1050.046291][ T142] usb 1-1: USB disconnect, device number 69 [ 1050.080464][T24056] FAULT_INJECTION: forcing a failure. [ 1050.080464][T24056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.094381][T24058] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1050.098693][T24056] CPU: 1 PID: 24056 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1050.111455][T24056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.121522][T24056] Call Trace: [ 1050.124790][T24056] dump_stack+0x14a/0x1ce [ 1050.129093][T24056] ? devkmsg_release+0x11c/0x11c [ 1050.134000][T24056] ? show_regs_print_info+0x12/0x12 [ 1050.139171][T24056] ? _raw_spin_unlock_irq+0x5/0x20 [ 1050.144251][T24056] ? finish_task_switch+0x235/0x4c0 [ 1050.149426][T24056] should_fail+0x6fb/0x860 [ 1050.153816][T24056] ? setup_fault_attr+0x3d0/0x3d0 [ 1050.158809][T24056] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1050.164157][T24056] ? schedule_preempt_disabled+0x20/0x20 [ 1050.169764][T24056] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1050.175279][T24056] ? __rcu_read_lock+0x50/0x50 [ 1050.180013][T24056] handle_mm_fault+0x18e6/0x41e0 [ 1050.184920][T24056] ? __pagevec_release+0x130/0x130 [ 1050.190001][T24056] ? finish_fault+0x230/0x230 [ 1050.194644][T24056] ? lru_add_drain_cpu+0x3d9/0x510 [ 1050.199725][T24056] ? _raw_spin_unlock+0x5/0x20 [ 1050.204456][T24056] ? follow_page_mask+0x76a/0x1050 [ 1050.209555][T24056] __get_user_pages+0xca0/0x1420 [ 1050.214491][T24056] ? populate_vma_page_range+0xf0/0xf0 [ 1050.219936][T24056] ? memset+0x1f/0x40 [ 1050.223894][T24056] ? vmacache_update+0x9f/0xf0 [ 1050.228630][T24056] __mm_populate+0x3a0/0x560 [ 1050.233191][T24056] ? __get_user_pages+0x1420/0x1420 [ 1050.238367][T24056] ? ksys_write+0x25d/0x2c0 [ 1050.242844][T24056] do_mlock+0x4a2/0x540 [ 1050.246971][T24056] ? __ia32_sys_read+0x80/0x80 [ 1050.251707][T24056] __x64_sys_mlock+0x5c/0x70 [ 1050.256265][T24056] do_syscall_64+0xcb/0x150 [ 1050.260737][T24056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.266598][T24056] RIP: 0033:0x45d239 [ 1050.270465][T24056] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:04:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, [], [{0x5, 0x7, 0x6, 0x7ff, 0x7fffffff, 0x4}, {0x5, 0x4, 0x1, 0x7, 0xa57f, 0xffffffff}], [[], [], [], [], [], []]}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xefffffff}, 0x0) [ 1050.290039][T24056] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1050.298417][T24056] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1050.306358][T24056] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1050.314298][T24056] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.322242][T24056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003c [ 1050.330186][T24056] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:54 executing program 4 (fault-call:6 fault-nth:61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:54 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmmsg(r7, &(0x7f0000004280)=[{{&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="b6212a3e6fac664d4ed788626eb87515adb4748e3d4b254e3e48f2faa067e8c3fcf3eb33d7a7453555114c312a", 0x2d}, {&(0x7f00000001c0)="1195fa01b10dced2a60bdf4f746febf7b6ade11841e6f380", 0x18}, {&(0x7f0000000240)="83fcc66f914dbf", 0x7}, {&(0x7f0000000280)="c30d405d76d598b6a1c099ffa3a236f8a10f3b483eb0b1020bc7955e4efdd67e9fd4a89a405abca2a589f2d386b1134eb4ff0adee49cd3f53d8cd1d78f29fda03783003a33f4e556892224305012e73187a2100638fd347319ca7fb1ebdc8481954cfb3850cc98edd99da292a6e70331e46cde899a088865acd6e750212fbd6f48c3a33f3bc5d5a1adabf537796fa09739bee22ae9e3", 0x96}], 0x4}}, {{&(0x7f0000000380)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)="238bc71b6a4b32aa3fcc1c3d0d13a74b5e7f3d089515829ad9457364219f6e011bcf6c4a79a0876baa8e091e64366c1e80fe4a4f15c736bed27001bc4ba818c5d671c7f91173f6c8131699239ce76de5838605ea0e7f587189bc", 0x5a}, {&(0x7f0000000480)="8442cf7be166852029", 0x9}, {&(0x7f00000004c0)="d91bb0023a317631192461b79475099211e38b3c562db7c177adf84c72", 0x1d}, {&(0x7f0000000500)="17a3c4d96bb5a77929a3cb673342132b4b36e7be16aee6b3380fb693ecf2bf91f204bb28c6e3fe8b81213d5a73e47f9aa42d00bdaa1c1f12c7ba547f6c26f10ba2fc75b67fb7c3d339383249d115135adfce839df7bd82211e62447a2a1b528f07ff63d3605ca68f074f65cd775ea210f38ac94c143990e27d242f1c63736162a17e2cab3bd6954e096b8d75d8a0e957df6b5fa423bd7d2a572ec8646a0cd7b2c2431af6aefd6bedaa1957875d9d026154ef851d5bcbfe907235c6ceec5913f99856630a36abe7b4aa019926c795200683c3ff71ebbef647f23e7b00bb33cc00c707f72647", 0xe5}, {&(0x7f0000000600)="1b494f481d1d6debf58060e5584b7da85cb9ab79c829700a441eb25de3620c0636e699ef0320495826fd96455bb2bd2b76ef125cb5f23033c20f43271b8d847f6adacf4f928f94f5899414f7700494af8e8ce9d2b9c1e155184402a857eb76dcb46d444653f3d7045a56fc8094635397c976c50320613f11fb175284d72ab26878a78568aa7b2e3ac08fa273da985adb03201ae47e623b279189d7c484640629d057c2d1ae0a5b649385eb0b35d5df1eb4b54275c5f9cfa6c6272e03e45f8352cc04d9be9be37c7849fb", 0xca}, {&(0x7f0000000700)="98e0c9e9afd2b6ddaa9d1d2bae3aefebd68fa12cdc233f10f43a78451c614f7791", 0x21}], 0x6, &(0x7f0000001580)=[{0x88, 0x84, 0x10000, "85fbd49082560c12742c29969448e8043766c2f0d088c7fbf414e4975277cc7cf3accf73b087fbe00b016a5b76a8397dce30f70de6cb335ff24a9a7eb24035433160fe91b5277cec059a18c86aeb0866e6effbf9d24aad6e1139964e28e736add4ef447d48c254f339a48058d60eaced8aadb9b6ae"}, {0x50, 0x29, 0x1ff, "94def845338c8b47e2d56833bedeeb772e3a715a690c203f7cb86957d824dbfd407a8dc9fdfddf54924682e0a477cde424d62ef7a015fd61093b"}, {0xa0, 0x118, 0x0, "d854ae754ac526c16680a1b5107e04d9ee728478adcf625ac828e7194e7c4a1580bb90a7f4fb4e297cb90cc65bf887b37156dbf772c89d260de0d8de093b458443c9b3588265f4d0966174a44d5f3e9d5a09cf558f22d7930036931e8fee208dd3ea1ceb79313f6351073eb1ba7abccdc38094376f0ba0065d5ce37f6756bfa207d1b723f2bc853ca887"}, {0xd0, 0x10b, 0x7fffffff, "5f959fb524b0353818163f36a2ef721fef9aa59093677f690da6b8cd9912ec0263bbe215e3d3249dbcd6f7ecffeb3e648b1af367536c4df094ea75674f9a8b09f0f6b83e49c5477ecd00ef5f96b45473296eeb87b268e613344fab531524573b9e6d56812c3a286b2a21cea46f535d8ad0cf1690728f1be91f75cae94fc5c7ce9d5173cef8493a792980072833141b21a9fbb4a42b073333fbad50a74c1a7eb97fb22fa68963882da7910ed6ea61e27dfd73052b948e207e003e53e98fdb8685"}, {0x38, 0x110, 0x2, "1ad352cb578c447074c91f42f145cbcb2af015cb25691d16f2f3331ad5fa8bb0073c"}, {0xc0, 0x116, 0x5, "ec4bb03176f4f377f305d4bc5a1e0c23563de310d1939c701d9355a87da4ed8b732509a1de3b2ab6d30a72666622843f36f31a94a299d99a7c47780cf560e313cb3183870a57de4a85bd16cc4f3799b46bdfa5bb67616ce9b35374dbfe1e2439c0405018ad5e71d04ba29b11a4995ba2ac635bf7a49f8dbaa4af11ad1a440cd9f4de19befabd4c8e84c5c00dac93cb076d132f52015631319b30015b305e462783abd4938c2768afcc"}, {0x110, 0x10a, 0x5, "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"}, {0x78, 0x110, 0xff, "09d2f8887fb710a84dc054531aff6ef0a55537b21a65d8f3ec1760957e6d1d56878fad9d65aba9d3c3e2c826a93dffba7fcc3fd8b72003ed11c8b3672143b59bb0c46216a2bbe9acf3d3d517c34626c2405a6341bbbaeebcd3f24417b578a9ebbba73cd0"}, {0x1010, 0x1, 0x6, "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"}, {0x48, 0x109, 0x8, "9e53e2a4e3cee6399c0132a20d739aa4debe8827aa9ee07abb7bf9627f409b1358d989044fc098e0f750d1ae699f94e762d5e04f1385"}], 0x1520}}, {{&(0x7f00000007c0)=@isdn={0x22, 0x1, 0x0, 0x9, 0x8}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="3817bda1ec08128b629afd57109976b33de1cdb78470e3bb64d66f783b79634fcba37408c07bb7c8f5ee22803473a21dfb7135a11ffd3597807efdf8eeb2751901cc9891011baa30e8e3831c0a4e6ffc004b21b0323a94a46eff61bf428aa959219ccab194da3af55f820e07e6654ce4c894faee1787114b5e7f8f329e23964ceb508048612547d2c66e241f03dccec9ae8e48671e5e488557fa45a908d1eedf6ab1fb48be22ffd77ccd12642653acd700cc2feb4e7b17c4e55a1e510efa4fe7a5af4ac0aa8ca081f390197d9a9fcc11cc29", 0xd2}], 0x1}}, {{&(0x7f0000000980)=@ethernet={0x306, @dev={[], 0x43}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000000a00)="480bb91102b109efbcc6008960", 0xd}], 0x2, &(0x7f0000000a80)=[{0x38, 0x1, 0x6, "bc6a447ef82cc0caa4b449396420d4205d3590b7119b3f4bb93320d6cce13644850e5107"}, {0x50, 0x10b, 0x401, "db4a9dd0cc36ef109d622986297e6920bb744f6efd67dfad80f71f98747769fe3caa5f5d57485896aa9a5d11aba46df5aa4a4839a7d410167e97"}, {0x100, 0x103, 0x401, "cc952b7d1e4770d57542f5d393d49a64964f782460362fc66dc0ee8920f128ad4cda7bd486ced31065619afe0024fb355534b8d69bfbb1e24873b7ab4b1c94193990b1963a2f87a38b0883c127be5a6c2641c0cdc3ee567b619a13b48b003f77737a6b65b8998ece98ecbfbbb0608299b807c75dfe0b5dec5ab78b835f7110e0746d399256c9d4399c746eeaf5f22bd482058c735e0607ce93e4dc1ef1b4c634b4a5f144f465a79b4fd612bef37814fc78c273126cdb5b318b0e3299bb7dd0fbcaf2b36fafba134c0fae352269cbe6320543758d6d14bf654811f1482791d68c57d6bf33e35db37a691bb3840fb6"}, {0x70, 0x0, 0x1000, "08a85149694762321e8f73f018fb14e3d5fb15c525ac4d7923f190ecdb14ffcb5fdc1cba045c4560bcf59608b673f47e827dc2db10e259a3c27993c8e71fbbaa23b531bac858d938dfe8ea8ae20ff72e9b18e5aeb9eaf8b07ed524cf"}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c80)="38c1e525713bbda4050f198981e4d9be8f4ba4a21fa9168fc77c689ef9d8cc004923a6", 0x23}, {&(0x7f0000000cc0)="c257c2a0137033db1cc1463b6ee439093f64edd9c32e50f06a8a424eeecee02b45a1dde81e04f6a1e894444c628d5f992892d9781d267dd7c7ef90f603c6f08fc589ac3d4a030fa112eef33e8b18078403b521b8a9d0130f37951d052764ffec3775f0acfe348a05", 0x68}, {&(0x7f0000000d40)="20be9657fc8b096c477e879bc751433c20513bb117aacfa613bb16a52c6a59afc2cb8c9018e587fec46cc936f02d73cbe1fb15bceadb4c78b96a4435bb40af4a1922e309c658dc8d0a7f1f723129e1db19246979033e1f8b3f6d541566f46cefd98fd96e57d0a7187d17f386cfc30f9b909c8680242d9d1c94a5688eb3d0eef8d2267c74e95f1edb35d5864a706efab0b7f8f17c9a7d9d5e9b8dcdff93d6cc254458fcde683e5e5274835be4eb8667deda55a874eba07994747c4e37d3b292499dbb150fa0f8", 0xc6}], 0x3}}, {{&(0x7f0000000e80)=@in={0x2, 0x4e22, @multicast1}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f00)="133c92784f1290bccdb8ecc3950929a5ba9a25725f041f00854016597ef5f2454581fa2c8748daaa6a8b5f967cf87b921866236eeb8d54733c49417f6f13e3ce5ead8545bb501ccafe242916ab01454625d8c525d780be957e4488944211117b776b12963eb214015832784860371eb3562703674121a67abac9f93c3a4185e93b25b53897d77f82e028d485f96ba014b11e0f46b55920f10b8ce7439831782bd75bcad9d4c03deaffa315bd89f7a9a433ed8feda9fc", 0xb6}, {&(0x7f0000000fc0)="31def62691a8c904ccee30d5c09a52943f14106545bb497723490887ee9c3134be5129e835847a897f046c1598c54d58f3c0c44886bf3a4c92f7ea542fc32d50cd45fe17a8bde66479c8e5c03926e37f1e5bc65d9407408fdf3ddb9bf5bd4024900faf63a87a5d80d65b6badcee8580ac4a5033242234236af0c3c7b7617bad5af2c3c7f9afd713401fb68ba4d1ab40d64dc1af78d3a60a5259d163bbe160d59c3aed554f60454e838c6b9646298c51a82f9a94debe2248bae012f9c661714ed90a869f55f6ca9b9d35dca8800b8fe7645d26684b8c921b18c68f158e9", 0xdd}, {&(0x7f00000010c0)="8bf87a99b48246401b77be0980e6b10af014e50804fbaf1c04cf96bbcfd5fad4dbef8d77f43cde5f739cda06cbe03832350e6c00a6b11bfa2daec94af92a1456d35ea050d39ad1af6c8f39e116c70b8904656aa6ff280a494d8e9ffdb11e45728690dc59edee4dee1c81efbd7bac3816afec2133ec2e0756d373789cb92aa37dfcbbb961ea6207d366ac6320f3f19ca963ee6224e6045e4807", 0x99}, {&(0x7f0000001180)="02765d44aa3e3978af905a16e94256da378b275aceb8bb70e31a9d7b8a7690ec7e2422800c4608833e434e9d379eec28cc7be4c5468643df7d9bbfee0daa26bd83621e0530", 0x45}], 0x4, &(0x7f0000003ac0)=[{0x20, 0x118, 0x9, "819f4d26246170f2840fdc414858dd73"}, {0xc8, 0x109, 0x5, "1255c2a2a37bdefba81e06414e3fc71665f5928556f7197f721a2e9b0d48cfd12d2c4d2350c596a7930663dbddfcad459a022c7148ad8690ed40b06646a1ca7c0a3d2a58580cf0e74befbfb345920208d2987148fd9b1f2b00661326635f3a9c1ee887441ad40292223a7d092aecece78969f5a512b3dcb633d345044939370bbfe2920d21fe1d33d92a1d6e3351bd25265afb8dd697a9608ede4c7453d20b50cf50046f86bf37eadcec0ed396859d64dcf4a0"}, {0x48, 0x0, 0x4, "c91361a341dbd2a39d8a7ed22ddb1339e2e50d9f74d5f6eaec5adb1b96497957f4a5dc6de3aa340ebac28268d7b2c257ff9031e631cc"}, {0x110, 0x116, 0x0, "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"}, {0x98, 0x10c, 0x10000, "fa89d9fc5db2fd9b327abb95128d9f2c56fb13026563ec5875d95e3c48545c477774353f20f18a0b7c2814f79261c268db127301e490fda5d7af84e1830ce4f9178aa2b64e3da7ac864151a9f575a5170d5d889f76784bcee334e3c751d838d920d00736542ea8b5bd84ddddaaa548034e6a8109e976a043f1b1036361bd1d27da51b6a4e75571b5"}, {0x20, 0x6b23d5be6e416693, 0x7, "2d49523861c7c8b019bf6e888ceb99"}, {0x68, 0x109, 0xfffffff8, "eb602073bc015300c01abd02d04baba10f38499afab5ca06d0c0560398ea7ef9bb3f6f31f376dc73c6086556d3f544fbb39971ae1f9351c2d9bc6fa70e90f052fadbb29038cfc4327e9770972756caab3a5324"}, {0x50, 0x101, 0xde, "f368ac2c81b9ec27525813a022336445db5fd6ee5f43cae17ae6304176253b5be7feb11e4a4733d14f51d66a6ae200220481da3c96d0239d95dc"}, {0x70, 0x1, 0x7ff, "83a343f9d4d203194861e6c225b4ede3c659b23cb7f19d55702f73a102eb173aee4d6695100ec499e11a4528a98c2b05d4d9b75195c221367437d70b90170a4b84d593086bf847fcd826c286d48acce20386f86514d504bd31"}], 0x420}}, {{&(0x7f0000001240)=@sco, 0x80, &(0x7f00000014c0)=[{&(0x7f00000012c0)="610665af0d77c4be982247c55066e40381e01209105e5509c6acf86697ae138eb7a4137ab7d1d8acdbd324288a74a517588f5c46daa30b142c3fa51f77c5f858aab900269b18c40e9077dc5a045c082d471a6d9033054f1c526a802277a6b6c2c0106ef38def80757f5c72aa9d5c2f2359fcbbffd38394d1c973cc1f0a80aa520fdd9e0113566518248a7374aaee2a3d6b252498fc20438e6fba2e2ef29fefe3311e6c20fcd892139273c97c39f5b51dff8ee75fa3469e5df9c58b18d93b3c3310790045f99ce8", 0xc7}, {&(0x7f00000013c0)="23dca1456b767a8ca2708702bc2cb92a8d1d28abab883c3219cf052f8cc17ac1df55b2f80b16e5b1606dec13e5834a264b0318b1e7bbdc2c66ad3d9752adad03d934f3f8de3aa43eb10bf710c52f40a10cbd6694589607e442d0273738a6bf6b934ed74d02d1ca1ecb59ab78e005f62e0c86ef5324bed7c617e93173e259f1111c481978ae4aac951a209a5819170e5192995dd5a8b4ce5653b72a2ebb1922232ad6250f9035bc7c4fde2580655de84564d8017151741e0c952cadf217e594a22f3bc618119ba40ab950924c26294aa322e40cd245f4e8a578491fa5c4283698c4", 0xe1}, {&(0x7f0000003f00)="2d2ad799ca99a1b5c4ba65ea866a9e6d5afbf95e64d5bfe61080d7e0f5cc8ffe76971a0e2a1f8f40d0baf3fab78e4684458d7bfb67df0657255ac29603246f7d501269a84569678fe8032d44fe39d8563c05ebb8b579b64efaa7a9ff132ec972632472cdcabb1e6c0af3b0981a1322415e734bb2034aec1256eed8cccd11923f4ca92bca0678445e0f4437d775dfd2ace10a3dc366c832d23a67da81fbef89764c89", 0xa2}, {&(0x7f0000003fc0)="d51a0e19afdef65c6069d03f0f51114527985e16b1395617e30041d82a94e06063167f3882c61a89c284389e48d9cff606affd2d41310d6eef4ca688aa037b5270d0b907432539c2a701bf71bb54a5305468565ab7a127fe274114ff8c0f5635ac4e6ec11692b7ba3c7d0a65ed3a458d5788222a4416d89524c7ce90b3f8b55d385853b8daf3a3ff004d3a518675b8103e75f559f545676e617d71c1b0b3a09464ff4ae69514f1c4f5c35f618130d5c84142f9a37a77f7c0382e8e743b93d21758c054acf46c3418ec6a05", 0xcb}, {&(0x7f00000040c0)="7313c3580610b3d5d374bc598db8d900ed238a4da93f101965e9f6bc3ec789dc45990ca8d01f8905162c28d7dec3c6bc9d3153dc1756858d268414a0713229b6395a086c6cbbc6b2b72a5059470ae44e021d3c385d8d575345147d7859d7df0fd6b0879b4f26f7ed5a686110870a6867a529a27e8f03236f3d935d43706460701b6483e3b213f8554282dc1fb0091d516ec6caad826d690834c15bfcea", 0x9d}, {&(0x7f0000004180)="620e60db0a88e33abd8ddf4c0e3f22698923b2d8ee7f138a7bb196961942afbf8ee10b2b6f394c7d23dfc6195ed5f5902e08a28b9c1ea498684c7a33c265aa562be9b309c4731c2dd9c81898f089381afb6f69f607b30865fe625fa6898a6d99f8a7d73ed0d583d46201a7ebe19dbf82c892a20429c103ad8c62bb419f1b33d468cc29e2730301a61c8959740d50303122af019b90d34dcd0450057e14e3ae7e7117e7a2d7bfff84a0544e860395a5f780f47874775f6b5ecdcb4c92b8bb5697514d094e8e4c66232057a7bcc40303aa154ff4e5ab935dcf63393b0ef191482bcd6d", 0xe2}], 0x6}}], 0x7, 0x811) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x4, 0x4, 0x2, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0xea}, 0x204, 0x1e00, 0x1f, 0x3, 0x5, 0x4, 0x3f}, r6, 0x1, r9, 0xa) ioctl$FITHAW(r10, 0xc0045878) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1050.414371][T24075] FAULT_INJECTION: forcing a failure. [ 1050.414371][T24075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.430802][T24075] CPU: 0 PID: 24075 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1050.440967][T24075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.450995][T24075] Call Trace: [ 1050.454268][T24075] dump_stack+0x14a/0x1ce [ 1050.458568][T24075] ? devkmsg_release+0x11c/0x11c [ 1050.463476][T24075] ? show_regs_print_info+0x12/0x12 [ 1050.468647][T24075] ? stack_trace_save+0x123/0x1f0 [ 1050.473642][T24075] ? kasan_alloc_pages+0x4a/0x60 [ 1050.478550][T24075] should_fail+0x6fb/0x860 [ 1050.482935][T24075] ? setup_fault_attr+0x3d0/0x3d0 [ 1050.487930][T24075] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1050.493295][T24075] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1050.498811][T24075] ? __rcu_read_lock+0x50/0x50 [ 1050.503545][T24075] handle_mm_fault+0x18e6/0x41e0 [ 1050.508454][T24075] ? __pagevec_release+0x130/0x130 [ 1050.513535][T24075] ? finish_fault+0x230/0x230 [ 1050.518181][T24075] ? lru_add_drain_cpu+0x3d9/0x510 [ 1050.523264][T24075] ? _raw_spin_unlock+0x5/0x20 [ 1050.527999][T24075] ? follow_page_mask+0x76a/0x1050 [ 1050.533081][T24075] __get_user_pages+0xca0/0x1420 [ 1050.537991][T24075] ? populate_vma_page_range+0xf0/0xf0 [ 1050.543417][T24075] ? memset+0x1f/0x40 [ 1050.547368][T24075] ? vmacache_update+0x9f/0xf0 [ 1050.552099][T24075] __mm_populate+0x3a0/0x560 [ 1050.556659][T24075] ? __get_user_pages+0x1420/0x1420 [ 1050.561831][T24075] ? ksys_write+0x25d/0x2c0 [ 1050.566307][T24075] do_mlock+0x4a2/0x540 [ 1050.570434][T24075] ? __ia32_sys_read+0x80/0x80 [ 1050.575170][T24075] __x64_sys_mlock+0x5c/0x70 [ 1050.579730][T24075] do_syscall_64+0xcb/0x150 [ 1050.584205][T24075] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.590067][T24075] RIP: 0033:0x45d239 [ 1050.593935][T24075] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.613506][T24075] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1050.621885][T24075] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1050.629845][T24075] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1050.637978][T24075] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.645937][T24075] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003d [ 1050.653890][T24075] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:55 executing program 4 (fault-call:6 fault-nth:62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1050.662059][T13097] usb 2-1: new high-speed USB device number 78 using dummy_hcd 09:04:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xfeffffff}, 0x0) [ 1050.711044][T24087] FAULT_INJECTION: forcing a failure. [ 1050.711044][T24087] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1050.732054][T24087] CPU: 0 PID: 24087 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1050.742228][T24087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.752280][T24087] Call Trace: [ 1050.755573][T24087] dump_stack+0x14a/0x1ce 09:04:55 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES16, @ANYBLOB="ad43100c150e033fe7b7640e9e42e78f7cc9e343a78b475ce5ecd8ec85f4f72bfa4ba5c1c615484d990a05c82640a7cd90f87869092cffd9c268d2b19074999cab019c7c69b297f4bc02242443ab6bd936bbc47bcb4e3e137849d4a8e11c32682e3574a004978e9bae71c48d632306bf917b312ead74e6b0a8cfbbd8ef8c1b", @ANYBLOB="1428228e1b3fcb07f708abd56e4cd66576da317a0840f1f4945985c23ebbeb603e3077e5c1e0971e97cfc457b5488b7ec871935b812c1bcca99960f3fe9d270030ef096f59ab79f5bad1db7d774ac3819efb93eccdf572a836cea918c13a", @ANYRES32=r3], 0xfec8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='net_cls.classid\x00', 0x2, 0x0) r5 = accept$packet(r1, &(0x7f0000000540), &(0x7f0000001340)=0x14) pipe2$9p(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/bsg\x00', 0x400002, 0x0) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14, 0x800) [ 1050.759902][T24087] ? devkmsg_release+0x11c/0x11c [ 1050.764838][T24087] ? show_regs_print_info+0x12/0x12 [ 1050.770060][T24087] ? stack_trace_save+0x123/0x1f0 [ 1050.775072][T24087] ? kasan_alloc_pages+0x4a/0x60 [ 1050.780007][T24087] should_fail+0x6fb/0x860 [ 1050.784422][T24087] ? setup_fault_attr+0x3d0/0x3d0 [ 1050.789435][T24087] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1050.794787][T24087] ? memcg_check_events+0xf8/0x520 [ 1050.799876][T24087] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1050.805396][T24087] ? __rcu_read_lock+0x50/0x50 [ 1050.810138][T24087] handle_mm_fault+0x18e6/0x41e0 [ 1050.815050][T24087] ? __pagevec_release+0x130/0x130 [ 1050.820133][T24087] ? finish_fault+0x230/0x230 [ 1050.824793][T24087] ? lru_add_drain_cpu+0x3d9/0x510 [ 1050.829902][T24087] ? _raw_spin_unlock+0x5/0x20 [ 1050.834643][T24087] ? follow_page_mask+0x76a/0x1050 [ 1050.839731][T24087] __get_user_pages+0xca0/0x1420 [ 1050.844653][T24087] ? populate_vma_page_range+0xf0/0xf0 [ 1050.850088][T24087] ? memset+0x1f/0x40 [ 1050.854050][T24087] ? vmacache_update+0x9f/0xf0 [ 1050.858786][T24087] __mm_populate+0x3a0/0x560 [ 1050.863347][T24087] ? __get_user_pages+0x1420/0x1420 [ 1050.868517][T24087] ? ksys_write+0x25d/0x2c0 [ 1050.872993][T24087] do_mlock+0x4a2/0x540 [ 1050.877136][T24087] ? __ia32_sys_read+0x80/0x80 [ 1050.881871][T24087] __x64_sys_mlock+0x5c/0x70 [ 1050.886432][T24087] do_syscall_64+0xcb/0x150 [ 1050.890911][T24087] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1050.896773][T24087] RIP: 0033:0x45d239 [ 1050.900640][T24087] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1050.920213][T24087] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1050.928611][T24087] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1050.936554][T24087] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1050.944495][T24087] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.952437][T24087] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003e sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000047c0)={0x274, 0x19, 0x200, 0x70bd29, 0x25dfdbfb, "", [@generic="e8cea02e6ef8c1da81cfbf0368de52a915475205dc03995600206bd35b60e997fc92fbbd9b1d3f", @typed={0x4a, 0x8e, 0x0, 0x0, @binary="9e5a3efea299e7d7ddbd537fecb9748282d7437d94e73bc489aec734f301d3a95b005ce77bd14744a2b04e71a15b296bdf2438748699d1813e33099065049409fea9a42504bc"}, @nested={0x147, 0x3e, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="03d99b37186ec0bdbdbc876d35fd76e49559db18e8998fbea1c70fce089340c8a6300b7a54684f40dcfd4c3360a7b94b2318c9b76aa5bd99ea1c4425957326a961ad3761c455adfac8bddee0445a3a2391afc95146edabe47d5348fd35d746899932cec02294871e4845bf6bd2b2ec1edff8050b9adba4edcd68c078eb5f20080c5668ec45ad76ba558f100df0de1c9542ebbe62bb278f958295872f62925a71df1791ce572f6e8247260a503a6255d85546c40a6f31dba80c4454c54794f98e27565610eb188fafe6636e299ee66031c98e5353784e768e3b5b265fdffb832e260131ee1a60", @typed={0x6, 0x60, 0x0, 0x0, @str='\\\xd8'}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @generic="d4327a283f96933dce5a6004e60d10c85484f62ff0df32e38c7f13b3b7b31dbd31f0d4675ad3a540fc8c7dfbcb70ba2efe53747190b1b0eb7bd6da0722", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x8e}]}, @typed={0x8, 0x89, 0x0, 0x0, @uid}, @typed={0x8, 0x87, 0x0, 0x0, @fd}, @generic="ce4b21ac96fa0d1cbbaa3968ce0694ca404d3ec58632314c2e6147eb3bb5e29e514b8706464d8d97d588ed315b4cb4389781496e83a78ba041344f9969e83e042ac46d71f3c1ad9b59a6d26c23632b97f144f41e95bb29b1893491c4eee57eea2721176c9f8c2c1803dd5967b5ed93b21d4de207ad63760c47e5483253a7d109d5516417850feb8d4cb4ca7e16b2a145de305be60763"]}, 0x274}, {&(0x7f0000000240)={0x18, 0x17, 0x4, 0x7, 0x25dfdbfd, "", [@typed={0x8, 0x52, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000009c0)={0x460, 0x17, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@generic="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", @generic="6341150d316dbe8f63b282f3ccbf0292b229fabbdb9ad0cce2e8b1e815e8646bc2f371d53615112d821492358ec79c43e24ec223826ea4b653a5c4ccfc7b312de6004585f197a696a68b752a8586a939ed36418f8e34b12c67dd14380975aca1c7b20d93c4e5ed08431a727ae0f6e2b64fedd80fd0535bf9679d761f8e1be09dedacdbe30e4533cdb8b043495bec71d01969372799027a49d7", @nested={0x2b4, 0x26, 0x0, 0x1, [@generic="01e6f07d2dc8d5d39533059ddd25d1d234b83a16f29cac1998fefdbe8fca32757abfda8eaeaa0d9afab732a15f182a2b859908c8fba035af3d10261b0d8810e46950d87cbb58ed143ba4a13b5c7bf43f81ccc7af322974299270b09783b197e2defcc983f4375961a10053fcfe060a49d22d9a8e9b69eafe9532e7f9f9cb3c0712cad6d4ea80e798dd64a7b6569d1288ca7d4a6a962ecc70abf43743c1f4b6f7e1f6a105132a8eb0721f32f1625ebae54c84bde838e282232ab6b7b4c1865fe34d85a3f52eba78c9260e09f72d3bb36d56622df480ef48f0c89a4627", @generic="8569ebefa401330b56d0faaaadff5d08e78f174bc744349d4bdbf5a3ed9d778fda61430d42eed5baaebffc060080e6df5b5933166852da9b6cdac21d68c6fdb7c74ef2eccb5df8f24dc4ade95c6f7f0e852db550111a481e62177726ea5c7de74abbc9efcd816dbde30ee0e41ead3edeb7561ef46d70642250ba46540f5758f672f01f04d0ecab0282eb1f19b053fd826b87b5a161bad97c3b2f18f7a1b4d09cefc3da1a196acf4664109153aef8a506e252a0c26b7d85", @generic="b4c9f308a66160bde1938d5f438f6d17167b1e7fa6da350a9498e3b907eedc8680b99632786ceb530a14209abbd64fe22d4969debb413a7d1d5285dee0a38eb28b79cbeb9f10e9836790b0091225d7b864", @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@ipv4={[], [], @rand_addr=0x64010102}}, @generic="aef252ba5f22d2842e9024df061e0f126f751f030dc4246c9ecdb38e7aa341473b5983c5557b63bc786d559f0d881aaaec5369d41881", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r1}, @generic="4f8948405494a4804c3512c620562b88deaf86c67a941bdf9e469b21364637b784c0e33134292a2a2b2b35f76c99c49a81e9dea87b8573fc2b61444f0cc87377f262ba56badefc2188cba315b99f7e847436ad6137088970322b1c7dc36a999a93f3ef266ffde6e32d8591c5b6d46d21ddc7aefed01788b932d4"]}, @typed={0x4, 0x51}]}, 0x460}, {&(0x7f0000000380)={0x158, 0x37, 0x408, 0x70bd28, 0x25dfdbfd, "", [@nested={0x38, 0x46, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0x31}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}]}, @nested={0x84, 0x49, 0x0, 0x1, [@generic="4d68a159690336c7d08f2c9cfa3d6b9db3fbb1b891558d1d7055dbeb0ab7750bd3b8833deb2a41c7a28860ede1301d07dcdafee95d53bd114f64b7f92cfc113d64e1786d0e9f6893bc163e40613b3a8022d5bde5dc744770461d0e6daca165517edd8e20ca655eb5d874f954665c4867d8e11fc05c4f23bb1d", @generic="5749891fe0a44f"]}, @typed={0x6, 0x85, 0x0, 0x0, @str='$\x00'}, @generic="c10b475a5d2a503cd82c2d6f9624f1b3d31044c335c34fbdbdac29598a9114381c2960acbc2477e5e3af40ee79ac08c6e16b26d730b557c13046fcf0b831016223403007e0ef89e68034cb7aa652ff6e862b92dc22a6cff98d85addaf74a20dd4c8bd7aedebc441db8c0051c618e9cc95b3eb794a05a94dcc0ccd402adcd37cd65f8"]}, 0x158}, {&(0x7f0000000e40)={0x170, 0x1f, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x4, 0x33}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0x6}, @generic="e531ab9281ec96b2989357957310e0bd4a49b93b297e7285ce545e8d73a4f52f560a86d4390ae6cea38894a239d9fff330b1f40645b33594836e1f248746048a2395542cdf9f32eb9614f0758f636e9f11cbd4d09d005f07d777f36a80c27fbb8ffcd02ff6a6340610aa866d4679b890eb197ec09f084a15274b5a3f7d59fa606718a7b8e0c33187e4195d910109", @generic="74f0f61e26809b177ed7022f4f0b8ea32d0693675f994a641eb4619331a1ca9a8800e19a267e9e5e3a0c5a41ca13c89f15e60200a0bbf93a25a3d392ac2effe9b7c395f438230eb82694f2f582934d1d7b39936b50bf71d20aea4a16be3a42ea34f2e92e9e39f1b3d6a525c95e7e094441c23799b1f1e28c7763ff41dd2d3f8a96ea3de80f090707747e624de91cb475ce87a5666a45150e2f4240bd90abd20a55f3e427f61c36325a81c19e4a1663d5a81e02a6ae47f1abc2ae805fc1c6275fe17b30a02610"]}, 0x170}, {&(0x7f0000001580)={0x21e0, 0x3b, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@generic="1a61511e1db1deb7cf9898343a3b271f4938e6a2adedbf01c09e34fb1781ce57b1c7720aa625a4ec5e33e89e9fa11e66b44a724eeb8e1cc664135b4c60da30edf1f1ad838048150e505619b07d3841d014d3876440a6323272806a8ad05ce2f3b8d1bc5c5e65d3db729cb7e569ec8f109a8a227c3e5226cf17286346aa00e7", @generic="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", @generic="d78b244be0040d892ac7166cf309db9f70223d4ac0c21169b46a61ed5990504ff6499c9b8159957c81aec5bed00e4d419167fe3c7f2b96fb0ecfe09a6c1c1b96cb94b85a7c0474eee3441bd90f4f488a863910183acb1c2b6c4a22ac2cd888222fd3d8a64b4f7300a5ccf7333a148b63b13a8db7519735ea996881d687a8cede96d151d8c52e3b5524b89c54463116959ceb01db742d831b76cb0fd4ac0966a37fa566538a584d21b4169b82be1838474ebf1ed94e7b9e2f619a2842646a48a04f345710101ef86a43acd2fda857b8a836b6e170285193924ee54b16632cff173157f79036ad621a25b045d9cbb78ef2426c485cf36dac529a4f590b5ec2150293b6dfc4cebee4f9c8ffa14528df1fa7c1f309921b0906d45ece36c2fd550965fafa1d6f383398fab2c3df6a4bac550a606787c845e24fa0045ce5dd343cf875d9e9d0d25f18fb074ec8ee090a40347b28f76c3155cb6811f39ae63b1e31f879dedc014b2e5e26fcf45552f84697f4e1f7197d850f1f80b9a3a2e478b2041ac582eafe9c0b269590d8787983d24c0d73a449369aeea0d4ba42119e3da13c88e71db14c3baf2645a881324bd1ee50a4b3cea183a73f5782ebabbe875f0fba7ff4e5e28ab77d6b4d169a38fc6f80a9b9ac2d9a6cc164971b73c41a03d3396bdff97eb4dbc82a567d5c3610f2637edc86f16ebd583c5cb8ff21a1a78c5b57fb7506c1e1d8db3f8b9db597fc3be98b7087618bff01a9471bc228405d2a2c7bed023ebafcb07e63bb9874f405006c3fc1f28e8667daaded1c2225baa908274c64e0564525ca7224086dcae97f5224e430ee47d0dd36e8bf111b03db65d4421d7ea50b074d434d36625492d80a06d944f9d0699c1b27c20d3fc8db675643ac8996e6eb2b93b5fedfa59c01676961b487ff45ab2d81267ec8a122a360b813e59feee2d9085ca4b29e638eb7fe5eebae8ceac60f202dc98706cb52b2f2a4df78aa7772d486a747cef7b35728b8a3f2c2749a1d302f739adc4eb256e67e1b0e83174e88507e7e7231ef9fec402c606f4a0550007ce4808f4ff5ae71f32845e49e6ce5800596d410e394aad9b3383c294a749043c3c5dfba2757debbff50c03e9f53d411d796e20f12c8408606d5125ad283339639f59b6cd8d0f64ee75a401b63993fd924e57ef8115b4f3747d5ff82d3dfda5722c38e82bddfd15b0719428ab0e6f93381feafa204a6a40ae3027daafc213c2567ff10df5e573c36b3600fcc042f4e5fcb63b98b5ff5a63a7a9f46c18e59dfa14752b25cfbe12e45a05d4c4795f17f751f95fe538596c3a9706c4ec21d26d46a0ad0758df97e07748251e4990adf8563a5ec2179f7e62dc84707449c25109e5869ee032c57ee776cfbca9c1ba4c68f609f1a2e10a503e3432e5ef89ee1cf24c22d99b41961d1c3592f51ca9d10868d371e2d31bb3e763b56f3267417d2ef11984ea6197c503b17958572bf9c3804f38429a650973892a4f556384d2fbf490d803e7102a373a9e3b44a21d8e6943e632d15edd063972e4d5384f74da39a401f3047e23eba55ca5a71d8ee615bdacf55e018039b69c1497d87f303552b16216e5abe800058e92069cd4a402da926ea237be063af8e4219f0b12bb8617c0bc622dce6333e66797b18cbf424a76e0df33935e76d1c2480044ef92f20af712bc6dfc745fccce61397b1c685d54190df9ccce0715713c2c45cd3994d8c58bedd03b0efffc113e38737ae092f9e4af126bcf68a83fda4020cfc8a78d3642b50a2a40b3a8e2141acd8472587a3e772de3ecfb2fdca893d67b7c5607b588d3d792afa4d9c574cf7b9c20ac8ed499705ecc14961e51ff5eee87303933f4d28658211d32224b49c402de6ebe98a747146d1470dd15dfebde33393139524e0ab9023ebe43fdf12957d1f5945a0417bcadbeb1080c024c61cf3224fffa40eaa1518abd06a1218a6f8bec2c0a0057cd8b342f47fea3345f0a18f12212aa66fa25d9bff2c5a805d707bd0885e3968d70c6cd4c5154b9f46c1642b50c1c9b260a0f4a67b4de84b5bf875efda04525f551271ab605824f961c6f59fd18cb7a194c902803eb11cc233df8237711a009287fa5c585cee2c637c52b84c72d92d7229a8755fd94a055d3ddc3659a0e43b422bd520abc04122192ad08c74c7439bf196f4f2a990051239bdce3f1736e5be39e2cc3d264759b05df28879c5ee9fefd210f48e342bfc60a1cbd4232245d7eb6f8e0ae9440a48a034c23ee2ade630ca2e17e96c1027a16cd0fef7b2d64505566cc575ab49a1aa791b5d0c4350bc95949c9368efe1aeda21180fcbdf99435d6694298169b250b0c3ef3bbef690f65565955bb525e3013d8d6b72b6f24503bc05def1907b43303d9087954b41df68b7ac8cedcf59106f05347be728001e811a1b3a8b4f014f814aa2c9645f94dfb02481d95259689dc182c67eb8e1c64d89f1f685ecd5f6aba628d597a2978f107a8b0ab2be3f5cd86422100849af911ec6eef2f9664d50e36dcc833a45abf95bdaa43234714c8592d78721ea5f279c72875ef462766b3682892cd1f2aa15e202db92b958876e25fb044b099f5db39c5c4c264ef802ae3f7f5ae7f3ea25c879262f42626343f3363ae7ae54dbc2e3808f852e5651d2ff5b4b4ef6536a9a88341a8e0a66d1c552b224749bf71573a903fd12c65e82e52b6ddca2f73c073705bac80d47f0a6e252e6ecc324d2e7a4d8ff2376e13eef09ccfcf72b0f0fea6a2f9a26d8175229bf9d219e2f147d6f992bc86138ae57ee07b7ab4520efc65941031c226d80be2ae4a067ad20eb5dbb6f5c1d57a05129feb1069c5c1dacb50c6f5971d96fb39865274970f6d800a932081d68176fb3f4e2bf2a1421edafc257caaedbe2e08fa152995af4cb315518df33bb9ad45f2c048847e3f7e5eafb8082b054c66dff3f00892b78eb7434a5ef05d22c4c531ddc254053e3c781e930ae86f215000e367a9877a1770d18c95f4531c65b21190a6a858d39649ff77c0ac87eab4f5848d2211fec46c4a9eb5061301139daa06b004c44499e0279f97d24f9ea9eec6ef29c02996e77735f99d9039907dc5b28009ff8b77fb1cb96f134635895268685e554401056d976dd239897e00ee11d05df2b2e83179e6ae6c248a830da7cdd7c84f7cd4aeb56f79959204207d624219c5f7fd415e8ab4e52b85ee3db987966ed14ad05e685b3d7e99d9aaa1827c3619e7595749289f6a38da03369883f7e49fcd1cf1c40e1b1193a8327222ba980cacc5cfcfcc92ca19baa7516d31e7c3fc79a4bf8e00556e2af81b968b07a386377a24f5ff5c4ec5e2224929d0a3d919c613dc6df278fe480afbc2ca4fa39f7358334c6fd2873ffc5f15a7be54d9a8adcc0b7fcbe3d9ff7d9bff6767e9df428a648c2dfa6c78395577c4732182154da261bdd7cfeb9a5cbb7c3fe7d4487c3569d3b49bb19eafb9b1cb6f3b980cdedbfcf55815742015bfa73e7067e9f883e1b78a7160b13aa92e25534c12c1aec027b96163793ea92004969518e5a5e40bea38380da8f4b554f2f17c4d33c515c493fdcdee9aaa6707bf73b913a16dc31cb7f70798963f5ebf5ef52afce15ada99582575d88768ce79d51261841bdb5b1d8216a46aa357f260a48995c5e5b72ee7b6dad9ced3adcbb26aecd0849ca61738e8ed95c1f3a9c22dfb75c7e0b9e661ebde992d5501103f75bec36cf18fd92473d46af0578ad7ad3094e0e94d1aadb665103a6106514559e7a0d59b9bd8bd0fd2ccd4677941628c3c5e6dad1a5e072fe1fa47c6db6c21fa651af0e43f07cd707272607726efa5923faf9af7f45e8adf30db66c9e497f35b1629c132acebc18c6feb41af16f8bc2c88f955f12de82886807ea6bd0efe92c3296d8a7fe20118d4bfd3b55378137e02edb9f4be24b0c7f572a5d90f2727791e5c3c7a3765dac3fea63259a04de89a25df02cc3d1836f7935c6f206f65edea30642ce662fd367ac8db7769f5d3db3a510ff3cbb0cda8a65e68b54ffe6cba102c912613f32b57e9d7ac49f8f4afb6d0ff2a4d1fd20c1a7ae3d0c08f4c671cc4082a7928f461ca5487e46804a314be6869580528fc4704c661a86bb90acd648cabbb5ba674918f9cc0710d1ce736d62111fcb1ba8042ed35fef796b95e0c28df72e19a8955c8a0d91ec37831b1fbd15b8e393b0d132d58e861599c38744394e22e8077aa86cabe9e2e7eb4339a06547a8a9b0278e6da5b309b251db74d2ed2dc861bf685455895c207c90ae332db095b0b0c8ee55ef313933e125245633b47ff186fa93634a60909343aec898d9ae8c628d80e07d962fde792ca9337b1c5c218afe586314c95022f7b8513e991c01728835e89803275bee54af084e8dd7f12846a659698e4a6739ca238a0fd5da7516f752f92925136e06dbe7baa07e79f4a2dd8be9df6338369dd87abc7c817e2967b83572f9415e5bc94fde019dded3a7d7ce24e6a76ad18125fd3f3cf1013be2556fd5034e17c6a58be74774bd6ebbad4a1e37ce9924f1cf9047ee7e52c8b41b5eafd6e67626a1faf02b4ed5ca596c30c00c13cfc97fea3068d5c35b49c900f2b4212b37160f7a16875034ea91549fb5bae522b60ae14bf976b03680975208e916f18e489a3af936fb5b3f200d1be9efcf3c025fd631456b08415a072d96c52d0da3eb7faa12a8320e83a1f91a66e259e43ec429930b4b5348a578e0c425eaa71fea1993b775f24bd88bffa3bc0f88052da41e0e90972439e83952eb5e860e0ed1572145a54cda57e690f5811a02475107fbbb199da083c0adf13f0c55a55d0296ffceb7adb1e6a7b0d39e6cc373e05dcd6dfa03d82815c608570655a0fa1b864de7cd61a2b4455be60c89943bd8ccdde51f81364381cc444205ace703076929bd3cc309cbb9e5997ecd53f6731839815be1566975bd4247436f71cf20fba452b7568d665f8df03797825c7eebf6a048bc6fd6e69f602773e28e6006b904c102c6dab13e5e0f101f59662aa116781495e0440a36ddf6c406c7e793c33c2cd8ffa8b3d0b2310907d4f11edb1e8e72d0134ff6aa662816be9115f56ee433bacc29018defecb801b1ff5dfbf654549613187080a982e80dff4f6b551cadd6e9c01eb6dd6c0c637fc85d6dca5f7641923a8d005751b4a9efac6aeb2a3fbd19f3b0d4b3947c9c9734d0613ada9a728871027e8c945831cb7601099f6824dd05e07452e5035592070084031ab86055e278eb44cdf44136efed1b7e260a969869164ee3d43719ab5b57efd32029c04d667cfc0c074825a26d03f08371f88ad078f242a039915350abd3190c9621700eadf3a37b21db3d34d0300e1634d6be4e8026d9f5b7917325fd6505b25b2a031d7475b20b20fea84a6250dea06647e47c6acb937345b72b815c7ff1b53216bd5d1ca85d990bbc8399321b396fa9b47925e88e6484357b2dc175a22c45e24ae0ff38d270870f2344f9cd03fb28b0937c8ea75d7f2909fec844bce143fbaaab762ac9bfd98f5ab93d433ea9ead09ec7d18c0d07bf4731ebd6fbc75122baee8c235924fb4d951278be0fa7e3871806b3ba5f9772192168a6280fa7bec2da959f0ce0ed8ee6a2f70311e6292b396c3c6da3bfdbf086bd9bee39e783ca44020e1b8bb09bb16756de8f51b64bde179dc45f3616f3c37f920cd500d35454aba05610644d43594f0f0d34952c79c09921649d761109c87af063ee3cdfe9158cf522bd6afa264d03be1538c7b7a6caaa47b808120725de9e6f47e308740448e95c6db93e5795a34c", @generic="21a03f9fc63524a3e5dd58c1fb14ef9922e2272252d0f20633641b88d721f40b62cc219d160fd442509904fad53761c062a209de22548eda349206bcf3606e1435a63b81e80be33e6fb256a1be81432a6b6e4c457ddcee7ae660fede1b0f3edc52fe1185e338b05c705614f0254e230165761159e2e414fd070ff6aa8a89a21229101da60d2e2fb24ce2c9adac9c8064107565f188a6369ce4e551", @generic="14eca3e2d72f342f2c4dd9a5a44c851bea5b2ce8ea1c4051775fd1be87f5420b276406cc49555e4b097aed6a2db7ab341363c69c2dfdc4b4d9c5f25889f50d47e4a5252ccd0593b200b856d3107530d8f62ee4230e959dca717955788322eaa5b76d867577f5cb5b55f789b749d8448681a8eccc7458ab5d5794b292d1fb3d1cf02ccef2133639", @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@private0}, @typed={0x4, 0x22}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@mcast2}]}, 0x21e0}, {&(0x7f0000003780)={0x1030, 0x37, 0x300, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1020, 0x1c, 0x0, 0x1, [@typed={0x14, 0x5c, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="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", @typed={0x8, 0x6e, 0x0, 0x0, @fd}]}]}, 0x1030}, {&(0x7f0000000fc0)={0x380, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@generic="24d786754d7570a1f79942bc64a51ba411e995e792ebd52a216ae62c2206a4afd5971e9db795b9dbfcd4e896e4edbb2b1c8ea0347b9cac2b818071042147ac9d89e9bdb9553a4de011f2fa1efdbf27fcf6aa270b6107f24d8152bd6ea204c071edfd089738b1e3f43491eb241d49cac38760a39fc4da802acd0712bf0eaf3aaee2081d43a59e89c92864500547fe4c55054420731dd16950614db044b674f25792e0c70bb29e0028ec2e48468ac2eade95b93ac211bfe121906e95cde4dc368df88dca27386ed0e1c13a457dead43ad19238ad73ccbbf0fbf85ee5f11f4204cd5f3e", @nested={0xe3, 0x32, 0x0, 0x1, [@generic="2cc0826db026aae6a256aa505e4b08d993fffbee5f5b558f61981ed1e58e4ebcc4a7f193c59a41f212ced3b0cbb997d096cb3a814e313aa4560057641a3ece045e1edd0628074dcb053a3ea95f8468057e19ca91ed13ab19c0fc25a6a41510d89926e976ffc52276c1a04aa648fadb69655192e430b604a5e4e4910b1b629c5e5e7fa1c66feb9c9810dc65df24848acdd118e65fb98924d4cd9bb26e76aa56580db7f0ef11759438be8fe4546d68cc42a193d8fc2436066827381d2617da7305db4835770a2a4aba39fb2d78c4a75db421b6250f29153fa6469950b8a352ad"]}, @generic="7a2f4d57ce23bafd93cf31f7d7104471cf9dd232635e6166cf5c148967298f1dabad55bbbf334c94895ac061d27f0b487d80aa3d5a3eb6f7627576b36036cecb75ed4dae5a7a6c6777b94d", @generic="1bc8565b03ce43fd9ea5f1b1aa31af85e48933faafd64ed71a28d640af71008f71e50656a83fbdcfadbf3440a93d54e61e0c8b4b7b4bc1fd741297e76398e641045f808509627b791848ef7b0f05fbf24884a3020d5438e40ca23151ebd93ac7bb00"/112, @generic="04c181f91d32e07bcc9d05ab41d9accbcbcf859fa0d74e8b658c699e8a83242f980e5a75ba6fe4867d78c54d363280a262fb9d2d30be63e8c4a77fe53e85b2c8d91a27706758cb63615c3661d2eda58f20ced621f7880a03dbcd7d4cdc5464e4ec6f3b82c5ac12ab85d106e1fa0a57295e4b56e3ab6195da131caa3f6738450b8e3f8c5eeaac4cc54652ad4059c398f2ae5c1d8f1bb5b2e5628d87e47aa8c93b2317f4c93b5c8397f0f3afff0ec3cf223934496d760497328db5f37d1c87758100cb2deaffcf4c984b780552979f19253d21cc5e7a23e335dad1323c0e105b3e672465bb14649e81d4f54cc08a"]}, 0x380}], 0x8, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r2, r7, r8]}}], 0x50, 0x80}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180}}, 0x4004000) r11 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1050.960377][T24087] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1051.112213][ T142] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 1051.132281][T13097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.143249][T13097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.153695][T13097] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1051.163104][T13097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.171733][T13097] usb 2-1: config 0 descriptor?? [ 1051.362194][ T142] usb 1-1: Invalid ep0 maxpacket: 64 [ 1051.512224][T13097] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.518201][T13097] usbhid: probe of 2-1:0.0 failed with error -71 [ 1051.526539][T13097] usb 2-1: USB disconnect, device number 78 [ 1051.532160][ T142] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 1051.782135][ T142] usb 1-1: Invalid ep0 maxpacket: 64 [ 1051.787536][ T142] usb usb1-port1: attempt power cycle [ 1051.982107][T13097] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1052.342139][T13097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.353045][T13097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.363140][T13097] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1052.372219][T13097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.381045][T13097] usb 2-1: config 0 descriptor?? [ 1052.502082][ T142] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1052.592101][ T142] usb 1-1: Invalid ep0 maxpacket: 64 [ 1052.742032][ T142] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1052.842101][ T142] usb 1-1: Invalid ep0 maxpacket: 64 [ 1052.847641][ T142] usb usb1-port1: unable to enumerate USB device [ 1052.864608][T13097] betop 0003:11C2:2208.0038: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 1052.875762][T13097] betop 0003:11C2:2208.0038: not enough fields in the report: 0 [ 1053.069541][T13097] usb 2-1: USB disconnect, device number 79 09:04:57 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/183, 0xb7) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 09:04:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10007, 0x0) 09:04:57 executing program 4 (fault-call:6 fault-nth:63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:04:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffff9e}, 0x0) 09:04:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x8000, 0x2, 0x6d}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0x9) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:04:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040c2110822400000000001000024000100000000090400000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000040)) [ 1053.605440][T24123] FAULT_INJECTION: forcing a failure. [ 1053.605440][T24123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.610915][T24130] ion_dma_buf_mmap: failure mapping buffer to userspace 09:04:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40fd0304", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb40ffa591c17abdb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x181dd75131a8519d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRESHEX=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2012604}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) close(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) splice(r0, 0x0, r4, 0x0, 0x10007, 0x0) 09:04:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1053.651214][T24123] CPU: 0 PID: 24123 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1053.661386][T24123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.671436][T24123] Call Trace: [ 1053.674733][T24123] dump_stack+0x14a/0x1ce [ 1053.679067][T24123] ? devkmsg_release+0x11c/0x11c [ 1053.684097][T24123] ? __schedule+0x920/0xef0 [ 1053.688603][T24123] ? show_regs_print_info+0x12/0x12 [ 1053.693876][T24123] ? kasan_alloc_pages+0x4a/0x60 09:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffffea}, 0x0) [ 1053.698810][T24123] should_fail+0x6fb/0x860 [ 1053.703217][T24123] ? setup_fault_attr+0x3d0/0x3d0 [ 1053.708240][T24123] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1053.713616][T24123] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1053.719159][T24123] ? __rcu_read_lock+0x50/0x50 [ 1053.723922][T24123] handle_mm_fault+0x18e6/0x41e0 [ 1053.728851][T24123] ? __pagevec_release+0x130/0x130 [ 1053.733955][T24123] ? finish_fault+0x230/0x230 [ 1053.738629][T24123] ? lru_add_drain_cpu+0x3d9/0x510 [ 1053.743735][T24123] ? _raw_spin_unlock+0x5/0x20 09:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffffef}, 0x0) [ 1053.748494][T24123] ? follow_page_mask+0x76a/0x1050 [ 1053.753608][T24123] __get_user_pages+0xca0/0x1420 [ 1053.758547][T24123] ? populate_vma_page_range+0xf0/0xf0 [ 1053.763994][T24123] ? memset+0x1f/0x40 [ 1053.767972][T24123] ? vmacache_update+0x9f/0xf0 [ 1053.772731][T24123] __mm_populate+0x3a0/0x560 [ 1053.777314][T24123] ? __get_user_pages+0x1420/0x1420 [ 1053.782510][T24123] ? ksys_write+0x25d/0x2c0 [ 1053.787011][T24123] do_mlock+0x4a2/0x540 [ 1053.791158][T24123] ? __ia32_sys_read+0x80/0x80 09:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1053.791302][T24147] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1053.796021][T24123] __x64_sys_mlock+0x5c/0x70 [ 1053.796035][T24123] do_syscall_64+0xcb/0x150 [ 1053.796049][T24123] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1053.796062][T24123] RIP: 0033:0x45d239 [ 1053.821765][T24123] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1053.841362][T24123] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:04:58 executing program 4 (fault-call:6 fault-nth:64): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1053.849899][T24123] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1053.857871][T24123] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1053.865839][T24123] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.871926][T13097] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1053.873816][T24123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 1053.873821][T24123] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:58 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/183, 0xb7) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) 09:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xfffffffe}, 0x0) [ 1053.912440][T24154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24154 comm=syz-executor.5 [ 1053.927865][T24159] FAULT_INJECTION: forcing a failure. [ 1053.927865][T24159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.953022][T24159] CPU: 1 PID: 24159 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1053.963194][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.973231][T24159] Call Trace: [ 1053.976508][T24159] dump_stack+0x14a/0x1ce [ 1053.980813][T24159] ? devkmsg_release+0x11c/0x11c [ 1053.985722][T24159] ? show_regs_print_info+0x12/0x12 [ 1053.990889][T24159] ? stack_trace_save+0x123/0x1f0 [ 1053.995881][T24159] ? kasan_alloc_pages+0x4a/0x60 [ 1054.000790][T24159] should_fail+0x6fb/0x860 [ 1054.005175][T24159] ? setup_fault_attr+0x3d0/0x3d0 [ 1054.010173][T24159] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1054.015516][T24159] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1054.021032][T24159] ? __rcu_read_lock+0x50/0x50 [ 1054.025767][T24159] handle_mm_fault+0x18e6/0x41e0 [ 1054.030676][T24159] ? __pagevec_release+0x130/0x130 [ 1054.035863][T24159] ? finish_fault+0x230/0x230 [ 1054.040521][T24159] ? lru_add_drain_cpu+0x3d9/0x510 [ 1054.045605][T24159] ? _raw_spin_unlock+0x5/0x20 [ 1054.050337][T24159] ? follow_page_mask+0x76a/0x1050 [ 1054.055418][T24159] __get_user_pages+0xca0/0x1420 [ 1054.060330][T24159] ? populate_vma_page_range+0xf0/0xf0 [ 1054.065756][T24159] ? memset+0x1f/0x40 [ 1054.069707][T24159] ? vmacache_update+0x9f/0xf0 [ 1054.074443][T24159] __mm_populate+0x3a0/0x560 [ 1054.079005][T24159] ? __get_user_pages+0x1420/0x1420 [ 1054.084173][T24159] ? ksys_write+0x25d/0x2c0 [ 1054.088651][T24159] do_mlock+0x4a2/0x540 [ 1054.092780][T24159] ? __ia32_sys_read+0x80/0x80 [ 1054.097515][T24159] __x64_sys_mlock+0x5c/0x70 [ 1054.102076][T24159] do_syscall_64+0xcb/0x150 [ 1054.106552][T24159] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1054.112416][T24159] RIP: 0033:0x45d239 [ 1054.116283][T24159] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1054.135858][T24159] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1054.144240][T24159] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1054.152183][T24159] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 09:04:58 executing program 4 (fault-call:6 fault-nth:65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1054.160123][T24159] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.168067][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 1054.176010][T24159] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:04:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:04:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 1054.226976][T24166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24166 comm=syz-executor.5 [ 1054.234331][T24175] FAULT_INJECTION: forcing a failure. [ 1054.234331][T24175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1054.258345][T24175] CPU: 0 PID: 24175 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1054.268524][T24175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.278570][T24175] Call Trace: [ 1054.281868][T24175] dump_stack+0x14a/0x1ce [ 1054.286198][T24175] ? devkmsg_release+0x11c/0x11c [ 1054.291127][T24175] ? show_regs_print_info+0x12/0x12 [ 1054.296319][T24175] ? stack_trace_save+0x123/0x1f0 [ 1054.301339][T24175] ? kasan_alloc_pages+0x4a/0x60 [ 1054.306268][T24175] should_fail+0x6fb/0x860 [ 1054.310678][T24175] ? setup_fault_attr+0x3d0/0x3d0 [ 1054.315712][T24175] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1054.321079][T24175] ? memcg_check_events+0xf8/0x520 [ 1054.326191][T24175] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1054.331732][T24175] ? __rcu_read_lock+0x50/0x50 [ 1054.336491][T24175] ? __mod_node_page_state+0x99/0xb0 [ 1054.341782][T24175] handle_mm_fault+0x18e6/0x41e0 [ 1054.346723][T24175] ? __pagevec_release+0x130/0x130 [ 1054.351844][T24175] ? finish_fault+0x230/0x230 [ 1054.356515][T24175] ? lru_add_drain_cpu+0x3d9/0x510 [ 1054.361627][T24175] ? _raw_spin_unlock+0x5/0x20 [ 1054.366386][T24175] ? follow_page_mask+0x76a/0x1050 [ 1054.371497][T24175] __get_user_pages+0xca0/0x1420 [ 1054.376440][T24175] ? populate_vma_page_range+0xf0/0xf0 [ 1054.381891][T24175] ? memset+0x1f/0x40 [ 1054.385868][T24175] ? vmacache_update+0x9f/0xf0 [ 1054.390625][T24175] __mm_populate+0x3a0/0x560 [ 1054.395213][T24175] ? __get_user_pages+0x1420/0x1420 [ 1054.400407][T24175] ? ksys_write+0x25d/0x2c0 [ 1054.404904][T24175] do_mlock+0x4a2/0x540 [ 1054.409051][T24175] ? __ia32_sys_read+0x80/0x80 [ 1054.413808][T24175] __x64_sys_mlock+0x5c/0x70 [ 1054.418391][T24175] do_syscall_64+0xcb/0x150 [ 1054.422914][T24175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1054.428797][T24175] RIP: 0033:0x45d239 [ 1054.432679][T24175] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1054.452318][T24175] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1054.460702][T24175] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1054.468647][T24175] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1054.476649][T24175] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.484594][T24175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000041 [ 1054.492547][T24175] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1054.551925][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1054.559515][T13097] usb 1-1: can't read configurations, error -61 [ 1054.711855][T13097] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1055.121876][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1055.129475][T13097] usb 1-1: can't read configurations, error -61 [ 1055.135986][T13097] usb usb1-port1: attempt power cycle [ 1055.841714][T13097] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1056.091742][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1056.099327][T13097] usb 1-1: can't read configurations, error -61 [ 1056.251714][T13097] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1056.501683][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1056.509419][T13097] usb 1-1: can't read configurations, error -61 [ 1056.516588][T13097] usb usb1-port1: unable to enumerate USB device 09:05:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x21, 0x10001, 0x8, 0x5, 0x5f4}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0) 09:05:01 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="e30466530708000000000000001af9264d65c620ac1900"/34, 0x22}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1ffffff}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x80000) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:05:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0xf, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x100040a1) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$setstatus(r7, 0x4, 0x4000) 09:05:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40fd0304", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb40ffa591c17abdb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x181dd75131a8519d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRESHEX=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2012604}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) close(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) splice(r0, 0x0, r4, 0x0, 0x10007, 0x0) 09:05:01 executing program 4 (fault-call:6 fault-nth:66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0) 09:05:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40fd0304", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb40ffa591c17abdb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x181dd75131a8519d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRESHEX=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2012604}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) close(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) splice(r0, 0x0, r4, 0x0, 0x10007, 0x0) [ 1056.718040][T24205] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1056.725930][T24197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24197 comm=syz-executor.1 [ 1056.727425][T24206] FAULT_INJECTION: forcing a failure. [ 1056.727425][T24206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1056.755986][T24206] CPU: 0 PID: 24206 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1056.766155][T24206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.776204][T24206] Call Trace: [ 1056.779483][T24206] dump_stack+0x14a/0x1ce [ 1056.783791][T24206] ? devkmsg_release+0x11c/0x11c [ 1056.788703][T24206] ? show_regs_print_info+0x12/0x12 [ 1056.793875][T24206] ? kasan_alloc_pages+0x4a/0x60 [ 1056.798914][T24206] should_fail+0x6fb/0x860 [ 1056.803319][T24206] ? setup_fault_attr+0x3d0/0x3d0 [ 1056.808339][T24206] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1056.813691][T24206] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1056.819217][T24206] ? __rcu_read_lock+0x50/0x50 [ 1056.823960][T24206] handle_mm_fault+0x18e6/0x41e0 [ 1056.828871][T24206] ? __pagevec_release+0x130/0x130 [ 1056.833956][T24206] ? finish_fault+0x230/0x230 [ 1056.838600][T24206] ? lru_add_drain_cpu+0x3d9/0x510 [ 1056.843688][T24206] ? _raw_spin_unlock+0x5/0x20 [ 1056.848422][T24206] ? follow_page_mask+0x76a/0x1050 [ 1056.853506][T24206] __get_user_pages+0xca0/0x1420 [ 1056.858422][T24206] ? populate_vma_page_range+0xf0/0xf0 [ 1056.863852][T24206] ? memset+0x1f/0x40 [ 1056.867807][T24206] ? vmacache_update+0x9f/0xf0 [ 1056.872543][T24206] __mm_populate+0x3a0/0x560 [ 1056.877106][T24206] ? __get_user_pages+0x1420/0x1420 [ 1056.882306][T24206] ? ksys_write+0x25d/0x2c0 [ 1056.886779][T24206] do_mlock+0x4a2/0x540 [ 1056.890906][T24206] ? __ia32_sys_read+0x80/0x80 [ 1056.895642][T24206] __x64_sys_mlock+0x5c/0x70 [ 1056.900206][T24206] do_syscall_64+0xcb/0x150 [ 1056.904683][T24206] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1056.910545][T24206] RIP: 0033:0x45d239 [ 1056.914414][T24206] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1056.934007][T24206] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1056.942387][T24206] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1056.950331][T24206] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1056.958274][T24206] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:05:01 executing program 4 (fault-call:6 fault-nth:67): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40fd0304", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf4, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb40ffa591c17abdb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x181dd75131a8519d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRESHEX=r2], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2012604}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) close(r4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) splice(r0, 0x0, r4, 0x0, 0x10007, 0x0) [ 1056.966216][T24206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000042 [ 1056.974158][T24206] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1056.992060][T24211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24211 comm=syz-executor.1 09:05:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 1057.033314][T24219] FAULT_INJECTION: forcing a failure. [ 1057.033314][T24219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1057.050964][T24219] CPU: 1 PID: 24219 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1057.061124][T24219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.071173][T24219] Call Trace: [ 1057.074472][T24219] dump_stack+0x14a/0x1ce [ 1057.078802][T24219] ? devkmsg_release+0x11c/0x11c [ 1057.083744][T24219] ? show_regs_print_info+0x12/0x12 [ 1057.088941][T24219] ? stack_trace_save+0x123/0x1f0 [ 1057.093959][T24219] ? kasan_alloc_pages+0x4a/0x60 [ 1057.098890][T24219] should_fail+0x6fb/0x860 [ 1057.103306][T24219] ? setup_fault_attr+0x3d0/0x3d0 [ 1057.108334][T24219] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1057.113702][T24219] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1057.119245][T24219] ? __rcu_read_lock+0x50/0x50 [ 1057.124005][T24219] handle_mm_fault+0x18e6/0x41e0 [ 1057.128940][T24219] ? __pagevec_release+0x130/0x130 [ 1057.134044][T24219] ? finish_fault+0x230/0x230 [ 1057.138707][T24219] ? lru_add_drain_cpu+0x3d9/0x510 [ 1057.143807][T24219] ? _raw_spin_unlock+0x5/0x20 [ 1057.148561][T24219] ? follow_page_mask+0x76a/0x1050 [ 1057.153652][T24219] __get_user_pages+0xca0/0x1420 [ 1057.158566][T24219] ? populate_vma_page_range+0xf0/0xf0 [ 1057.163997][T24219] ? memset+0x1f/0x40 [ 1057.167953][T24219] ? vmacache_update+0x9f/0xf0 [ 1057.172690][T24219] __mm_populate+0x3a0/0x560 [ 1057.177253][T24219] ? __get_user_pages+0x1420/0x1420 [ 1057.182425][T24219] ? ksys_write+0x25d/0x2c0 [ 1057.186896][T24219] do_mlock+0x4a2/0x540 [ 1057.191026][T24219] ? __ia32_sys_read+0x80/0x80 [ 1057.195761][T24219] __x64_sys_mlock+0x5c/0x70 [ 1057.200319][T24219] do_syscall_64+0xcb/0x150 [ 1057.204795][T24219] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1057.210659][T24219] RIP: 0033:0x45d239 [ 1057.214525][T24219] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x36}}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40080, 0x0) r4 = getpid() sched_setattr(r4, 0x0, 0x0) fcntl$setown(r3, 0x8, r4) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x2, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r7, 0x0, r6, 0x0, 0x4000000000000003, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xf, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffff9b}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) [ 1057.234101][T24219] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1057.242482][T24219] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1057.250427][T24219] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1057.258371][T24219] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1057.266313][T24219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000043 [ 1057.274256][T24219] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1057.289411][T24221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24221 comm=syz-executor.1 [ 1057.313626][T24233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24233 comm=syz-executor.5 [ 1057.481524][ T142] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1057.841575][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.852490][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.862931][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1057.872356][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.880987][ T142] usb 1-1: config 0 descriptor?? [ 1058.231483][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1058.237495][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1058.244874][ T142] usb 1-1: USB disconnect, device number 78 [ 1058.322693][T24190] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 1058.721398][ T142] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1059.091437][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.102338][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.112097][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1059.121118][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.129929][ T142] usb 1-1: config 0 descriptor?? [ 1059.613073][ T142] betop 0003:11C2:2208.0039: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1059.624164][ T142] betop 0003:11C2:2208.0039: not enough fields in the report: 0 [ 1059.812486][ T142] usb 1-1: USB disconnect, device number 79 [ 1060.581198][T13097] usb 1-1: new high-speed USB device number 80 using dummy_hcd 09:05:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:05:05 executing program 4 (fault-call:6 fault-nth:68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1060.941292][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.952175][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.962172][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1060.971253][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.979895][T13097] usb 1-1: config 0 descriptor?? 09:05:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0) 09:05:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet6(0xa, 0x200000000003, 0x87) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x80) 09:05:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1061.030081][T13097] usb 1-1: can't set config #0, error -71 [ 1061.041987][T24259] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1061.051562][T13097] usb 1-1: USB disconnect, device number 80 [ 1061.061856][T24263] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1061.063297][T24262] FAULT_INJECTION: forcing a failure. 09:05:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100000000040c2110822400000009d34cbea7b24545b00000009040000010301000009210000000122050009058103000000000060ca55758da913464c39b1cdaaa2a6dcf68b12"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0), 0x0, 0x0}) r3 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082404009e40000108030109023f000101000000090400000342ba0100052406000005240000000d240f010000000000000000000424130009058202f7000000000905030234"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0), 0x0, 0x0}) r4 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082404009e40000108030109023f000101000000090400000342ba0100052406000005240000000d240f010000000000000000000424130009058202f7000000000905030234"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="003ddf271c00"], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x220441, 0x0) clock_gettime(0x0, &(0x7f00000033c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000032c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6}, 0x1c29}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/30, 0x1e}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000001580)=""/8, 0x8}, {&(0x7f00000015c0)=""/159, 0x9f}, {&(0x7f0000001680)=""/225, 0xe1}, {&(0x7f0000001780)=""/34, 0x22}], 0x6, &(0x7f0000001840)=""/114, 0x72}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/35, 0x23}, {&(0x7f0000001a80)=""/46, 0x2e}, {&(0x7f0000001ac0)=""/111, 0x6f}, {&(0x7f0000001b40)=""/5, 0x5}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/98, 0x62}], 0x7, &(0x7f0000002c80)=""/104, 0x68}, 0x3}, {{&(0x7f0000002d00)=@sco, 0x80, &(0x7f0000003140)=[{&(0x7f0000002d80)=""/90, 0x5a}, {&(0x7f0000002e00)=""/58, 0x3a}, {&(0x7f0000002e40)=""/21, 0x15}, {&(0x7f0000002e80)=""/55, 0x37}, {&(0x7f0000002ec0)=""/58, 0x3a}, {&(0x7f0000002f00)=""/133, 0x85}, {&(0x7f0000002fc0)=""/103, 0x67}, {&(0x7f0000003040)=""/210, 0xd2}], 0x8, &(0x7f00000031c0)=""/225, 0xe1}, 0x7}], 0x4, 0x60, &(0x7f0000003400)={r5, r6+60000000}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1061.063297][T24262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1061.087493][T24262] CPU: 1 PID: 24262 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1061.097670][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.107722][T24262] Call Trace: [ 1061.111011][T24262] dump_stack+0x14a/0x1ce [ 1061.115337][T24262] ? devkmsg_release+0x11c/0x11c [ 1061.120273][T24262] ? show_regs_print_info+0x12/0x12 [ 1061.125471][T24262] ? kasan_alloc_pages+0x4a/0x60 09:05:05 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{}, {0x2, 0x6}, {}, {0x2, 0x5, r4}], {0x4, 0x4}, [{0x8, 0x1, r6}, {0x8, 0x4, r8}, {0x8, 0x2, r10}], {0x10, 0x4}, {0x20, 0x4}}, 0x5c, 0x0) 09:05:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "1f32d2ab0a443b9a0151bbd0b8f633e9483d9dbc0a090476ef98c2"}, 0x1f) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1061.130397][T24262] should_fail+0x6fb/0x860 [ 1061.134809][T24262] ? setup_fault_attr+0x3d0/0x3d0 [ 1061.139834][T24262] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1061.145203][T24262] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1061.150741][T24262] ? __rcu_read_lock+0x50/0x50 [ 1061.155502][T24262] handle_mm_fault+0x18e6/0x41e0 [ 1061.160435][T24262] ? __pagevec_release+0x130/0x130 [ 1061.165551][T24262] ? finish_fault+0x230/0x230 [ 1061.170223][T24262] ? lru_add_drain_cpu+0x3d9/0x510 [ 1061.175335][T24262] ? _raw_spin_unlock+0x5/0x20 09:05:05 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x5ddc50366e492b07) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4480380}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1061.180097][T24262] ? follow_page_mask+0x76a/0x1050 [ 1061.185211][T24262] __get_user_pages+0xca0/0x1420 [ 1061.190150][T24262] ? populate_vma_page_range+0xf0/0xf0 [ 1061.195606][T24262] ? memset+0x1f/0x40 [ 1061.199581][T24262] ? vmacache_update+0x9f/0xf0 [ 1061.204340][T24262] __mm_populate+0x3a0/0x560 [ 1061.208939][T24262] ? __get_user_pages+0x1420/0x1420 [ 1061.214134][T24262] ? ksys_write+0x25d/0x2c0 [ 1061.218628][T24262] do_mlock+0x4a2/0x540 [ 1061.222777][T24262] ? __ia32_sys_read+0x80/0x80 09:05:05 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r4, &(0x7f0000000000)=0x7fff, r0, &(0x7f0000000040)=0x9, 0xe6, 0x4) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1061.227529][T24262] __x64_sys_mlock+0x5c/0x70 [ 1061.232113][T24262] do_syscall_64+0xcb/0x150 [ 1061.236608][T24262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1061.242492][T24262] RIP: 0033:0x45d239 [ 1061.246377][T24262] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1061.266145][T24262] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1061.274541][T24262] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1061.282492][T24262] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1061.290436][T24262] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1061.298399][T24262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000044 [ 1061.306344][T24262] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1061.661077][T13097] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1061.941151][T13097] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 1062.061180][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1062.068831][T13097] usb 1-1: can't read configurations, error -61 [ 1062.221019][T13097] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1062.501124][T13097] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 1062.621104][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1062.628759][T13097] usb 1-1: can't read configurations, error -61 [ 1062.636014][T13097] usb usb1-port1: attempt power cycle [ 1063.350900][T13097] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1063.481024][T13097] usb 1-1: too many configurations: 52, using maximum allowed: 8 [ 1063.600938][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1063.608526][T13097] usb 1-1: can't read configurations, error -61 [ 1063.760853][T13097] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1063.890940][T13097] usb 1-1: too many configurations: 52, using maximum allowed: 8 09:05:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:05:08 executing program 4 (fault-call:6 fault-nth:69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = eventfd(0x657b) ioctl$FICLONE(r4, 0x40049409, r5) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r7 = dup2(r6, r0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @local}, &(0x7f0000000040)=0xc) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x600000000000000}, 0x0) 09:05:08 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) fchmod(r0, 0x80) r2 = dup(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r2, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1064.010879][T13097] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1064.018501][T13097] usb 1-1: can't read configurations, error -61 [ 1064.025822][T13097] usb usb1-port1: unable to enumerate USB device 09:05:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x76, 0x5, 0x1f, 0x7, 0x1b, "e9df61a2a57838d9"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fstat(r4, &(0x7f0000000000)) 09:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x800000000000000}, 0x0) 09:05:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1064.067490][T24304] FAULT_INJECTION: forcing a failure. [ 1064.067490][T24304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1064.068802][T24311] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1064.123685][T24304] CPU: 1 PID: 24304 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1064.133874][T24304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.143926][T24304] Call Trace: [ 1064.147217][T24304] dump_stack+0x14a/0x1ce [ 1064.151536][T24304] ? devkmsg_release+0x11c/0x11c [ 1064.156467][T24304] ? show_regs_print_info+0x12/0x12 [ 1064.161658][T24304] ? stack_trace_save+0x123/0x1f0 [ 1064.166667][T24304] ? kasan_alloc_pages+0x4a/0x60 [ 1064.171597][T24304] should_fail+0x6fb/0x860 [ 1064.176006][T24304] ? setup_fault_attr+0x3d0/0x3d0 [ 1064.181028][T24304] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1064.186397][T24304] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1064.191938][T24304] ? __rcu_read_lock+0x50/0x50 [ 1064.196697][T24304] ? __mod_node_page_state+0x99/0xb0 [ 1064.201975][T24304] handle_mm_fault+0x18e6/0x41e0 [ 1064.206904][T24304] ? __pagevec_release+0x130/0x130 [ 1064.212005][T24304] ? finish_fault+0x230/0x230 [ 1064.216673][T24304] ? lru_add_drain_cpu+0x3d9/0x510 [ 1064.221779][T24304] ? _raw_spin_unlock+0x5/0x20 [ 1064.226534][T24304] ? follow_page_mask+0x76a/0x1050 [ 1064.231644][T24304] __get_user_pages+0xca0/0x1420 [ 1064.236581][T24304] ? populate_vma_page_range+0xf0/0xf0 [ 1064.242027][T24304] ? memset+0x1f/0x40 [ 1064.246018][T24304] ? vmacache_update+0x9f/0xf0 [ 1064.250760][T24304] __mm_populate+0x3a0/0x560 [ 1064.255329][T24304] ? __get_user_pages+0x1420/0x1420 [ 1064.260504][T24304] ? ksys_write+0x25d/0x2c0 [ 1064.264977][T24304] do_mlock+0x4a2/0x540 [ 1064.269105][T24304] ? __ia32_sys_read+0x80/0x80 [ 1064.273842][T24304] __x64_sys_mlock+0x5c/0x70 [ 1064.278403][T24304] do_syscall_64+0xcb/0x150 [ 1064.282880][T24304] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1064.288762][T24304] RIP: 0033:0x45d239 [ 1064.292634][T24304] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1064.312228][T24304] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0) 09:05:08 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) syz_io_uring_complete(r4) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) r5 = socket$unix(0x1, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 09:05:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xb00000000000000}, 0x0) [ 1064.320610][T24304] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1064.328556][T24304] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1064.336498][T24304] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1064.344440][T24304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 1064.352379][T24304] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1064.720819][ T142] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1065.080834][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.091758][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.102192][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1065.111750][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.120416][ T142] usb 1-1: config 0 descriptor?? [ 1065.460736][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1065.466784][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1065.475275][ T142] usb 1-1: USB disconnect, device number 85 [ 1065.930637][ T142] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1066.290673][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.301612][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.312094][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1066.321636][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.330311][ T142] usb 1-1: config 0 descriptor?? [ 1066.812417][ T142] betop 0003:11C2:2208.003A: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1066.823631][ T142] betop 0003:11C2:2208.003A: not enough fields in the report: 0 09:05:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) 09:05:11 executing program 4 (fault-call:6 fault-nth:70): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1000000000000000}, 0x0) 09:05:11 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x1c}}, 0x20000000) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x6, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x50d, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) pipe2(0x0, 0x80000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') open(&(0x7f0000000040)='./file0\x00', 0x1070c5, 0x0) 09:05:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053e27bc33760036394027b45f7963b7c65a278dcf", 0x1a}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000080}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000140)=[{0xff81, 0x4, 0x2}, {0x9, 0x0, 0x1, 0x5}, {0x9, 0x0, 0x2, 0x8}, {0x2, 0x0, 0x4, 0x6}, {0x2, 0x3, 0xfd, 0x7}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000380)=""/4096) [ 1067.012295][ T142] usb 1-1: USB disconnect, device number 86 [ 1067.079494][T24361] FAULT_INJECTION: forcing a failure. [ 1067.079494][T24361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1067.087295][T24366] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1067.102410][T24361] CPU: 1 PID: 24361 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1067.112575][T24361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.118744][T24372] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1067.122618][T24361] Call Trace: [ 1067.122640][T24361] dump_stack+0x14a/0x1ce [ 1067.122651][T24361] ? devkmsg_release+0x11c/0x11c [ 1067.122665][T24361] ? show_regs_print_info+0x12/0x12 [ 1067.147266][T24361] ? stack_trace_save+0x123/0x1f0 [ 1067.152279][T24361] ? kasan_alloc_pages+0x4a/0x60 [ 1067.157198][T24361] should_fail+0x6fb/0x860 [ 1067.161593][T24361] ? setup_fault_attr+0x3d0/0x3d0 [ 1067.166591][T24361] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1067.171939][T24361] ? memcg_check_events+0xf8/0x520 [ 1067.177031][T24361] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1067.182549][T24361] ? __rcu_read_lock+0x50/0x50 [ 1067.187286][T24361] handle_mm_fault+0x18e6/0x41e0 [ 1067.192202][T24361] ? __pagevec_release+0x130/0x130 [ 1067.197284][T24361] ? finish_fault+0x230/0x230 [ 1067.201928][T24361] ? lru_add_drain_cpu+0x3d9/0x510 [ 1067.207018][T24361] ? _raw_spin_unlock+0x5/0x20 [ 1067.211756][T24361] ? follow_page_mask+0x76a/0x1050 [ 1067.216839][T24361] __get_user_pages+0xca0/0x1420 [ 1067.221749][T24361] ? populate_vma_page_range+0xf0/0xf0 [ 1067.227176][T24361] ? memset+0x1f/0x40 [ 1067.231127][T24361] ? vmacache_update+0x9f/0xf0 [ 1067.235858][T24361] __mm_populate+0x3a0/0x560 [ 1067.240421][T24361] ? __get_user_pages+0x1420/0x1420 [ 1067.245593][T24361] ? ksys_write+0x25d/0x2c0 [ 1067.250067][T24361] do_mlock+0x4a2/0x540 [ 1067.254219][T24361] ? __ia32_sys_read+0x80/0x80 [ 1067.258955][T24361] __x64_sys_mlock+0x5c/0x70 [ 1067.263517][T24361] do_syscall_64+0xcb/0x150 [ 1067.267996][T24361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1067.273859][T24361] RIP: 0033:0x45d239 [ 1067.277723][T24361] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1067.297297][T24361] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1067.305677][T24361] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1067.313620][T24361] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1067.321571][T24361] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.329524][T24361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000046 [ 1067.337467][T24361] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1067.780442][T13097] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1068.150476][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.161454][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.172052][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1068.181479][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.190095][T13097] usb 1-1: config 0 descriptor?? 09:05:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1100000000000000}, 0x0) 09:05:12 executing program 4 (fault-call:6 fault-nth:71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="c4c81de8a35d623781950022050000009332cef144"], 0x0}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x151000, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x422}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x88}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1b0, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40041}, 0x8) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7dae}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}]}, 0x98}}, 0x0) 09:05:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) r4 = getpid() sched_setaffinity(r4, 0x1, &(0x7f0000000040)=0x5) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) link(&(0x7f0000000180)='./bus\x00', &(0x7f0000000140)='./file0/file0\x00') link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1068.387126][T24389] FAULT_INJECTION: forcing a failure. [ 1068.387126][T24389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1068.411443][T24389] CPU: 1 PID: 24389 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1068.421620][T24389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.431676][T24389] Call Trace: [ 1068.434969][T24389] dump_stack+0x14a/0x1ce [ 1068.439294][T24389] ? devkmsg_release+0x11c/0x11c [ 1068.444228][T24389] ? show_regs_print_info+0x12/0x12 [ 1068.449423][T24389] ? stack_trace_save+0x123/0x1f0 [ 1068.454440][T24389] ? kasan_alloc_pages+0x4a/0x60 [ 1068.459375][T24389] should_fail+0x6fb/0x860 [ 1068.463784][T24389] ? setup_fault_attr+0x3d0/0x3d0 [ 1068.468808][T24389] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1068.474175][T24389] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1068.479714][T24389] ? __rcu_read_lock+0x50/0x50 [ 1068.484470][T24389] ? __mod_node_page_state+0x99/0xb0 [ 1068.489751][T24389] handle_mm_fault+0x18e6/0x41e0 [ 1068.494685][T24389] ? __pagevec_release+0x130/0x130 [ 1068.499792][T24389] ? finish_fault+0x230/0x230 [ 1068.504464][T24389] ? lru_add_drain_cpu+0x3d9/0x510 [ 1068.509575][T24389] ? _raw_spin_unlock+0x5/0x20 [ 1068.514330][T24389] ? follow_page_mask+0x76a/0x1050 [ 1068.519439][T24389] __get_user_pages+0xca0/0x1420 [ 1068.524376][T24389] ? populate_vma_page_range+0xf0/0xf0 [ 1068.529821][T24389] ? memset+0x1f/0x40 [ 1068.533792][T24389] ? vmacache_update+0x9f/0xf0 [ 1068.538546][T24389] __mm_populate+0x3a0/0x560 [ 1068.543133][T24389] ? __get_user_pages+0x1420/0x1420 [ 1068.548324][T24389] ? ksys_write+0x25d/0x2c0 [ 1068.552827][T24389] do_mlock+0x4a2/0x540 [ 1068.556984][T24389] ? __ia32_sys_read+0x80/0x80 [ 1068.561739][T24389] __x64_sys_mlock+0x5c/0x70 [ 1068.566322][T24389] do_syscall_64+0xcb/0x150 [ 1068.570827][T24389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1068.576710][T24389] RIP: 0033:0x45d239 [ 1068.580596][T24389] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1068.600190][T24389] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1068.608592][T24389] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1068.616556][T24389] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1068.624520][T24389] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:05:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1101000000000000}, 0x0) 09:05:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x240, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, [], 0x1e}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffaac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @private1, 0xa3}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x48000}, 0x84000) socketpair(0x91778fcb76422f4f, 0x3, 0x12e9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) [ 1068.632482][T24389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047 [ 1068.640445][T24389] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1068.670940][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1068.677397][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1068.691912][T24407] tipc: MTU too low for tipc bearer [ 1068.693099][T13097] usb 1-1: USB disconnect, device number 87 [ 1069.060304][T13097] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1069.420342][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.431235][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.441730][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1069.451335][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.460007][T13097] usb 1-1: config 0 descriptor?? [ 1069.800277][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1069.806288][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1069.815001][T13097] usb 1-1: USB disconnect, device number 88 09:05:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) r4 = dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x812, r4, 0x0) 09:05:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1200000000000000}, 0x0) 09:05:14 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r3, @ANYRESDEC=r0], 0xfec8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10007, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1f, 0x200000) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000000c0)) r6 = getpid() sched_setattr(r6, 0x0, 0x0) tkill(r6, 0x16) 09:05:14 executing program 4 (fault-call:6 fault-nth:72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x2}, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x40, 0x0, 0x8, 0x7}, 0x0, 0xfffebfffffffffff, r3, 0x8) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="77a18680cf07aec10100000000000000defae0e6b27dd9cfb41c7874fe234e067084f4c3c6847b123f66b7926b22950b9bd5a5a37d295b1d5106005410bbe3c87ec4dfae39e2f5e711c00e31d70b91eacf180c3e59b80be0691287d544fb"], 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) inotify_init1(0x0) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000484) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:05:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1300000000000000}, 0x0) [ 1070.081340][T24425] FAULT_INJECTION: forcing a failure. [ 1070.081340][T24425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1070.100865][T24422] ion_dma_buf_mmap: failure mapping buffer to userspace [ 1070.106922][T24425] CPU: 1 PID: 24425 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1070.117955][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.128004][T24425] Call Trace: 09:05:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x1400000000000000}, 0x0) [ 1070.131292][T24425] dump_stack+0x14a/0x1ce [ 1070.135615][T24425] ? devkmsg_release+0x11c/0x11c [ 1070.140560][T24425] ? show_regs_print_info+0x12/0x12 [ 1070.145748][T24425] ? stack_trace_save+0x123/0x1f0 [ 1070.150764][T24425] ? kasan_alloc_pages+0x4a/0x60 [ 1070.155693][T24425] should_fail+0x6fb/0x860 [ 1070.160105][T24425] ? setup_fault_attr+0x3d0/0x3d0 [ 1070.165127][T24425] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1070.170495][T24425] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1070.176034][T24425] ? __rcu_read_lock+0x50/0x50 09:05:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 1070.180788][T24425] handle_mm_fault+0x18e6/0x41e0 [ 1070.185720][T24425] ? __pagevec_release+0x130/0x130 [ 1070.190827][T24425] ? finish_fault+0x230/0x230 [ 1070.195493][T24425] ? lru_add_drain_cpu+0x3d9/0x510 [ 1070.200595][T24425] ? _raw_spin_unlock+0x5/0x20 [ 1070.205465][T24425] ? follow_page_mask+0x76a/0x1050 [ 1070.210569][T24425] __get_user_pages+0xca0/0x1420 [ 1070.215504][T24425] ? populate_vma_page_range+0xf0/0xf0 [ 1070.220956][T24425] ? memset+0x1f/0x40 [ 1070.224933][T24425] ? vmacache_update+0x9f/0xf0 [ 1070.229692][T24425] __mm_populate+0x3a0/0x560 [ 1070.234289][T24425] ? __get_user_pages+0x1420/0x1420 [ 1070.239480][T24425] ? ksys_write+0x25d/0x2c0 [ 1070.243970][T24425] do_mlock+0x4a2/0x540 [ 1070.248098][T24425] ? __ia32_sys_read+0x80/0x80 [ 1070.252892][T24425] __x64_sys_mlock+0x5c/0x70 [ 1070.257513][T24425] do_syscall_64+0xcb/0x150 [ 1070.261992][T24425] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1070.267853][T24425] RIP: 0033:0x45d239 [ 1070.271720][T24425] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1070.291298][T24425] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1070.299688][T24425] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1070.307634][T24425] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1070.315575][T24425] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1070.323516][T24425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 1070.331502][T24425] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1070.480184][T13097] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1070.840209][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.851142][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.861644][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1070.871112][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.879873][T13097] usb 1-1: config 0 descriptor?? [ 1071.420118][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1071.426122][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1071.434897][T13097] usb 1-1: USB disconnect, device number 89 [ 1072.109985][ T142] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1072.470077][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.480976][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.490732][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1072.499747][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.508598][ T142] usb 1-1: config 0 descriptor?? 09:05:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x4000000000000000}, 0x0) 09:05:16 executing program 4 (fault-call:6 fault-nth:73): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) 09:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x5e67328e00000000}, 0x0) [ 1072.672018][T24462] FAULT_INJECTION: forcing a failure. [ 1072.672018][T24462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1072.685425][T24462] CPU: 0 PID: 24462 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1072.695576][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.705625][T24462] Call Trace: [ 1072.708912][T24462] dump_stack+0x14a/0x1ce [ 1072.713235][T24462] ? devkmsg_release+0x11c/0x11c [ 1072.718168][T24462] ? show_regs_print_info+0x12/0x12 [ 1072.723358][T24462] ? stack_trace_save+0x123/0x1f0 [ 1072.728376][T24462] ? kasan_alloc_pages+0x4a/0x60 [ 1072.733310][T24462] should_fail+0x6fb/0x860 [ 1072.737722][T24462] ? setup_fault_attr+0x3d0/0x3d0 [ 1072.742733][T24462] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1072.748084][T24462] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1072.753599][T24462] ? __rcu_read_lock+0x50/0x50 [ 1072.758332][T24462] handle_mm_fault+0x18e6/0x41e0 [ 1072.763240][T24462] ? __pagevec_release+0x130/0x130 [ 1072.768318][T24462] ? finish_fault+0x230/0x230 [ 1072.772965][T24462] ? lru_add_drain_cpu+0x3d9/0x510 [ 1072.778073][T24462] ? _raw_spin_unlock+0x5/0x20 [ 1072.782805][T24462] ? follow_page_mask+0x76a/0x1050 [ 1072.787883][T24462] __get_user_pages+0xca0/0x1420 [ 1072.792918][T24462] ? populate_vma_page_range+0xf0/0xf0 [ 1072.798366][T24462] ? memset+0x1f/0x40 [ 1072.802333][T24462] ? vmacache_update+0x9f/0xf0 [ 1072.807079][T24462] __mm_populate+0x3a0/0x560 [ 1072.811653][T24462] ? __get_user_pages+0x1420/0x1420 [ 1072.816825][T24462] ? ksys_write+0x25d/0x2c0 [ 1072.821308][T24462] do_mlock+0x4a2/0x540 [ 1072.825439][T24462] ? __ia32_sys_read+0x80/0x80 [ 1072.830174][T24462] __x64_sys_mlock+0x5c/0x70 [ 1072.834734][T24462] do_syscall_64+0xcb/0x150 [ 1072.839210][T24462] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1072.845078][T24462] RIP: 0033:0x45d239 [ 1072.848948][T24462] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1072.868538][T24462] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1072.876924][T24462] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1072.884868][T24462] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1072.892812][T24462] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1072.900755][T24462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 1072.908695][T24462] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1072.949989][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1072.955989][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1072.963625][ T142] usb 1-1: USB disconnect, device number 90 09:05:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) 09:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6802000000000000}, 0x0) 09:05:17 executing program 4 (fault-call:6 fault-nth:74): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:17 executing program 3: pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400f2ff071e81"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, [], 0x0, 0x0, r1, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(0xffffffffffffffff, 0xffffffff) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240100002e00"], 0x2}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x84ffde, 0x0) 09:05:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r4 = dup(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x4, 0xe}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 09:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x6a02000000000000}, 0x0) [ 1073.116762][T24480] FAULT_INJECTION: forcing a failure. [ 1073.116762][T24480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1073.144126][T24480] CPU: 0 PID: 24480 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1073.154301][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.164332][T24480] Call Trace: [ 1073.167603][T24480] dump_stack+0x14a/0x1ce [ 1073.171907][T24480] ? devkmsg_release+0x11c/0x11c [ 1073.176812][T24480] ? show_regs_print_info+0x12/0x12 [ 1073.181979][T24480] ? stack_trace_save+0x123/0x1f0 [ 1073.186976][T24480] ? kasan_alloc_pages+0x4a/0x60 [ 1073.191885][T24480] should_fail+0x6fb/0x860 [ 1073.196269][T24480] ? setup_fault_attr+0x3d0/0x3d0 [ 1073.201267][T24480] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1073.206611][T24480] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1073.212125][T24480] ? __rcu_read_lock+0x50/0x50 [ 1073.216859][T24480] handle_mm_fault+0x18e6/0x41e0 [ 1073.221767][T24480] ? __pagevec_release+0x130/0x130 [ 1073.226846][T24480] ? finish_fault+0x230/0x230 [ 1073.231492][T24480] ? lru_add_drain_cpu+0x3d9/0x510 [ 1073.236576][T24480] ? _raw_spin_unlock+0x5/0x20 [ 1073.241310][T24480] ? follow_page_mask+0x76a/0x1050 [ 1073.246393][T24480] __get_user_pages+0xca0/0x1420 [ 1073.251302][T24480] ? populate_vma_page_range+0xf0/0xf0 [ 1073.256729][T24480] ? memset+0x1f/0x40 [ 1073.260680][T24480] ? vmacache_update+0x9f/0xf0 [ 1073.265414][T24480] __mm_populate+0x3a0/0x560 [ 1073.269979][T24480] ? __get_user_pages+0x1420/0x1420 [ 1073.275146][T24480] ? ksys_write+0x25d/0x2c0 [ 1073.279620][T24480] do_mlock+0x4a2/0x540 [ 1073.283749][T24480] ? __ia32_sys_read+0x80/0x80 [ 1073.288483][T24480] __x64_sys_mlock+0x5c/0x70 [ 1073.293043][T24480] do_syscall_64+0xcb/0x150 [ 1073.297521][T24480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1073.303384][T24480] RIP: 0033:0x45d239 [ 1073.307251][T24480] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1073.326824][T24480] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1073.335204][T24480] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1073.343145][T24480] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1073.351087][T24480] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1073.359031][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004a 09:05:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x8000000000000000}, 0x0) 09:05:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setns(r4, 0x2000000) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:17 executing program 4 (fault-call:6 fault-nth:75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1073.366974][T24480] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1073.384966][T24490] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1073.450652][T24502] FAULT_INJECTION: forcing a failure. [ 1073.450652][T24502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1073.472655][T24502] CPU: 1 PID: 24502 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1073.482829][T24502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.492877][T24502] Call Trace: [ 1073.496170][T24502] dump_stack+0x14a/0x1ce [ 1073.500487][T24502] ? devkmsg_release+0x11c/0x11c [ 1073.505411][T24502] ? show_regs_print_info+0x12/0x12 [ 1073.510600][T24502] ? kasan_alloc_pages+0x4a/0x60 [ 1073.515523][T24502] should_fail+0x6fb/0x860 [ 1073.519931][T24502] ? setup_fault_attr+0x3d0/0x3d0 [ 1073.524949][T24502] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1073.529846][ T142] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1073.530314][T24502] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1073.543361][T24502] ? __rcu_read_lock+0x50/0x50 [ 1073.548117][T24502] handle_mm_fault+0x18e6/0x41e0 [ 1073.553044][T24502] ? __pagevec_release+0x130/0x130 [ 1073.558144][T24502] ? finish_fault+0x230/0x230 [ 1073.562808][T24502] ? lru_add_drain_cpu+0x3d9/0x510 [ 1073.567916][T24502] ? _raw_spin_unlock+0x5/0x20 [ 1073.572662][T24502] ? follow_page_mask+0x76a/0x1050 [ 1073.577739][T24502] __get_user_pages+0xca0/0x1420 [ 1073.582646][T24502] ? populate_vma_page_range+0xf0/0xf0 [ 1073.588070][T24502] ? memset+0x1f/0x40 [ 1073.592021][T24502] ? vmacache_update+0x9f/0xf0 [ 1073.596754][T24502] __mm_populate+0x3a0/0x560 [ 1073.601314][T24502] ? __get_user_pages+0x1420/0x1420 [ 1073.606479][T24502] ? ksys_write+0x25d/0x2c0 [ 1073.610949][T24502] do_mlock+0x4a2/0x540 [ 1073.615071][T24502] ? __ia32_sys_read+0x80/0x80 [ 1073.619809][T24502] __x64_sys_mlock+0x5c/0x70 [ 1073.624369][T24502] do_syscall_64+0xcb/0x150 [ 1073.628839][T24502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1073.634785][T24502] RIP: 0033:0x45d239 [ 1073.638649][T24502] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1073.658220][T24502] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1073.666594][T24502] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1073.674535][T24502] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1073.682475][T24502] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1073.690415][T24502] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b 09:05:18 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSETLED(r4, 0x4b32, 0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) tee(r0, 0xffffffffffffffff, 0x29b4, 0x3) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1073.698351][T24502] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1073.909880][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.920836][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.931732][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1073.941183][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.951031][ T142] usb 1-1: config 0 descriptor?? [ 1074.299823][ T142] usbhid 1-1:0.0: can't add hid device: -71 [ 1074.305780][ T142] usbhid: probe of 1-1:0.0 failed with error -71 [ 1074.314209][ T142] usb 1-1: USB disconnect, device number 91 [ 1074.779710][ T142] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1075.139760][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.150718][ T142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.161153][ T142] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1075.170616][ T142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.179251][ T142] usb 1-1: config 0 descriptor?? [ 1075.661409][ T142] betop 0003:11C2:2208.003B: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1075.672527][ T142] betop 0003:11C2:2208.003B: not enough fields in the report: 0 [ 1075.861115][ T142] usb 1-1: USB disconnect, device number 92 [ 1076.629524][T13097] usb 1-1: new high-speed USB device number 93 using dummy_hcd 09:05:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x10, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8014) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) [ 1076.989648][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.000536][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.011045][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1077.020474][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.029142][T13097] usb 1-1: config 0 descriptor?? 09:05:21 executing program 4 (fault-call:6 fault-nth:76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9401000000000000}, 0x0) 09:05:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0xfe8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x40, 0x5, 0x7}) 09:05:21 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1000}}, @enum={0x6}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x50}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000095000000000000004000"/24], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+'}, 0x16, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x1000, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000500)={0x1, 0x0, 0x1000, 0x4c, &(0x7f0000000400)="18be83205950f7b1f0afec23e5bb7169ba3338ce2fb89216925ded73e20eb7e5ef9da02a5b51bdbd58c0d74b3015b093652fa6d4ac281e8c2a647d1c4d4f76c04737fabada3eb9ab37cebcbf", 0x12, 0x0, &(0x7f0000000140)="254549366b7f9c5ac161dac22c451e56ce8e"}) 09:05:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) [ 1077.071467][T13097] usb 1-1: can't set config #0, error -71 [ 1077.081090][T24530] FAULT_INJECTION: forcing a failure. [ 1077.081090][T24530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1077.084549][T13097] usb 1-1: USB disconnect, device number 93 09:05:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e05da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0022220000009623137502091fef3f4be343151ea81635d4f5bbb81ed9c773ddf1cdb729399a9af37c6c317e2e7d807b3e7cb4fb756e825b3b4ab5912e6ddedf88305e288e831b4bc883f18318852cbb36e88ae3278d2edf17ef7f8d107a0165f22c5c141f5dee9e9cfee14cc62507da4643213db597c5d863559ee986f6c7d67ba864b2a9c4627eb4e41a44e726d3ea710037a52719abbd6363ed6543915f2d8c6a6b59a8fab4d15579cca811eb0a297061e7d4a954a4f700afd75cc96f98beb3a1a5abdcad5e31bc39fdf8"], 0x0}, 0x0) [ 1077.122899][T24530] CPU: 0 PID: 24530 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1077.133081][T24530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.143135][T24530] Call Trace: [ 1077.146426][T24530] dump_stack+0x14a/0x1ce [ 1077.150755][T24530] ? devkmsg_release+0x11c/0x11c [ 1077.155776][T24530] ? show_regs_print_info+0x12/0x12 [ 1077.160974][T24530] ? stack_trace_save+0x123/0x1f0 [ 1077.165992][T24530] ? kasan_alloc_pages+0x4a/0x60 [ 1077.170926][T24530] should_fail+0x6fb/0x860 [ 1077.175334][T24530] ? setup_fault_attr+0x3d0/0x3d0 [ 1077.180338][T24530] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1077.185681][T24530] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1077.191203][T24530] ? __rcu_read_lock+0x50/0x50 [ 1077.195952][T24530] handle_mm_fault+0x18e6/0x41e0 [ 1077.200867][T24530] ? __pagevec_release+0x130/0x130 [ 1077.205957][T24530] ? finish_fault+0x230/0x230 [ 1077.210606][T24530] ? lru_add_drain_cpu+0x3d9/0x510 [ 1077.215694][T24530] ? _raw_spin_unlock+0x5/0x20 [ 1077.220426][T24530] ? follow_page_mask+0x76a/0x1050 [ 1077.225508][T24530] __get_user_pages+0xca0/0x1420 [ 1077.230422][T24530] ? populate_vma_page_range+0xf0/0xf0 [ 1077.235850][T24530] ? memset+0x1f/0x40 [ 1077.239829][T24530] ? vmacache_update+0x9f/0xf0 [ 1077.244571][T24530] __mm_populate+0x3a0/0x560 [ 1077.249132][T24530] ? __get_user_pages+0x1420/0x1420 [ 1077.254305][T24530] ? ksys_write+0x25d/0x2c0 [ 1077.258785][T24530] do_mlock+0x4a2/0x540 [ 1077.262915][T24530] ? __ia32_sys_read+0x80/0x80 [ 1077.267651][T24530] __x64_sys_mlock+0x5c/0x70 [ 1077.272214][T24530] do_syscall_64+0xcb/0x150 [ 1077.276697][T24530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1077.282616][T24530] RIP: 0033:0x45d239 [ 1077.286525][T24530] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1077.306101][T24530] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1077.314525][T24530] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 09:05:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9601000000000000}, 0x0) 09:05:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10000010007, 0x0) 09:05:21 executing program 4 (fault-call:6 fault-nth:77): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1077.322473][T24530] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1077.330418][T24530] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.338361][T24530] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004c [ 1077.346302][T24530] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1077.384790][T24553] FAULT_INJECTION: forcing a failure. [ 1077.384790][T24553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1077.416391][T24553] CPU: 1 PID: 24553 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 09:05:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:21 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000000000)={0x2, 0x200, 0x8001, 0x9, 0x9, 0x4}) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x420000, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x6, 0x1, 0x6, 0x9}, {0xcea, 0x20, 0x0, 0x7}, {0x8001, 0x6, 0x5, 0x8}, {0x3, 0x0, 0x0, 0x6}, {0x7fff, 0x81, 0x5, 0x7}, {0xffff, 0x3, 0x0, 0x2}]}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1077.426570][T24553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.436621][T24553] Call Trace: [ 1077.439912][T24553] dump_stack+0x14a/0x1ce [ 1077.444234][T24553] ? devkmsg_release+0x11c/0x11c [ 1077.449169][T24553] ? show_regs_print_info+0x12/0x12 [ 1077.454363][T24553] ? stack_trace_save+0x123/0x1f0 [ 1077.459378][T24553] ? kasan_alloc_pages+0x4a/0x60 [ 1077.464453][T24553] should_fail+0x6fb/0x860 [ 1077.468867][T24553] ? setup_fault_attr+0x3d0/0x3d0 [ 1077.473888][T24553] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1077.479258][T24553] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1077.484794][T24553] ? __rcu_read_lock+0x50/0x50 [ 1077.489546][T24553] handle_mm_fault+0x18e6/0x41e0 [ 1077.494459][T24553] ? __pagevec_release+0x130/0x130 [ 1077.499543][T24553] ? finish_fault+0x230/0x230 [ 1077.504245][T24553] ? lru_add_drain_cpu+0x3d9/0x510 [ 1077.509332][T24553] ? _raw_spin_unlock+0x5/0x20 [ 1077.514065][T24553] ? follow_page_mask+0x76a/0x1050 [ 1077.519147][T24553] __get_user_pages+0xca0/0x1420 [ 1077.524059][T24553] ? populate_vma_page_range+0xf0/0xf0 [ 1077.529487][T24553] ? memset+0x1f/0x40 [ 1077.533539][T24553] ? vmacache_update+0x9f/0xf0 [ 1077.538276][T24553] __mm_populate+0x3a0/0x560 [ 1077.542846][T24553] ? __get_user_pages+0x1420/0x1420 [ 1077.548015][T24553] ? ksys_write+0x25d/0x2c0 [ 1077.552487][T24553] do_mlock+0x4a2/0x540 [ 1077.556618][T24553] ? __ia32_sys_read+0x80/0x80 [ 1077.561353][T24553] __x64_sys_mlock+0x5c/0x70 [ 1077.565919][T24553] do_syscall_64+0xcb/0x150 [ 1077.570394][T24553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1077.576258][T24553] RIP: 0033:0x45d239 [ 1077.580123][T24553] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1077.599703][T24553] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1077.608090][T24553] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1077.616037][T24553] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1077.623982][T24553] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.631990][T24553] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004d [ 1077.639935][T24553] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1077.655806][ T150] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1077.663394][T13097] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1077.909391][ T150] usb 4-1: Using ep0 maxpacket: 16 [ 1078.029492][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.040486][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.051340][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.062036][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.072199][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1078.081742][ T150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1078.094938][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.103562][ T150] usb 4-1: New USB device found, idVendor=055e, idProduct=07da, bcdDevice= 0.00 [ 1078.113228][T13097] usb 1-1: config 0 descriptor?? [ 1078.118291][ T150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.127844][ T150] usb 4-1: config 0 descriptor?? [ 1078.439386][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1078.445416][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1078.454440][T13097] usb 1-1: USB disconnect, device number 94 [ 1078.599509][ T150] hid (null): bogus close delimiter [ 1078.605531][ T150] hid-generic 0003:055E:07DA.003C: bogus close delimiter [ 1078.613725][ T150] hid-generic 0003:055E:07DA.003C: item 0 0 2 10 parsing failed [ 1078.622268][ T150] hid-generic: probe of 0003:055E:07DA.003C failed with error -22 [ 1078.800559][ T150] usb 4-1: USB disconnect, device number 9 [ 1078.919306][T13097] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1079.189282][T13097] usb 1-1: device descriptor read/64, error 18 [ 1079.569226][ T142] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1079.579322][T13097] usb 1-1: device descriptor read/64, error 18 [ 1079.809191][ T142] usb 4-1: Using ep0 maxpacket: 16 [ 1079.859209][T13097] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1079.929307][ T142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.940213][ T142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.950730][ T142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.963931][ T142] usb 4-1: New USB device found, idVendor=055e, idProduct=07da, bcdDevice= 0.00 [ 1079.973490][ T142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.982467][ T142] usb 4-1: config 0 descriptor?? 09:05:24 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20084}, 0x10) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x500, 0x0) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000400)=""/102) r5 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) epoll_pwait(r7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x8, &(0x7f0000000040)={[0x7ff]}, 0x8) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02fff20b0d9d3edd9b7c8aa4a30ab05cfb59644f9a484cdb6b3b4be6cb7fe3bd3b55470e20a7a9219f3a026fa155ebd12634d1904d1361c30602a425055c9081715e71f09d1a4b8ce598a1b84b"], 0xd, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 09:05:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 09:05:24 executing program 4 (fault-call:6 fault-nth:78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) 09:05:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x100, 0x80, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000840)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000300)='tmpfs\x00', &(0x7f0000000340)='./file0\x00', 0x200, 0x4, &(0x7f0000000580)=[{&(0x7f0000000380)="14be0e5ebaff6a3990df22d1412e8f28cd823c521556df1fbb7f17a911547061b4d95b5395c7af", 0x27, 0x1f}, {&(0x7f00000003c0)="556c438d5cb3acaaff6c39758deb411577717fce87c4f3f398a4c881f704e83647d16a83148be3f25a991249fbe24b8be1f670821f9576e118abc545152821962ffb3d6b6566c0c8eed46c52e2c25d59173de0bd021a76663f8695c51078d95f9bb06bdfc91058eb2015fa88148b39d0dbea960b725a299d40b969df0d515c6e332d4339bd539ba5f609be79ee950edf5dbf45b4b023df0463671da4398d140c9afaacb9d1cba12f3b8a1f5b3aaada398b4443b68a63a5729737b8d71db80cc180bb1590bbebbb41e3adcb7569f09b3d452af3af294feeaf0aea0e", 0xdb, 0x1}, {&(0x7f00000004c0)="6d56bb211468c17074da5a4c3d8c28ba0b106e305ba61aabbb2e34dfdb55f3d31852bc2e0f2743b2c844cb6cc606a464339db58b4aad556fb0635e38da06579aad70f9941d7ecebb3e42c05bee9d4a1f1e5f6ffdbf07ea44228e3f80625987b021ee5bc127a9b6d964ef2d60d53bf473333cfcccfe48dfba56b045e488305da8796d738b6a889b0bec3e0fc067d17c82b7755e7e419bd138351d72d38e1519eb76fa29aba9e8559034d8224c9367712f90aa", 0xb2, 0x101}, {0x0, 0x0, 0xd}], 0x25802, &(0x7f0000000880)={[{@huge_always={'huge=always', 0x3d, '-\\'}}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x35, 0x33, 0x70, 0x25, 0x38, 0x6b, 0x34, 0x37, 0x38]}}, {@gid={'gid', 0x3d, r1}}], [{@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@uid_eq={'uid', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$-'}}, {@obj_user={'obj_user'}}, {@euid_lt={'euid<', 0xee01}}]}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x40, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xff, 0x16, 0x4, 0xff, 0xff}, 0x2c, &(0x7f0000000080)={0x5, 0xf, 0x2c, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "f785c46e35d28f3cb8db58e8fa919303"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x7, 0xf00f, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x5, 0xd62}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x14, &(0x7f0000000140)=@string={0x14, 0x3, "873f89afa15f94aa143405cf8cf8498adb2f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x405}}]}) [ 1080.111428][T24590] FAULT_INJECTION: forcing a failure. [ 1080.111428][T24590] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1080.131914][T24590] CPU: 0 PID: 24590 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1080.142095][T24590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.152238][T24590] Call Trace: [ 1080.155508][T24590] dump_stack+0x14a/0x1ce [ 1080.159809][T24590] ? devkmsg_release+0x11c/0x11c [ 1080.164821][T24590] ? show_regs_print_info+0x12/0x12 [ 1080.169987][T24590] ? stack_trace_save+0x123/0x1f0 [ 1080.174976][T24590] ? kasan_alloc_pages+0x4a/0x60 [ 1080.179881][T24590] should_fail+0x6fb/0x860 [ 1080.184269][T24590] ? setup_fault_attr+0x3d0/0x3d0 [ 1080.189266][T24590] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1080.194612][T24590] ? memcg_check_events+0xf8/0x520 [ 1080.199691][T24590] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1080.205206][T24590] ? __rcu_read_lock+0x50/0x50 [ 1080.209943][T24590] handle_mm_fault+0x18e6/0x41e0 [ 1080.214857][T24590] ? __pagevec_release+0x130/0x130 [ 1080.219943][T24590] ? finish_fault+0x230/0x230 [ 1080.224589][T24590] ? lru_add_drain_cpu+0x3d9/0x510 [ 1080.229672][T24590] ? _raw_spin_unlock+0x5/0x20 [ 1080.234404][T24590] ? follow_page_mask+0x76a/0x1050 [ 1080.239483][T24590] __get_user_pages+0xca0/0x1420 [ 1080.244392][T24590] ? populate_vma_page_range+0xf0/0xf0 [ 1080.249821][T24590] ? memset+0x1f/0x40 [ 1080.253782][T24590] ? vmacache_update+0x9f/0xf0 [ 1080.258513][T24590] __mm_populate+0x3a0/0x560 [ 1080.263070][T24590] ? __get_user_pages+0x1420/0x1420 [ 1080.268243][T24590] ? ksys_write+0x25d/0x2c0 [ 1080.272715][T24590] do_mlock+0x4a2/0x540 [ 1080.276852][T24590] ? __ia32_sys_read+0x80/0x80 [ 1080.281592][T24590] __x64_sys_mlock+0x5c/0x70 [ 1080.286154][T24590] do_syscall_64+0xcb/0x150 [ 1080.290629][T24590] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1080.296493][T24590] RIP: 0033:0x45d239 [ 1080.300409][T24590] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.319985][T24590] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1080.328368][T24590] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1080.336311][T24590] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1080.344253][T24590] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.352191][T24590] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004e 09:05:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) 09:05:24 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peekuser(0x3, r4, 0x7fff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x581000, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="7b957726c4c6372bc139613ec10600e5"}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xe) 09:05:24 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r0, 0x0, &(0x7f0000000040)) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x11d) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xfd, 0xfe, 0x0, 0x0, 0xffff, 0xc0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x195c2, 0x0, 0xffffffff, 0x0, 0x0, 0x20001c1e, 0x4000}, r1, 0xffffffffffffffff, r0, 0x6) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:05:24 executing program 4 (fault-call:6 fault-nth:79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1080.360134][T24590] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1080.369144][T13097] usb 1-1: device descriptor read/64, error 18 09:05:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xefffffff00000000}, 0x0) [ 1080.447987][T24614] FAULT_INJECTION: forcing a failure. [ 1080.447987][T24614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1080.469161][ T142] usbhid 4-1:0.0: can't add hid device: -71 [ 1080.469552][T24614] CPU: 1 PID: 24614 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1080.475214][ T142] usbhid: probe of 4-1:0.0 failed with error -71 09:05:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x6, 0x2, 0x7d, 0x4, 0x2, 0x6, 0x200, 0x3e6, 0x38, 0xc8, 0x4, 0x8000, 0x20, 0x1, 0x6f, 0xac, 0x1}, [{0x6, 0x7, 0x10000, 0x8, 0xff, 0x328, 0x7, 0x2}], "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a58) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="020000000000000080001200080001007674693674000200600005000000000008000200000000000800", @ANYBLOB, @ANYRESHEX=r1], 0xa0}}, 0x4) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 1080.485239][T24614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.485243][T24614] Call Trace: [ 1080.485265][T24614] dump_stack+0x14a/0x1ce [ 1080.485276][T24614] ? devkmsg_release+0x11c/0x11c [ 1080.485283][T24614] ? show_regs_print_info+0x12/0x12 [ 1080.485291][T24614] ? kasan_alloc_pages+0x4a/0x60 [ 1080.485299][T24614] should_fail+0x6fb/0x860 [ 1080.485306][T24614] ? setup_fault_attr+0x3d0/0x3d0 [ 1080.485330][T24614] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1080.538995][T24614] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1080.544522][T24614] ? __rcu_read_lock+0x50/0x50 [ 1080.549264][T24614] handle_mm_fault+0x18e6/0x41e0 [ 1080.554174][T24614] ? __pagevec_release+0x130/0x130 [ 1080.559274][T24614] ? finish_fault+0x230/0x230 [ 1080.563923][T24614] ? lru_add_drain_cpu+0x3d9/0x510 [ 1080.569009][T24614] ? _raw_spin_unlock+0x5/0x20 [ 1080.573741][T24614] ? follow_page_mask+0x76a/0x1050 [ 1080.578823][T24614] __get_user_pages+0xca0/0x1420 [ 1080.583734][T24614] ? populate_vma_page_range+0xf0/0xf0 [ 1080.589162][T24614] ? memset+0x1f/0x40 [ 1080.593116][T24614] ? vmacache_update+0x9f/0xf0 [ 1080.597872][T24614] __mm_populate+0x3a0/0x560 [ 1080.602435][T24614] ? __get_user_pages+0x1420/0x1420 [ 1080.607602][T24614] ? ksys_write+0x25d/0x2c0 [ 1080.612078][T24614] do_mlock+0x4a2/0x540 [ 1080.616205][T24614] ? __ia32_sys_read+0x80/0x80 [ 1080.620941][T24614] __x64_sys_mlock+0x5c/0x70 [ 1080.625518][T24614] do_syscall_64+0xcb/0x150 [ 1080.630006][T24614] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1080.635877][T24614] RIP: 0033:0x45d239 [ 1080.639753][T24614] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.659336][T24614] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1080.667718][T24614] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1080.675661][T24614] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1080.683618][T24614] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.691570][T24614] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004f [ 1080.699520][T24614] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r3, 0x0, r1, 0x0, 0x10007, 0x0) 09:05:25 executing program 4 (fault-call:6 fault-nth:80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6ffe000000000000000003"], 0x3}}, 0x0) sendfile(r4, r3, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000200)=""/71, 0x47}], 0x7) 09:05:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1080.740714][ T142] usb 4-1: USB disconnect, device number 10 [ 1080.772230][T24633] FAULT_INJECTION: forcing a failure. [ 1080.772230][T24633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1080.803784][T24633] CPU: 1 PID: 24633 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1080.813972][T24633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.824027][T24633] Call Trace: [ 1080.827320][T24633] dump_stack+0x14a/0x1ce [ 1080.831646][T24633] ? devkmsg_release+0x11c/0x11c [ 1080.836585][T24633] ? show_regs_print_info+0x12/0x12 [ 1080.841916][T24633] ? stack_trace_save+0x123/0x1f0 [ 1080.846931][T24633] ? kasan_alloc_pages+0x4a/0x60 [ 1080.851864][T24633] should_fail+0x6fb/0x860 [ 1080.856271][T24633] ? setup_fault_attr+0x3d0/0x3d0 [ 1080.861291][T24633] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1080.866660][T24633] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1080.872203][T24633] ? __rcu_read_lock+0x50/0x50 [ 1080.877077][T24633] handle_mm_fault+0x18e6/0x41e0 [ 1080.882017][T24633] ? __pagevec_release+0x130/0x130 [ 1080.887120][T24633] ? finish_fault+0x230/0x230 [ 1080.891779][T24633] ? lru_add_drain_cpu+0x3d9/0x510 [ 1080.896871][T24633] ? _raw_spin_unlock+0x5/0x20 [ 1080.901617][T24633] ? follow_page_mask+0x76a/0x1050 [ 1080.906705][T24633] __get_user_pages+0xca0/0x1420 [ 1080.911631][T24633] ? populate_vma_page_range+0xf0/0xf0 [ 1080.917067][T24633] ? memset+0x1f/0x40 [ 1080.921028][T24633] ? vmacache_update+0x9f/0xf0 [ 1080.925767][T24633] __mm_populate+0x3a0/0x560 [ 1080.930358][T24633] ? __get_user_pages+0x1420/0x1420 [ 1080.935647][T24633] ? ksys_write+0x25d/0x2c0 [ 1080.940136][T24633] do_mlock+0x4a2/0x540 [ 1080.944272][T24633] ? __ia32_sys_read+0x80/0x80 [ 1080.949008][T24633] __x64_sys_mlock+0x5c/0x70 [ 1080.953573][T24633] do_syscall_64+0xcb/0x150 [ 1080.958050][T24633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1080.963936][T24633] RIP: 0033:0x45d239 [ 1080.967802][T24633] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1080.987386][T24633] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1080.995777][T24633] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1081.003721][T24633] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1081.011667][T24633] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.019608][T24633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000050 [ 1081.027551][T24633] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1081.049940][T24638] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1081.329057][T13097] usb 1-1: device descriptor read/64, error -71 [ 1081.449124][T13097] usb usb1-port1: attempt power cycle [ 1082.168954][T13097] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1082.379031][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.389929][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.400366][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1082.409778][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.418416][T13097] usb 1-1: config 0 descriptor?? [ 1082.758949][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1082.764933][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1082.773416][T13097] usb 1-1: USB disconnect, device number 97 09:05:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 1083.238845][T13097] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1083.508823][T13097] usb 1-1: device descriptor read/64, error 18 09:05:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x40}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x200, 0x70bd2c, 0x1f, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1800000, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 09:05:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) 09:05:28 executing program 4 (fault-call:6 fault-nth:81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086d040ec74000000000010902240001000000000904ebff010301000009210000000522010009058103"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRK(r2, 0x5409, 0x6889) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"t'], 0x0}, 0x0) [ 1083.884650][T24663] FAULT_INJECTION: forcing a failure. [ 1083.884650][T24663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1083.899004][T13097] usb 1-1: device descriptor read/64, error 18 [ 1083.913008][T24663] CPU: 0 PID: 24663 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1083.923166][T24663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:05:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000140)={0x8, 0x900000000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) recvmsg(r5, &(0x7f0000000300)={&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)}, 0x18040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0xf, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000) syz_usb_disconnect(r0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x100, 0x8, 0x4, 0x10001}, {0x6, 0x9, 0x40, 0x1}, {0xc1a, 0x5, 0x80, 0x1000}]}, 0x10) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1083.933213][T24663] Call Trace: [ 1083.936503][T24663] dump_stack+0x14a/0x1ce [ 1083.940830][T24663] ? devkmsg_release+0x11c/0x11c [ 1083.945764][T24663] ? show_regs_print_info+0x12/0x12 [ 1083.950951][T24663] ? preempt_schedule_irq+0xe7/0x140 [ 1083.956227][T24663] ? stack_trace_save+0x123/0x1f0 [ 1083.961242][T24663] ? kasan_alloc_pages+0x4a/0x60 [ 1083.966180][T24663] should_fail+0x6fb/0x860 [ 1083.970593][T24663] ? setup_fault_attr+0x3d0/0x3d0 [ 1083.975609][T24663] __alloc_pages_nodemask+0x1ee/0x7c0 09:05:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZSET(r7, 0x40081271, &(0x7f0000000000)=0x49f) setresuid(0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r9) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x4, {0x1, 0x2, 0x7, 0x3, 0x8b3, 0xfffffff8, {0x3, 0xff9f, 0x8001, 0x7fff, 0xffff, 0x3, 0x1000, 0xffffffc0, 0x5, 0xfffffffe, 0x4, 0x0, r9, 0x1, 0x4}}}, 0x90) [ 1083.980985][T24663] ? memcg_check_events+0xf8/0x520 [ 1083.986109][T24663] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1083.991639][T24663] ? __rcu_read_lock+0x50/0x50 [ 1083.997087][T24663] handle_mm_fault+0x18e6/0x41e0 [ 1084.002016][T24663] ? __pagevec_release+0x130/0x130 [ 1084.007126][T24663] ? finish_fault+0x230/0x230 [ 1084.011788][T24663] ? lru_add_drain_cpu+0x3d9/0x510 [ 1084.016888][T24663] ? _raw_spin_unlock+0x5/0x20 [ 1084.021637][T24663] ? follow_page_mask+0x76a/0x1050 [ 1084.026743][T24663] __get_user_pages+0xca0/0x1420 09:05:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x10007, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0300001601000000180012190000000000000000aa4553da5c311a7d0c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', r8, 0x700, 0x700, 0x0, 0x3, {{0xb, 0x4, 0x0, 0x36, 0x2c, 0x65, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @local, {[@ssrr={0x89, 0x17, 0x21, [@private=0xa010101, @remote, @multicast1, @private=0xa010100, @empty]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffe000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="65193e4b6162"}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c080}, 0x804) [ 1084.031678][T24663] ? populate_vma_page_range+0xf0/0xf0 [ 1084.037128][T24663] ? memset+0x1f/0x40 [ 1084.041123][T24663] ? vmacache_update+0x9f/0xf0 [ 1084.045876][T24663] __mm_populate+0x3a0/0x560 [ 1084.050550][T24663] ? __get_user_pages+0x1420/0x1420 [ 1084.055746][T24663] ? ksys_write+0x25d/0x2c0 [ 1084.060237][T24663] do_mlock+0x4a2/0x540 [ 1084.064374][T24663] ? __ia32_sys_read+0x80/0x80 [ 1084.069113][T24663] __x64_sys_mlock+0x5c/0x70 [ 1084.073704][T24663] do_syscall_64+0xcb/0x150 [ 1084.078182][T24663] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1084.084045][T24663] RIP: 0033:0x45d239 [ 1084.087916][T24663] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1084.107490][T24663] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1084.115870][T24663] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1084.123813][T24663] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 09:05:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1084.131754][T24663] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.139695][T24663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000051 [ 1084.147636][T24663] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:28 executing program 4 (fault-call:6 fault-nth:82): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 1084.205706][T24689] FAULT_INJECTION: forcing a failure. [ 1084.205706][T24689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1084.223553][T24689] CPU: 0 PID: 24689 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1084.233715][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.243930][T24689] Call Trace: [ 1084.247224][T24689] dump_stack+0x14a/0x1ce [ 1084.251546][T24689] ? devkmsg_release+0x11c/0x11c [ 1084.256482][T24689] ? show_regs_print_info+0x12/0x12 [ 1084.261674][T24689] ? stack_trace_save+0x123/0x1f0 [ 1084.266692][T24689] ? kasan_alloc_pages+0x4a/0x60 [ 1084.271624][T24689] should_fail+0x6fb/0x860 [ 1084.276023][T24689] ? setup_fault_attr+0x3d0/0x3d0 [ 1084.281021][T24689] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1084.286367][T24689] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1084.291882][T24689] ? __rcu_read_lock+0x50/0x50 [ 1084.296629][T24689] handle_mm_fault+0x18e6/0x41e0 [ 1084.301539][T24689] ? __pagevec_release+0x130/0x130 [ 1084.306617][T24689] ? finish_fault+0x230/0x230 [ 1084.311263][T24689] ? lru_add_drain_cpu+0x3d9/0x510 [ 1084.316349][T24689] ? _raw_spin_unlock+0x5/0x20 [ 1084.321087][T24689] ? follow_page_mask+0x76a/0x1050 [ 1084.326195][T24689] __get_user_pages+0xca0/0x1420 [ 1084.331105][T24689] ? populate_vma_page_range+0xf0/0xf0 [ 1084.336531][T24689] ? memset+0x1f/0x40 [ 1084.340485][T24689] ? vmacache_update+0x9f/0xf0 [ 1084.345220][T24689] __mm_populate+0x3a0/0x560 [ 1084.349780][T24689] ? __get_user_pages+0x1420/0x1420 [ 1084.354951][T24689] ? ksys_write+0x25d/0x2c0 [ 1084.359425][T24689] do_mlock+0x4a2/0x540 [ 1084.363554][T24689] ? __ia32_sys_read+0x80/0x80 [ 1084.368288][T24689] __x64_sys_mlock+0x5c/0x70 [ 1084.372853][T24689] do_syscall_64+0xcb/0x150 [ 1084.377331][T24689] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1084.383189][T24689] RIP: 0033:0x45d239 [ 1084.387229][T24689] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1084.406805][T24689] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1084.415183][T24689] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1084.423129][T24689] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1084.431134][T24689] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.439075][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000052 [ 1084.447020][T24689] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1084.518745][T20088] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1084.748698][T13097] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1084.759224][T20088] usb 4-1: Using ep0 maxpacket: 8 [ 1084.878807][T20088] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 1084.887020][T20088] usb 4-1: config 0 has no interface number 0 [ 1084.893895][T20088] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.905724][T20088] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.916296][T20088] usb 4-1: config 0 interface 235 has no altsetting 0 [ 1084.923433][T20088] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 [ 1084.932822][T20088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.941774][T20088] usb 4-1: config 0 descriptor?? [ 1085.108736][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.119662][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.129419][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1085.138429][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.147207][T13097] usb 1-1: config 0 descriptor?? [ 1085.409606][T20088] logitech-djreceiver 0003:046D:C70E.003D: unknown main item tag 0x0 [ 1085.418505][T20088] logitech-djreceiver 0003:046D:C70E.003D: hidraw0: USB HID v0.00 Device [HID 046d:c70e] on usb-dummy_hcd.3-1/input235 [ 1085.498666][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1085.504673][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1085.512729][T13097] usb 1-1: USB disconnect, device number 99 [ 1085.609980][T20088] usb 4-1: USB disconnect, device number 11 [ 1085.968562][T13097] usb 1-1: new high-speed USB device number 100 using dummy_hcd 09:05:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 09:05:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}}, 0x0) 09:05:30 executing program 4 (fault-call:6 fault-nth:83): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1086.151243][T24723] FAULT_INJECTION: forcing a failure. [ 1086.151243][T24723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1086.165643][T24723] CPU: 1 PID: 24723 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1086.175803][T24723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.185858][T24723] Call Trace: [ 1086.189148][T24723] dump_stack+0x14a/0x1ce [ 1086.193472][T24723] ? devkmsg_release+0x11c/0x11c [ 1086.198393][T24723] ? show_regs_print_info+0x12/0x12 [ 1086.203563][T24723] ? stack_trace_save+0x123/0x1f0 [ 1086.208556][T24723] ? kasan_alloc_pages+0x4a/0x60 [ 1086.213462][T24723] should_fail+0x6fb/0x860 [ 1086.217850][T24723] ? setup_fault_attr+0x3d0/0x3d0 [ 1086.222846][T24723] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1086.228187][T24723] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1086.233705][T24723] ? __rcu_read_lock+0x50/0x50 [ 1086.238443][T24723] handle_mm_fault+0x18e6/0x41e0 [ 1086.243356][T24723] ? __pagevec_release+0x130/0x130 [ 1086.248436][T24723] ? finish_fault+0x230/0x230 [ 1086.253079][T24723] ? lru_add_drain_cpu+0x3d9/0x510 [ 1086.258164][T24723] ? _raw_spin_unlock+0x5/0x20 [ 1086.262897][T24723] ? follow_page_mask+0x76a/0x1050 [ 1086.267978][T24723] __get_user_pages+0xca0/0x1420 [ 1086.272886][T24723] ? populate_vma_page_range+0xf0/0xf0 [ 1086.278315][T24723] ? memset+0x1f/0x40 [ 1086.282271][T24723] ? vmacache_update+0x9f/0xf0 [ 1086.287009][T24723] __mm_populate+0x3a0/0x560 [ 1086.291576][T24723] ? __get_user_pages+0x1420/0x1420 [ 1086.296742][T24723] ? ksys_write+0x25d/0x2c0 [ 1086.301220][T24723] do_mlock+0x4a2/0x540 [ 1086.305358][T24723] ? __ia32_sys_read+0x80/0x80 [ 1086.310108][T24723] __x64_sys_mlock+0x5c/0x70 [ 1086.314667][T24723] do_syscall_64+0xcb/0x150 [ 1086.319148][T24723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1086.325012][T24723] RIP: 0033:0x45d239 [ 1086.328877][T24723] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1086.348509][T24723] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1086.356890][T24723] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1086.364908][T24723] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1086.372852][T24723] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.380794][T24723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000053 [ 1086.388739][T24723] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1086.468523][T13097] usb 1-1: device descriptor read/64, error 18 [ 1086.548508][ T150] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1086.788576][ T150] usb 4-1: Using ep0 maxpacket: 8 [ 1086.858460][T13097] usb 1-1: device descriptor read/64, error 18 09:05:31 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) 09:05:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="c6db76d6921825ec39cb395ff374a37012952c8c7fa91b207816295c0cb52c83566ba1b5e91c78c57cdd76b444b2208d297079835929cc5aed35979923f898b45d988ea646a84e338ce7c9b124c40ecc3359dd15c062d197301f6740c88d7f091f3b00e4055e31dafff46a2967ebfde7fdeb2b4ff1ea49299faf982df5", 0x7d}, {&(0x7f0000000240)="bd4f86815d67b6e2a5c6abeb8ec179c44c7ae0e1edb9d1c34f0a6be58b9687df569052ac890402fdc2a80525ff38d9694190bbcf38678259a4bd14e2c2c7c17adde79fe64b5bf7a1ca32e108966298596f5d5753fe1550584f171cfdcdb6a7b2f5c7ae89e77afc372db6e5b9958c4815c86b6475f79eb72bcf3142cf60b96f0b3985fecdf24feb5a5083d8da616548390d04b5bb534779947a5cbbb9c350ab312618f7a123e7ed7879f37c94f5e78f0536ea90a87f8dbec6bb7b516b0fb3adccb4a228c9f9c3a96c7517dc69799cbdba68028ebb6edebd8d647f9ff8737ea472105d98", 0xe3}, {&(0x7f0000000340)="d77e85665a3de94bf660700d27173788188d268b917fef3edb4adf42e59dab5c287964cdca2626702f56f90e0fcb20f4939da37c2ef99daf3f9926e364bb6d49e7aa774128510ce4af47657bd544f9cf8bc7ff01a729c1ed31bad17d77f821f19c928fe2cd1457223919dc5043d49b0b076dde13798e6e61130fd05aabe7bbeda2ba37adc7e3c14db4691194db16a444549d6a8b9a0185ff0908ce775b1c7760dd492851c980484b94f5ed8c862ec54d71087b88f35e415c264745953392ef525f9fbd71d90e4e5204903befacbb5f9f4e8ab20ff852eb1425798fe386b9f04e6ce985ca878766137feec752f6f78fb51d5ceba7e3cde9141a8395ded921", 0xfe}], 0x3) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) 09:05:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 09:05:31 executing program 4 (fault-call:6 fault-nth:84): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1086.908543][ T150] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 1086.916720][ T150] usb 4-1: config 0 has no interface number 0 [ 1086.923955][ T150] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.944523][ T150] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 09:05:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x170, 0x10000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}, 0x78) [ 1086.968725][ T150] usb 4-1: config 0 interface 235 has no altsetting 0 [ 1086.992674][T24750] FAULT_INJECTION: forcing a failure. [ 1086.992674][T24750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1087.000553][ T150] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 [ 1087.012326][T24750] CPU: 0 PID: 24750 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1087.018378][ T150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.025027][T24750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.025031][T24750] Call Trace: [ 1087.025050][T24750] dump_stack+0x14a/0x1ce [ 1087.025060][T24750] ? devkmsg_release+0x11c/0x11c [ 1087.025075][T24750] ? show_regs_print_info+0x12/0x12 [ 1087.036923][ T150] usb 4-1: config 0 descriptor?? [ 1087.043074][T24750] ? kasan_alloc_pages+0x4a/0x60 [ 1087.043084][T24750] should_fail+0x6fb/0x860 [ 1087.043091][T24750] ? setup_fault_attr+0x3d0/0x3d0 [ 1087.043108][T24750] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1087.085280][T24750] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1087.090797][T24750] ? __rcu_read_lock+0x50/0x50 [ 1087.095532][T24750] handle_mm_fault+0x18e6/0x41e0 [ 1087.100444][T24750] ? __pagevec_release+0x130/0x130 [ 1087.105526][T24750] ? finish_fault+0x230/0x230 [ 1087.110171][T24750] ? lru_add_drain_cpu+0x3d9/0x510 [ 1087.115357][T24750] ? _raw_spin_unlock+0x5/0x20 [ 1087.120090][T24750] ? follow_page_mask+0x76a/0x1050 [ 1087.125171][T24750] __get_user_pages+0xca0/0x1420 [ 1087.130083][T24750] ? populate_vma_page_range+0xf0/0xf0 [ 1087.135508][T24750] ? memset+0x1f/0x40 [ 1087.139457][T24750] ? vmacache_update+0x9f/0xf0 [ 1087.144205][T24750] __mm_populate+0x3a0/0x560 [ 1087.148769][T24750] ? __get_user_pages+0x1420/0x1420 [ 1087.153936][T24750] ? ksys_write+0x25d/0x2c0 [ 1087.158408][T24750] do_mlock+0x4a2/0x540 [ 1087.162533][T24750] ? __ia32_sys_read+0x80/0x80 [ 1087.167264][T24750] __x64_sys_mlock+0x5c/0x70 [ 1087.171822][T24750] do_syscall_64+0xcb/0x150 [ 1087.176294][T24750] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1087.182159][T24750] RIP: 0033:0x45d239 [ 1087.186023][T24750] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1087.205597][T24750] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) [ 1087.213975][T24750] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1087.221916][T24750] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1087.229859][T24750] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1087.237797][T24750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 1087.245737][T24750] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1087.253856][ T150] usb 4-1: can't set config #0, error -71 09:05:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 09:05:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x10000087) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x20000008}) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) [ 1087.268002][ T150] usb 4-1: USB disconnect, device number 12 09:05:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) 09:05:31 executing program 4 (fault-call:6 fault-nth:85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1087.342926][T24772] FAULT_INJECTION: forcing a failure. [ 1087.342926][T24772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1087.358971][T24772] CPU: 1 PID: 24772 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1087.369126][T24772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.379172][T24772] Call Trace: [ 1087.382464][T24772] dump_stack+0x14a/0x1ce [ 1087.386779][T24772] ? devkmsg_release+0x11c/0x11c [ 1087.391686][T24772] ? show_regs_print_info+0x12/0x12 [ 1087.396851][T24772] ? kasan_alloc_pages+0x4a/0x60 [ 1087.401763][T24772] should_fail+0x6fb/0x860 [ 1087.406144][T24772] ? setup_fault_attr+0x3d0/0x3d0 [ 1087.411134][T24772] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1087.416469][T24772] ? memcg_check_events+0xf8/0x520 [ 1087.421547][T24772] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1087.427061][T24772] ? __rcu_read_lock+0x50/0x50 [ 1087.431790][T24772] handle_mm_fault+0x18e6/0x41e0 [ 1087.436695][T24772] ? __pagevec_release+0x130/0x130 [ 1087.441773][T24772] ? finish_fault+0x230/0x230 [ 1087.446414][T24772] ? lru_add_drain_cpu+0x3d9/0x510 [ 1087.451499][T24772] ? _raw_spin_unlock+0x5/0x20 [ 1087.456280][T24772] ? follow_page_mask+0x76a/0x1050 [ 1087.461361][T24772] __get_user_pages+0xca0/0x1420 [ 1087.466268][T24772] ? populate_vma_page_range+0xf0/0xf0 [ 1087.471690][T24772] ? memset+0x1f/0x40 [ 1087.475639][T24772] ? vmacache_update+0x9f/0xf0 [ 1087.480369][T24772] __mm_populate+0x3a0/0x560 [ 1087.484925][T24772] ? __get_user_pages+0x1420/0x1420 [ 1087.490088][T24772] ? ksys_write+0x25d/0x2c0 [ 1087.494555][T24772] do_mlock+0x4a2/0x540 [ 1087.498678][T24772] ? __ia32_sys_read+0x80/0x80 [ 1087.503408][T24772] __x64_sys_mlock+0x5c/0x70 [ 1087.507963][T24772] do_syscall_64+0xcb/0x150 [ 1087.512433][T24772] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1087.518292][T24772] RIP: 0033:0x45d239 [ 1087.522153][T24772] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1087.541723][T24772] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1087.550275][T24772] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1087.558270][T24772] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1087.566210][T24772] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1087.574152][T24772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000055 [ 1087.582094][T24772] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1087.658413][T13097] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1088.018423][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.029319][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.039072][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1088.048076][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.056859][T13097] usb 1-1: config 0 descriptor?? [ 1088.398384][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1088.404418][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1088.412136][T13097] usb 1-1: USB disconnect, device number 101 [ 1088.878266][T13097] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1089.238318][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.249228][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.259861][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1089.269268][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.277909][T13097] usb 1-1: config 0 descriptor?? [ 1089.750007][T13097] betop 0003:11C2:2208.003E: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1089.761157][T13097] betop 0003:11C2:2208.003E: not enough fields in the report: 0 09:05:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) socket(0x27, 0x2, 0x20) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8344}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @broadcast}, 0x1, 0x3, 0x3}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeca}}], 0x1, 0x0) [ 1089.951122][T20088] usb 1-1: USB disconnect, device number 102 [ 1090.718086][T13097] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1091.078179][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.089070][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.099505][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1091.108938][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.117605][T13097] usb 1-1: config 0 descriptor?? 09:05:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 09:05:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10007, 0x0) prctl$PR_GET_FP_MODE(0x2e) 09:05:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 09:05:35 executing program 4 (fault-call:6 fault-nth:86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000100)=""/41, 0x29}], 0x4, &(0x7f0000000440)=""/238, 0xee}, 0x2100) r2 = dup(r0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000580)='trusted.overlay.opaque\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_read_part_table(0x0, 0x2, &(0x7f0000001240)=[{&(0x7f0000000080)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa4546492050415254", 0x48, 0x1c0}, {0x0, 0x0, 0x3145}]) 09:05:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:05:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) fchmod(r2, 0x80) dup(r1) 09:05:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0xb00, &(0x7f0000001280)="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", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="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") r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000001240)='/dev/urandom\x00', 0x119cc0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) pkey_alloc(0x0, 0x0) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) fchmod(r1, 0x80) 09:05:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000000)) [ 1091.323595][T24812] FAULT_INJECTION: forcing a failure. [ 1091.323595][T24812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1091.338097][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1091.350799][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1091.362617][T24812] CPU: 0 PID: 24812 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1091.369133][T13097] usb 1-1: USB disconnect, device number 103 [ 1091.372786][T24812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.372790][T24812] Call Trace: [ 1091.372808][T24812] dump_stack+0x14a/0x1ce [ 1091.372823][T24812] ? devkmsg_release+0x11c/0x11c [ 1091.401333][T24812] ? show_regs_print_info+0x12/0x12 [ 1091.406508][T24812] ? stack_trace_save+0x123/0x1f0 [ 1091.411504][T24812] ? kasan_alloc_pages+0x4a/0x60 [ 1091.416456][T24812] should_fail+0x6fb/0x860 [ 1091.420847][T24812] ? setup_fault_attr+0x3d0/0x3d0 [ 1091.425850][T24812] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1091.431194][T24812] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1091.436711][T24812] ? __rcu_read_lock+0x50/0x50 [ 1091.441454][T24812] handle_mm_fault+0x18e6/0x41e0 [ 1091.446373][T24812] ? __pagevec_release+0x130/0x130 [ 1091.451454][T24812] ? finish_fault+0x230/0x230 [ 1091.456110][T24812] ? lru_add_drain_cpu+0x3d9/0x510 [ 1091.461195][T24812] ? _raw_spin_unlock+0x5/0x20 [ 1091.465925][T24812] ? follow_page_mask+0x76a/0x1050 [ 1091.471006][T24812] __get_user_pages+0xca0/0x1420 [ 1091.475914][T24812] ? populate_vma_page_range+0xf0/0xf0 [ 1091.481342][T24812] ? memset+0x1f/0x40 [ 1091.485299][T24812] ? vmacache_update+0x9f/0xf0 [ 1091.490040][T24812] __mm_populate+0x3a0/0x560 [ 1091.494600][T24812] ? __get_user_pages+0x1420/0x1420 [ 1091.499770][T24812] ? ksys_write+0x25d/0x2c0 [ 1091.504243][T24812] do_mlock+0x4a2/0x540 [ 1091.508368][T24812] ? __ia32_sys_read+0x80/0x80 [ 1091.513102][T24812] __x64_sys_mlock+0x5c/0x70 [ 1091.517660][T24812] do_syscall_64+0xcb/0x150 [ 1091.522136][T24812] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1091.528025][T24812] RIP: 0033:0x45d239 [ 1091.531887][T24812] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1091.551487][T24812] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1091.559877][T24812] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 09:05:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1091.567818][T24812] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1091.575763][T24812] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.583707][T24812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000056 [ 1091.591648][T24812] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1091.907990][T13097] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1092.279153][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.291489][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.301256][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1092.310333][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.319073][T13097] usb 1-1: config 0 descriptor?? [ 1092.647964][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1092.653918][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1092.662127][T13097] usb 1-1: USB disconnect, device number 104 [ 1093.117870][T13097] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1093.477916][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.488833][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.498592][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1093.507603][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.516433][T13097] usb 1-1: config 0 descriptor?? [ 1093.999486][T13097] betop 0003:11C2:2208.003F: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1094.010556][T13097] betop 0003:11C2:2208.003F: not enough fields in the report: 0 [ 1094.198849][T13097] usb 1-1: USB disconnect, device number 105 [ 1094.967645][T20088] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1095.327701][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.338602][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.348357][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1095.357512][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.366322][T20088] usb 1-1: config 0 descriptor?? 09:05:39 executing program 4 (fault-call:6 fault-nth:87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r4 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x98081, 0x2) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x7}, 0x4) 09:05:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 09:05:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 09:05:39 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10007, 0x0) prctl$PR_GET_FP_MODE(0x2e) 09:05:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="66f315ce4dcb12c21133af4d956b9d3fd63110cc05bb58c63ec777b716aefb66ed1ebe258def87b456736e271f846d2e53bdac7c72f304f8241d3fe017c9de82f0df8beece83665fdba32aaa8bbb6a2b0f14bfd52ea5fdcd69e26a1a3b41280fc39bff06f76962d1a03b51eeac3489ff0750e8265f89b13b99a18cb0f2c5a292527a492c0bfa6340641ba642164670b1993a5e684a998a479384faba82063d348c4709c572dd8c72d189bcee3c3b5c918ac0dab596a59de831a740abafb7da6fa6c4f6", @ANYRES16=r0, @ANYBLOB="ed0cb5e6f5493cab7ca3982e259edf6f57908a6e18e1a00d45a65a74799dc5aee6bc26e50b62d297e515d75df04cb55a39b138cba703704758611b72be84afc6e13959a0ce3d22cb7e68f5afcb91bcf3186bc824e93979221f36e3a0bf6f1ee16ca20cf7e985a2c2a2739d13043e3181a78cf79031ab2bc43231d027a0063b1952d14d5f8cfa22ded8dd1f1317f844dcce81760534036340498894e55a963d3e1e2719a2563b392fc13b0bf37efa075888665dc2", @ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="c5e1cef9faadc69581624e12b0e22c8a343ae9b07f0c318ee122eee6c26990f8104d5f37d927b16c5c709d8d54978d3c9697bcb921ce40a6c36671340b03dcb1f4598e9d0acb0d9e9dcc0b3ca94cadd2bf03bd479a972ee653e7cdc59e8d67f1acb13b6d6924b5c643ba69bad3574dc8bfc896d3eeb74d715e21c419fdab2c700b4f00696973cfd22c45fbf11bcd0414c0bb19883dc2577d024b5e4c92ad37dc1f10b072422d7281cee0ce73cc00cde74c4cfb6f5ca0131c809aaaa43421fbd58b9c83601e0dc5075d64b1d41170cb99bb2ce566212911", @ANYRESOCT=r4, @ANYRES32=r5, @ANYRES32=r1], 0x0) syz_usb_control_io(r7, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1ac5db3120609c16ddd02e"], 0x0}, 0x0) 09:05:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r1 = dup2(0xffffffffffffffff, r0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r2 = socket(0x40000000002, 0x3, 0x80000000002) sendmmsg$inet(r2, &(0x7f0000001880)=[{{&(0x7f0000000000), 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x8, "047f7e8f0ca8"}]}}}], 0x18}}], 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x440100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x490, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffe01}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbdb}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00', 0x7fffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa38}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @remote, 0x44f}}}}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35303ed8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x204, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "36dec6ea124777bd3664004723c1da3885ebb16eadfa92cf1bbec20834485628c8bef6510c336d86c9c89dab89cf0a86db3089faddd0e5f778d734d844d7b9a88644774a2f715f7895aa6a2f59079b327e9ae3807c171720e80cfc4c2c6f2e96818e50c258fbe5111014e1e11c5b2e2bc4355575e74962de616c1451e0730f65bbad8d389cd094bf21680eb45e90ba38f750594572baea4415d07ea4e13bb031e1fee7277e001446e30851d4c3e36a2fdf921ebe3a6e71e3e4bc14508766b0354914101485432c420a4a045dd3b6323aa3"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "367935f2050ebc3178e5addd62bc1523ee501a6641d34bb0d12d4ae6266a2d4b1eb7093a9ac836642aa4ed2489c15e861e1ca9ebd47c469219526c95a0ba0c04f76e905a945843a7336c0bbb1607c8988f2735da458208ea000078a700f09752e50ac1d5cc5f6219b1345460ed45b36df132d86b5b57f4a4e25fbb16f310ab64c84416dc88e07198757200a051f42f7a59ff843bca1c7a94aa4796cc48f33df73471a59fd27b6ba7802c2d9e8f1a0c7752bc76d69313dcdb1b9a21ba0b894e2672fbe93e3132b308a81cd813f3f5fef56c17cf1df6e8a47afcd604a1d144c19e2556"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0f6b67d6c17ac3a424a16e0325eb0d1a3acaf4947f6b"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 1095.562629][T24866] FAULT_INJECTION: forcing a failure. [ 1095.562629][T24866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1095.597746][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1095.604985][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1095.612969][T24866] CPU: 1 PID: 24866 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1095.623125][T24866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.627500][T20088] usb 1-1: USB disconnect, device number 106 [ 1095.633166][T24866] Call Trace: [ 1095.633187][T24866] dump_stack+0x14a/0x1ce [ 1095.633197][T24866] ? devkmsg_release+0x11c/0x11c [ 1095.633207][T24866] ? show_regs_print_info+0x12/0x12 [ 1095.633217][T24866] ? stack_trace_save+0x123/0x1f0 [ 1095.633230][T24866] ? kasan_alloc_pages+0x4a/0x60 [ 1095.666765][T24866] should_fail+0x6fb/0x860 [ 1095.671262][T24866] ? setup_fault_attr+0x3d0/0x3d0 [ 1095.676275][T24866] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1095.681631][T24866] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1095.687155][T24866] ? __rcu_read_lock+0x50/0x50 [ 1095.691894][T24866] handle_mm_fault+0x18e6/0x41e0 [ 1095.696803][T24866] ? __pagevec_release+0x130/0x130 [ 1095.701888][T24866] ? finish_fault+0x230/0x230 [ 1095.706535][T24866] ? lru_add_drain_cpu+0x3d9/0x510 [ 1095.711623][T24866] ? _raw_spin_unlock+0x5/0x20 [ 1095.716373][T24866] ? follow_page_mask+0x76a/0x1050 [ 1095.721459][T24866] __get_user_pages+0xca0/0x1420 [ 1095.726395][T24866] ? populate_vma_page_range+0xf0/0xf0 [ 1095.731828][T24866] ? memset+0x1f/0x40 [ 1095.735779][T24866] ? vmacache_update+0x9f/0xf0 [ 1095.740516][T24866] __mm_populate+0x3a0/0x560 [ 1095.745077][T24866] ? __get_user_pages+0x1420/0x1420 [ 1095.750256][T24866] ? ksys_write+0x25d/0x2c0 [ 1095.754728][T24866] do_mlock+0x4a2/0x540 [ 1095.758854][T24866] ? __ia32_sys_read+0x80/0x80 [ 1095.763588][T24866] __x64_sys_mlock+0x5c/0x70 [ 1095.768151][T24866] do_syscall_64+0xcb/0x150 [ 1095.772744][T24866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1095.778609][T24866] RIP: 0033:0x45d239 [ 1095.782475][T24866] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.802052][T24866] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) fcntl$setpipe(r2, 0x407, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x3c}}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x10007, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '${'}}, 0x23) 09:05:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) socket$inet6_udp(0xa, 0x2, 0x0) 09:05:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 09:05:40 executing program 4 (fault-call:6 fault-nth:88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1095.810433][T24866] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1095.818521][T24866] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1095.826485][T24866] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.834439][T24866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000057 [ 1095.842387][T24866] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 09:05:40 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x100000001, 0x8, 0x4}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = memfd_create(&(0x7f0000000140), 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x4) add_key(0x0, 0x0, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3", 0x55, 0x0) r6 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) splice(r0, 0x0, r5, 0x0, 0x100000fffffff9, 0x0) 09:05:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:40 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1095.934229][T24891] FAULT_INJECTION: forcing a failure. [ 1095.934229][T24891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1095.996835][T24891] CPU: 1 PID: 24891 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1096.007017][T24891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.017065][T24891] Call Trace: [ 1096.020356][T24891] dump_stack+0x14a/0x1ce [ 1096.024679][T24891] ? devkmsg_release+0x11c/0x11c [ 1096.029606][T24891] ? show_regs_print_info+0x12/0x12 [ 1096.034792][T24891] ? stack_trace_save+0x123/0x1f0 [ 1096.039813][T24891] ? kasan_alloc_pages+0x4a/0x60 [ 1096.044740][T24891] should_fail+0x6fb/0x860 [ 1096.049147][T24891] ? setup_fault_attr+0x3d0/0x3d0 [ 1096.054167][T24891] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1096.059528][T24891] ? memcg_check_events+0xf8/0x520 [ 1096.064632][T24891] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1096.070167][T24891] ? __rcu_read_lock+0x50/0x50 [ 1096.074922][T24891] handle_mm_fault+0x18e6/0x41e0 [ 1096.079854][T24891] ? __pagevec_release+0x130/0x130 [ 1096.084956][T24891] ? finish_fault+0x230/0x230 [ 1096.089621][T24891] ? lru_add_drain_cpu+0x3d9/0x510 [ 1096.094729][T24891] ? _raw_spin_unlock+0x5/0x20 [ 1096.099484][T24891] ? follow_page_mask+0x76a/0x1050 [ 1096.104586][T24891] __get_user_pages+0xca0/0x1420 [ 1096.109525][T24891] ? populate_vma_page_range+0xf0/0xf0 [ 1096.114975][T24891] ? memset+0x1f/0x40 [ 1096.118950][T24891] ? vmacache_update+0x9f/0xf0 [ 1096.123711][T24891] __mm_populate+0x3a0/0x560 [ 1096.128297][T24891] ? __get_user_pages+0x1420/0x1420 [ 1096.133485][T24891] ? ksys_write+0x25d/0x2c0 [ 1096.137980][T24891] do_mlock+0x4a2/0x540 [ 1096.142137][T24891] ? __ia32_sys_read+0x80/0x80 [ 1096.146890][T24891] __x64_sys_mlock+0x5c/0x70 [ 1096.151467][T24891] do_syscall_64+0xcb/0x150 [ 1096.155965][T24891] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1096.161847][T24891] RIP: 0033:0x45d239 [ 1096.165730][T24891] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1096.185329][T24891] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x48895) sendmmsg(r3, &(0x7f0000000380), 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000300)) r7 = openat$cgroup_ro(r1, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) splice(r7, &(0x7f0000000280)=0x4, r8, &(0x7f00000002c0)=0xffffffff80000001, 0x61bcba0b, 0x1) [ 1096.193733][T24891] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1096.201702][T24891] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1096.207522][T20088] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1096.209663][T24891] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.209669][T24891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000058 [ 1096.209679][T24891] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1096.567549][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.578535][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.588440][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1096.597607][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.606559][T20088] usb 1-1: config 0 descriptor?? [ 1096.937504][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1096.943463][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1096.951602][T20088] usb 1-1: USB disconnect, device number 107 [ 1097.417402][T20088] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1097.687440][T20088] usb 1-1: device descriptor read/64, error 18 [ 1098.077347][T20088] usb 1-1: device descriptor read/64, error 18 [ 1098.347398][T20088] usb 1-1: new high-speed USB device number 109 using dummy_hcd 09:05:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:42 executing program 4 (fault-call:6 fault-nth:89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa}, 0x0) 09:05:42 executing program 3: unshare(0x44000600) syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x113400, 0x18a) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PIO_CMAP(r2, 0x40004580, 0x0) 09:05:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x200000000003, 0x87) syz_open_dev$char_usb(0xc, 0xb4, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) syncfs(r8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x2, 0x6, {{0x26, 0x4, 0x0, 0x14, 0x98, 0x66, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x7, 0x38, [@private=0xa010101]}, @rr={0x7, 0x27, 0xcf, [@dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @rand_addr=0x64010100, @broadcast]}, @cipso={0x86, 0x56, 0x0, [{0x0, 0xf, "4db9f16066e82c0b8eb9a3e780"}, {0x0, 0xe, "7da2354d84a14120630406d0"}, {0x2, 0x6, "3eeabcae"}, {0x7, 0x7, "25a385f725"}, {0x2, 0xd, "2b3e7434fec2396181f7ea"}, {0x0, 0x10, "7f9515e0846a31b0cde8c63b3552"}, {0x0, 0x9, "a5aa3600e600dd"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x964, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x490, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')-*!/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xad}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{+^J!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-)\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82fa}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '{#\'$-&-\\}\xa8!)\'\xf7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "06dd2cbbeab3dbd598fcb738e3085da2f1ed65cb4be149813862e073b245465102ae16ee0c9da2b601d0562dd356a5243897d5b5f02101fb57ee1a7b054c8ce9e5bc300a810a2866ab293962b6d6d5ff00996a7d98c3ab3b5253aedde989bbde02974562720ef548d9540192588f36326ea372fd05fc92a999b3f614edd8a682b26053105da83f428fce7627a64637e25104cb2aa69949ff9f8c22485e6496aab5b073240ea99bb4713765def4f7ac6911e8e611ae6c157d85bf68b5ef968a668f3f8d52a799fb0ae5784470dd118c0c7cfae1fb7bf5a9844146"}, @ETHTOOL_A_BITSET_BITS={0x188, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')\'{%,&(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '^\\/N-$@{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@^!*$))+--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*&\x04^,#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "6da1b6c3745b40a1d15e352bf93a484488dd9816ba3bc9a22b3eca99cc11d0499b970e55cc9a65d1ed3793fe0ba267d667e5f965f5beb082c4e51c2a32b7379675db49034342bd514a5f2c850ffb33ce7554d0676c6c25cdbaa2121da92cdcdadd0cc0674035ccc0acbf6862ec3b6b62cd1297eee3e67ec585b8d972590e9b886bb6419ad605d42d14285ef45422819a617147fae06a1884b6ea2d2cdaabc9e760cc2d961b8a66"}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, @ETHTOOL_A_WOL_MODES={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "1ed46bfc1cbbc62c3105f3278979845aa45eda25ac6c6e2da3a7cefd6fb23265d8ae2ab9f245db8c2277a1514298f86372acf146889e7c7497af6b17bcab91f295cd873796367e4e1611bd75633dc1921763630f6c3520f1b40a4bd8ae6eb2f3e370bd4b8287ae216a5a4c2e54aa319f4c2adfa5"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd3, 0x4, "c1fe282b94e82a1d9b43c22f2bbd0bc04c1414213305f856e09664383eec3c35f0ee83e77a3b45113d81971e2e200a43be54a628bc9d1cd7e8060f4d51dd2944b83b5595443db364d8160e37ba7183d4f9eae23863825451ef0fd5f34a1b8e2c976a4ff0176355e5bc50315f232d708722bb1dcb959a50356dfc5a1b5791517ea4754d6b3ad12cd491364445a47f43f49a612bae84137857d025be0730ef331968f71b173f032dd37af57c72881bc02806b2995535a898b299236fbc0d76cf3c1b5cc54795ecdfef75f4d84cf9f3aa"}, @ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "bbcd60a8ebed054bda2c7dac771778087e04b3ba59e391dc7abbd02c3965e8a83d41b301478a1a46aa6773fee68c20d786038014e95bd398e9c482210c5e55b0a3e35dec11989296982a318e07b7273edc32d431bda2259f7e2109f59caeeb4a6777b0740b932e0d"}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "809b15abb75f53bd50e727e3fe"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x65, 0x3, "a6b6e43b55d9ecd28793b44a219f688af32953af1ee0358cff0782f00eb3c2916ccb17aa971935305813476a260fb891f2c53021aa36f8d84b6b0cf169490f0f416ab6dbd1084168a7bea3d57ec55bc536058370c89791877c47d5557f95dcf206"}, @ETHTOOL_A_WOL_SOPASS={0xda, 0x3, "4c66c520acde024fff8419eb1636e06b9b9d0f6146c58c3667967ed233f8358d8d73d92b17bd4e2404d6fe85d8d2e13ae97569137995413fb420a3279c75f6dacce0886609d352dd89ecc907b83964b1dbdc0b5c1774f92e259f6f2d4ff3a63f6fa047adf9ab5ac65af37518fad8113551a89feaafbbde7f209684eb32f23cdb6980a0c3d12d80edc91acfe033d5cc76bfbe71ab5095fe47b7d947bbe681bf55140a7c2a6b4501cdcf3e539f2f61c65ab1b58ac5d76b8bdeab40f2989a138c7e7dc604d646d97b63032ca6e4142b9bfeb9855329a5dc"}, @ETHTOOL_A_WOL_MODES={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "e9e4d2e13f4cc52bab5ffc4aeae5a68f8eebbd490e"}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "8a203fd54d9a28cedef4a7ed9025d3d8d25e79aeb405b26b563f859a82c7a215e34118845b223483c3d2cb1a6ec22d1a7b8a72040f360abb4ce274055e3e995d94e3b14bb8e258c62c17667b9f28fb9021685096c19c0d97c65da589280f081575d4fc9c3ccca247654b27c1dca1248992b51cd29f6dd602b1017c9e38ba38b6937dfccc85a79475039b7513425c1f1e917bb3e88f9341512d23ea3dd16d229c55d24d4874a869e07aff8f08a0d4961ae5d7b7fd2f39db5700a1be30ab234867fc52bab21966dc4a8118f719d2511b14119bdb"}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:42 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1098.598428][T24936] FAULT_INJECTION: forcing a failure. [ 1098.598428][T24936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1098.617311][T20088] usb 1-1: device descriptor read/64, error 18 09:05:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 1098.650592][T24936] CPU: 0 PID: 24936 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1098.660774][T24936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.670824][T24936] Call Trace: [ 1098.674118][T24936] dump_stack+0x14a/0x1ce [ 1098.678442][T24936] ? devkmsg_release+0x11c/0x11c [ 1098.683372][T24936] ? show_regs_print_info+0x12/0x12 [ 1098.688672][T24936] ? stack_trace_save+0x123/0x1f0 09:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 09:05:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) r9 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000000)) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) [ 1098.689114][T24948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24948 comm=syz-executor.5 [ 1098.693694][T24936] ? kasan_alloc_pages+0x4a/0x60 [ 1098.693706][T24936] should_fail+0x6fb/0x860 [ 1098.693715][T24936] ? setup_fault_attr+0x3d0/0x3d0 [ 1098.693727][T24936] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1098.693743][T24936] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1098.731683][T24936] ? __rcu_read_lock+0x50/0x50 [ 1098.736446][T24936] handle_mm_fault+0x18e6/0x41e0 [ 1098.741379][T24936] ? __pagevec_release+0x130/0x130 [ 1098.746483][T24936] ? finish_fault+0x230/0x230 [ 1098.751146][T24936] ? lru_add_drain_cpu+0x3d9/0x510 [ 1098.756250][T24936] ? _raw_spin_unlock+0x5/0x20 [ 1098.761001][T24936] ? follow_page_mask+0x76a/0x1050 [ 1098.766089][T24936] __get_user_pages+0xca0/0x1420 [ 1098.771005][T24936] ? populate_vma_page_range+0xf0/0xf0 [ 1098.776436][T24936] ? memset+0x1f/0x40 [ 1098.780390][T24936] ? vmacache_update+0x9f/0xf0 [ 1098.785125][T24936] __mm_populate+0x3a0/0x560 [ 1098.789703][T24936] ? __get_user_pages+0x1420/0x1420 [ 1098.794892][T24936] ? ksys_write+0x25d/0x2c0 [ 1098.799399][T24936] do_mlock+0x4a2/0x540 [ 1098.803535][T24936] ? __ia32_sys_read+0x80/0x80 [ 1098.808271][T24936] __x64_sys_mlock+0x5c/0x70 [ 1098.812834][T24936] do_syscall_64+0xcb/0x150 [ 1098.817313][T24936] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1098.823174][T24936] RIP: 0033:0x45d239 [ 1098.827043][T24936] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1098.846704][T24936] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1098.855093][T24936] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1098.863040][T24936] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1098.870987][T24936] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.878936][T24936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000059 [ 1098.886884][T24936] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 09:05:43 executing program 4 (fault-call:6 fault-nth:90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet6(0xa, 0x80000, 0x87) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)=""/39, 0x27) [ 1098.922472][T24962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24962 comm=syz-executor.5 09:05:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1098.999907][T24974] FAULT_INJECTION: forcing a failure. [ 1098.999907][T24974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.034200][T24974] CPU: 1 PID: 24974 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1099.044380][T24974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.054426][T24974] Call Trace: [ 1099.057719][T24974] dump_stack+0x14a/0x1ce [ 1099.062043][T24974] ? devkmsg_release+0x11c/0x11c [ 1099.066971][T24974] ? show_regs_print_info+0x12/0x12 [ 1099.072160][T24974] ? stack_trace_save+0x123/0x1f0 [ 1099.077159][T24974] ? kasan_alloc_pages+0x4a/0x60 [ 1099.082064][T24974] should_fail+0x6fb/0x860 [ 1099.086450][T24974] ? setup_fault_attr+0x3d0/0x3d0 [ 1099.091444][T24974] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1099.096786][T24974] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1099.102301][T24974] ? __rcu_read_lock+0x50/0x50 [ 1099.107032][T24974] handle_mm_fault+0x18e6/0x41e0 [ 1099.111944][T24974] ? __pagevec_release+0x130/0x130 [ 1099.117062][T24974] ? finish_fault+0x230/0x230 [ 1099.121716][T24974] ? lru_add_drain_cpu+0x3d9/0x510 [ 1099.126862][T24974] ? _raw_spin_unlock+0x5/0x20 [ 1099.131598][T24974] ? follow_page_mask+0x76a/0x1050 [ 1099.136675][T24974] __get_user_pages+0xca0/0x1420 [ 1099.141628][T24974] ? populate_vma_page_range+0xf0/0xf0 [ 1099.147055][T24974] ? memset+0x1f/0x40 [ 1099.151016][T24974] ? vmacache_update+0x9f/0xf0 [ 1099.155758][T24974] __mm_populate+0x3a0/0x560 [ 1099.160335][T24974] ? __get_user_pages+0x1420/0x1420 [ 1099.165507][T24974] ? ksys_write+0x25d/0x2c0 [ 1099.169984][T24974] do_mlock+0x4a2/0x540 [ 1099.174153][T24974] ? __ia32_sys_read+0x80/0x80 [ 1099.178888][T24974] __x64_sys_mlock+0x5c/0x70 [ 1099.183453][T24974] do_syscall_64+0xcb/0x150 [ 1099.187990][T24974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1099.193958][T24974] RIP: 0033:0x45d239 [ 1099.197914][T24974] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1099.217493][T24974] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1099.225880][T24974] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1099.233826][T24974] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1099.241815][T24974] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:05:43 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000013000)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x2000)=nil) 09:05:43 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x12}, 0x0) 09:05:43 executing program 4 (fault-call:6 fault-nth:91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1099.249758][T24974] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005a [ 1099.257711][T24974] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1099.344503][T25003] FAULT_INJECTION: forcing a failure. [ 1099.344503][T25003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.359395][T25003] CPU: 0 PID: 25003 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1099.369551][T25003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.379599][T25003] Call Trace: [ 1099.382910][T25003] dump_stack+0x14a/0x1ce [ 1099.387243][T25003] ? devkmsg_release+0x11c/0x11c [ 1099.392163][T25003] ? show_regs_print_info+0x12/0x12 [ 1099.397333][T25003] ? stack_trace_save+0x123/0x1f0 [ 1099.402325][T25003] ? kasan_alloc_pages+0x4a/0x60 [ 1099.407230][T25003] should_fail+0x6fb/0x860 [ 1099.411613][T25003] ? setup_fault_attr+0x3d0/0x3d0 [ 1099.416605][T25003] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1099.421993][T25003] ? memcg_check_events+0xf8/0x520 [ 1099.427205][T25003] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1099.432719][T25003] ? __rcu_read_lock+0x50/0x50 [ 1099.437457][T25003] handle_mm_fault+0x18e6/0x41e0 [ 1099.442363][T25003] ? __pagevec_release+0x130/0x130 [ 1099.447566][T25003] ? finish_fault+0x230/0x230 [ 1099.452207][T25003] ? lru_add_drain_cpu+0x3d9/0x510 [ 1099.457317][T25003] ? _raw_spin_unlock+0x5/0x20 [ 1099.462049][T25003] ? follow_page_mask+0x76a/0x1050 [ 1099.467125][T25003] __get_user_pages+0xca0/0x1420 [ 1099.472079][T25003] ? populate_vma_page_range+0xf0/0xf0 [ 1099.477505][T25003] ? memset+0x1f/0x40 [ 1099.481459][T25003] ? vmacache_update+0x9f/0xf0 [ 1099.486191][T25003] __mm_populate+0x3a0/0x560 [ 1099.490749][T25003] ? __get_user_pages+0x1420/0x1420 [ 1099.495913][T25003] ? ksys_write+0x25d/0x2c0 [ 1099.500383][T25003] do_mlock+0x4a2/0x540 [ 1099.504556][T25003] ? __ia32_sys_read+0x80/0x80 [ 1099.509330][T25003] __x64_sys_mlock+0x5c/0x70 [ 1099.513887][T25003] do_syscall_64+0xcb/0x150 [ 1099.518361][T25003] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1099.524231][T25003] RIP: 0033:0x45d239 [ 1099.528099][T25003] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1099.547670][T25003] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1099.556049][T25003] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1099.563995][T25003] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1099.571938][T25003] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.579877][T25003] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005b [ 1099.587816][T25003] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1099.677172][T20088] usb 1-1: device descriptor read/64, error -71 [ 1099.797515][T20088] usb usb1-port1: attempt power cycle [ 1100.517155][T20088] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1100.747180][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.758070][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.768111][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1100.777264][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.785893][T20088] usb 1-1: config 0 descriptor?? [ 1101.147116][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1101.153080][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1101.161568][T20088] usb 1-1: USB disconnect, device number 110 [ 1101.627063][T20088] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1101.897002][T20088] usb 1-1: device descriptor read/64, error 18 09:05:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = getpid() sched_setattr(r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000000000000000000602cf0c39283798c17fd4768c18e570e68e1cc89097b512abca7bc909aeb1b4e344cdca4c8b8a53ab9ec0cd01d9fff14aaa0aa36bbd7a5c0189739bb725d10f0a800c41e3434194cf5b620669239ef072d70fd34f3881d691cc8e50f5303dc8fa57d963115de332f3655fb01b64a841f6dfbea0834b605679f7e42b21d3dab5d381817bdc7a40300"/167, @ANYRES32=r9, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="73797a746e6c32020000000000000000", @ANYRES32=r9, @ANYBLOB="00070001000000070000009c4b26006c0065000020009078e0000001ac1414410194040000890371830384891f89e0000002ffffffff64010100e0000001ac141435ac1e0101000000009404000044289a10515186d3000000f0000000080007000000000003000000ff0000000000000008000000030000"]}) 09:05:46 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:46 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f00000019c0)={0x8, {'\x00', 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = dup(r1) sync_file_range(r0, 0x1, 0x1ff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0x1, 0x5}) sendfile(r0, r0, &(0x7f0000000100), 0x8080ffffff7e) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) 09:05:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x13}, 0x0) 09:05:46 executing program 4 (fault-call:6 fault-nth:92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="9939bb174b966a5bc7e14c0aa8d9e84883c09891a3f9d54fb4a283e317607e493ac5b633d264dcd2db764fb3c33a6755ad4e10505400"/66], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000080)=""/39, 0x27}], 0x3) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:46 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1102.273042][T25023] FAULT_INJECTION: forcing a failure. [ 1102.273042][T25023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1102.291214][T20088] usb 1-1: device descriptor read/64, error 18 [ 1102.306178][T25023] CPU: 0 PID: 25023 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 09:05:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) [ 1102.316354][T25023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.326410][T25023] Call Trace: [ 1102.329709][T25023] dump_stack+0x14a/0x1ce [ 1102.334044][T25023] ? devkmsg_release+0x11c/0x11c [ 1102.338981][T25023] ? show_regs_print_info+0x12/0x12 [ 1102.344180][T25023] ? stack_trace_save+0x123/0x1f0 [ 1102.349203][T25023] ? kasan_alloc_pages+0x4a/0x60 [ 1102.354139][T25023] should_fail+0x6fb/0x860 [ 1102.358553][T25023] ? setup_fault_attr+0x3d0/0x3d0 [ 1102.363579][T25023] __alloc_pages_nodemask+0x1ee/0x7c0 09:05:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x111}, 0x0) [ 1102.368954][T25023] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1102.374500][T25023] ? __rcu_read_lock+0x50/0x50 [ 1102.379263][T25023] handle_mm_fault+0x18e6/0x41e0 [ 1102.384202][T25023] ? __pagevec_release+0x130/0x130 [ 1102.389313][T25023] ? finish_fault+0x230/0x230 [ 1102.393989][T25023] ? lru_add_drain_cpu+0x3d9/0x510 [ 1102.399105][T25023] ? _raw_spin_unlock+0x5/0x20 [ 1102.403872][T25023] ? follow_page_mask+0x76a/0x1050 [ 1102.408986][T25023] __get_user_pages+0xca0/0x1420 [ 1102.413926][T25023] ? populate_vma_page_range+0xf0/0xf0 [ 1102.419375][T25023] ? memset+0x1f/0x40 [ 1102.423354][T25023] ? vmacache_update+0x9f/0xf0 [ 1102.428116][T25023] __mm_populate+0x3a0/0x560 [ 1102.432703][T25023] ? __get_user_pages+0x1420/0x1420 [ 1102.437900][T25023] ? ksys_write+0x25d/0x2c0 [ 1102.442404][T25023] do_mlock+0x4a2/0x540 [ 1102.446561][T25023] ? __ia32_sys_read+0x80/0x80 [ 1102.451319][T25023] __x64_sys_mlock+0x5c/0x70 [ 1102.455901][T25023] do_syscall_64+0xcb/0x150 [ 1102.460548][T25023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.466425][T25023] RIP: 0033:0x45d239 [ 1102.470304][T25023] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1102.489901][T25023] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1102.498308][T25023] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1102.506269][T25023] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1102.514240][T25023] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 09:05:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 09:05:46 executing program 4 (fault-call:6 fault-nth:93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x194}, 0x0) [ 1102.522216][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c [ 1102.530184][T25023] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000000c0)=[{0xfe00, 0x50, 0xc8, 0xfffffff7}, {0x36, 0x3, 0x4, 0x1f}, {0x3, 0xd5, 0xfb, 0x1}, {0x7, 0x1, 0x4, 0x1}, {0x0, 0x6, 0x1, 0x3f}]}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, r1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r8 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r8, &(0x7f0000000200)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1102.597636][T25053] FAULT_INJECTION: forcing a failure. [ 1102.597636][T25053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1102.617224][ T22] audit: type=1400 audit(1597655146.946:29): avc: denied { execute } for pid=25056 comm="syz-executor.5" path="pipe:[115446]" dev="pipefs" ino=115446 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1102.625553][T25053] CPU: 0 PID: 25053 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1102.652308][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.662552][T25053] Call Trace: [ 1102.665838][T25053] dump_stack+0x14a/0x1ce [ 1102.670158][T25053] ? devkmsg_release+0x11c/0x11c [ 1102.675091][T25053] ? show_regs_print_info+0x12/0x12 [ 1102.680380][T25053] ? __schedule+0x920/0xef0 [ 1102.684876][T25053] ? kasan_alloc_pages+0x4a/0x60 [ 1102.689814][T25053] should_fail+0x6fb/0x860 [ 1102.694229][T25053] ? setup_fault_attr+0x3d0/0x3d0 [ 1102.699245][T25053] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1102.704605][T25053] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1102.710136][T25053] ? __rcu_read_lock+0x50/0x50 [ 1102.714882][T25053] handle_mm_fault+0x18e6/0x41e0 [ 1102.720671][T25053] ? __pagevec_release+0x130/0x130 [ 1102.725783][T25053] ? finish_fault+0x230/0x230 [ 1102.730448][T25053] ? lru_add_drain_cpu+0x3d9/0x510 [ 1102.735551][T25053] ? _raw_spin_unlock+0x5/0x20 [ 1102.740296][T25053] ? follow_page_mask+0x76a/0x1050 [ 1102.745480][T25053] __get_user_pages+0xca0/0x1420 [ 1102.750426][T25053] ? populate_vma_page_range+0xf0/0xf0 [ 1102.755867][T25053] ? memset+0x1f/0x40 [ 1102.759831][T25053] ? vmacache_update+0x9f/0xf0 [ 1102.764574][T25053] __mm_populate+0x3a0/0x560 [ 1102.769143][T25053] ? __get_user_pages+0x1420/0x1420 [ 1102.774317][T25053] ? ksys_write+0x25d/0x2c0 [ 1102.778797][T25053] do_mlock+0x4a2/0x540 [ 1102.782929][T25053] ? __ia32_sys_read+0x80/0x80 [ 1102.787700][T25053] __x64_sys_mlock+0x5c/0x70 [ 1102.792268][T25053] do_syscall_64+0xcb/0x150 [ 1102.796753][T25053] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1102.802742][T25053] RIP: 0033:0x45d239 [ 1102.806614][T25053] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1102.826205][T25053] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1102.834607][T25053] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1102.842560][T25053] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1102.850521][T25053] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.858475][T25053] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005d [ 1102.866429][T25053] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:47 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x80000122) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000000)=0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) read(r0, &(0x7f00000000c0)=""/84, 0x30) 09:05:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESOCT], 0xfec8) socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffb, @ipv4={[], [], @loopback}}, 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x400000, 0x0) splice(r4, 0x0, r6, 0x0, 0x0, 0x0) 09:05:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1103.166926][T20088] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1103.526928][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.538055][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.548609][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1103.558094][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.568792][T20088] usb 1-1: config 0 descriptor?? [ 1103.906853][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1103.912825][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1103.920664][T20088] usb 1-1: USB disconnect, device number 112 [ 1104.386719][T20088] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1104.746816][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.757826][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.768481][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1104.777915][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.787734][T20088] usb 1-1: config 0 descriptor?? [ 1105.309496][T20088] betop 0003:11C2:2208.0040: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1105.320621][T20088] betop 0003:11C2:2208.0040: not enough fields in the report: 0 09:05:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x196}, 0x0) 09:05:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205e4ff009332cef144"], 0x0}, 0x0) 09:05:50 executing program 4 (fault-call:6 fault-nth:94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x9}) 09:05:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r4 = getpid() sched_setattr(r4, 0x0, 0x0) rt_tgsigqueueinfo(r3, r4, 0x13, &(0x7f00000000c0)={0xe, 0x800, 0x3}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4094}, 0x20000001) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r6 = socket$inet6(0xa, 0x200000000003, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000040)=r3) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000009ff3f95e97636ca4a1d048e14334dcb4a0c0f5964999a15984832887d59da7a45a82279aa8858942a29c49370dda6c71feb160103496432d1cad2a307f2b06353e3a10fab23500ced111443368083abddd4959fbea7ef97851e14dde314a8f8d0ee700b09371d0d9746410fee3c8", @ANYRES16=r9, @ANYBLOB="000428bd7000fddbdf2507000000befd040000000080134badd6750efeb40d699594ab918f269494e606eb72f64aa5032f32b93e9e935867c931b7057109f4ce2ac526a2cc5656555846237061af845388886cb7a86a5f966ba898bac7b13f8103220d9eb21edd6ae5d54c60670854bb1c83fb7443b999336e764d2b2a2f83ba76fcd9292571d5a5c78a2d016443d51aa1e71ee4b2d916f7b2c37191fb46823363bd6ea7"], 0x1c}, 0x1, 0x0, 0x0, 0x22040014}, 0x20040000) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000001c40)=[{&(0x7f0000001cc0)="293e231669ac7b44c02e2c91c0e12e36f1128548bd660d6369d8dea64faf00ff84c16910b11f8f73a1ea88ca04338fe9b794fe123cf5c43f4e150a986a7d4a462d89dfdcf0587e27781f3cfd06f6bf4c2f172c7741069be2e439cc3c6fbf9bf132c1b83082a7442dec4a250970d887c41d3b6a189c34c0ff94c350425047ebd3320efb5b9af3b69fe40f49dd6698451ec895b4be9ef219b811c33d96dce466144000000000a5ffcdf2f8c222c3fd05d9de0b6327b352068c02957e43a1eb31e53e658ea5cf98a6bf9b42f3f188f6967d5631bf7c9704fecaf012ecf82dc0", 0xde}, {&(0x7f0000000780)="f211108c54d2199a457730522c6b51484ac59f6c296c7be860a1ab1b3be3bd1f53d244ef7a1a0c48567806a9fe4db6c7da2dd319d0842861039271f40f4ddebe8943605d14349adedb987137bf7748dc502f17eaed32522a6e277e326a6c5f2ae44e9acbc6", 0x65}, {&(0x7f0000000800)="4e19c62af186ced59012d52b670497bdfcb97fb48aceb9c49162e722213774434d3dd019fb1d5fc8150ce5c13e83243d252e28585cc1c42f3a0a4480402b4b598c835c92baab9a4b2d80ae8af731c0c4f9f742cfe46a2d87197269dd56", 0x5d}, {&(0x7f0000000180)="ed2890900013e69e82878c492fbecf83a6c54310b3797ad63d", 0x19}, {&(0x7f0000001a40)="f8be38170fb2371599cff9d5db53342a131ce10a9738ef22d044565c0daf9e4b97833b2567e8cbf805d91b80be6a1370d15a0d9acefbd3305125df7e9cfb071e30fa8ae88ae68041bc1d7788d3d1368654e173ed543d9ad489b6270f2ff9162b4c1b99d7458b0c07ed26c9e4ef79d8e368d22acd3bb648a7e69c9e428b4142a2e1ab8174c7e74597d4c5ebba725280566877abf7f8f1812f38d71db5c22615777e9c124b9802084ecbf7cc7d62f8b3e28bd8f5157e5ffa1c3530069144fe585e2506d753d172b0d83b2c5149b09fa3868f923c070b5a508a951ddd3795f370d76bf51f00c626e7", 0xe7}, {&(0x7f0000000880)="e30b6a1206673a8f94185b9ca70e1dee2a4c4f06db5870d4f62c712ed6caf73265d93f3be813d8bcdd291eb105839246936080abfae1c484c36eca94856eb11e353d96212dc2a5f6c4f6ffe3a0d6a12b82ab02", 0x53}, {&(0x7f0000001b40)="2f8e962f812f9b1c002bd7dc6082848c0e16792ca4dbbeaf2ea343e8c9dcf5a36a247ff4881f35568b882c1c9d232718b60c5ad0658aa16a116c8bbbf600062db6826d6f456b09751338e5e9072aad6b0e5c94e1157202817b91e43f8cb642fa7175bf0270fe9b807def9ef8e2963fe6fba6fe16de0af7179ba9b555c0c256c81725b6d1adef96b9937d0d56c15be845907831467a50a51a449a5736974b6b6aea60ef8b21d284411064f36d496b1ed8dc03b21cba45db71c72617746d5134279faed2e2562bb6a22b7cb63f5834c719db94121b5b", 0xd5}], 0x7, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bdabef3e6e40ae5017ff11b63d169f2f85cc3a3cf37eea6fb6ae190000", 0x95}, {&(0x7f0000000380)="2a92997dde9f81b959d19ef711ce3882f2b6c6b2eee8f19ca2a0fcfecba4edd78a127e05c323349d294b1c64b5d2c579d920a0c30d0b4eba440a3300192ec13e90b3e265a9fcdeff7d40325ef14638a30d1a57584a58c984d175c8415194bb8985924609e0a1d599578289ba4a1861e3796934fbf216f54d5d3202f0912985e0dcca08e3f85fa4bd3f1950881ebee0f628aac1fb68220f90cf876683a57bb8da3cc026ff3afb46c77e1f7d7f64f5b561a0713ad4fd98a0b24278fb0ff8319651e2e130591b5753324f5bd0db70bd66b0797b5104d781026e789295a08568", 0xde}, {&(0x7f0000000140)="6771dc6032", 0x5}, {&(0x7f0000000580)="67f1a740a3dd3d436fbac8336efca8035071812aa4f50a6319a8256366f29484ab0165554c3caaf579172892b936880f88c7c76d6b079dcdd558eb269d841cdd08406555d5f5124fcec8cc603dc2491b35d9490943", 0x55}, {&(0x7f0000000600)="b015321d3a3a32c161408d79c0b7d2a631e63536047e2e9c0630446b121a57260aa45136fb23412de0a62d14dd08e03a91369c36baca98c97d173de77bec146a799be7f08b82f76e21b599702e54ff99712d98ff8d4b8f185e4c0b976078883d5201267c22c84a966bde987708c46e21bec87f64d4f357b4c050d99aa1909a519a54f1a05e2e31589841c443", 0x8c}, {&(0x7f0000000480)="2b2c0c631b52b0e0045b328bae91cd5aa3238810e55d50f468a0f202204f816135e9ab8ee21586059a2e5fda88cf7074ab84b177d8cfdc2a7e927c", 0x3b}, {&(0x7f00000006c0)="fb6736cbc4b017ac545ebdf73500575b16dd8ba6d403bea7d65af2192ed4e6261e651bc31f15dc81300ee00e306321350d2e360c79b70bce7d70993235ebff475af4e9117c506e10b925a1780f5adc229fe16440aec4d5b8bed8003afd4113a3950c0eedbc933a2898c6e129df71d202b493f3b897fabf6b57f4e3e5e1cc0fadf4c6340b3ca8f33f46c601", 0x8b}], 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="1ea20b9ec17aad09a74a98c7eade43c8f47818d0160fcb1c", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRESOCT], 0x20, 0x4810}, 0x6008005) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x84) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 09:05:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x9}) [ 1106.510555][ T150] usb 1-1: USB disconnect, device number 113 [ 1106.536572][T25102] FAULT_INJECTION: forcing a failure. [ 1106.536572][T25102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:05:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x268}, 0x0) [ 1106.559975][T25102] CPU: 0 PID: 25102 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1106.570235][T25102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.580292][T25102] Call Trace: [ 1106.583592][T25102] dump_stack+0x14a/0x1ce [ 1106.587946][T25102] ? devkmsg_release+0x11c/0x11c [ 1106.592891][T25102] ? show_regs_print_info+0x12/0x12 [ 1106.598218][T25102] ? preempt_schedule_irq+0xe7/0x140 [ 1106.603501][T25102] ? stack_trace_save+0x123/0x1f0 09:05:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x26a}, 0x0) 09:05:50 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x9}) [ 1106.609065][T25102] ? kasan_alloc_pages+0x4a/0x60 [ 1106.614003][T25102] should_fail+0x6fb/0x860 [ 1106.618417][T25102] ? setup_fault_attr+0x3d0/0x3d0 [ 1106.623448][T25102] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1106.628825][T25102] ? memcg_check_events+0xf8/0x520 [ 1106.633937][T25102] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1106.639494][T25102] ? __rcu_read_lock+0x50/0x50 [ 1106.644345][T25102] ? __mod_node_page_state+0x99/0xb0 [ 1106.649637][T25102] handle_mm_fault+0x18e6/0x41e0 [ 1106.654729][T25102] ? __pagevec_release+0x130/0x130 09:05:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925}) 09:05:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925}) 09:05:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925}) [ 1106.659846][T25102] ? finish_fault+0x230/0x230 [ 1106.664526][T25102] ? lru_add_drain_cpu+0x3d9/0x510 [ 1106.669847][T25102] ? _raw_spin_unlock+0x5/0x20 [ 1106.674610][T25102] ? follow_page_mask+0x76a/0x1050 [ 1106.679730][T25102] __get_user_pages+0xca0/0x1420 [ 1106.684679][T25102] ? populate_vma_page_range+0xf0/0xf0 [ 1106.690139][T25102] ? memset+0x1f/0x40 [ 1106.694128][T25102] ? vmacache_update+0x9f/0xf0 [ 1106.698901][T25102] __mm_populate+0x3a0/0x560 [ 1106.703580][T25102] ? __get_user_pages+0x1420/0x1420 [ 1106.708778][T25102] ? ksys_write+0x25d/0x2c0 [ 1106.713283][T25102] do_mlock+0x4a2/0x540 [ 1106.717439][T25102] ? __ia32_sys_read+0x80/0x80 [ 1106.722198][T25102] __x64_sys_mlock+0x5c/0x70 [ 1106.726783][T25102] do_syscall_64+0xcb/0x150 [ 1106.731283][T25102] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1106.737278][T25102] RIP: 0033:0x45d239 [ 1106.741166][T25102] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1106.760896][T25102] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1106.769295][T25102] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1106.777252][T25102] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1106.785320][T25102] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.793375][T25102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005e [ 1106.801429][T25102] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1107.186437][ T150] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1107.576523][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.587642][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.598389][ T150] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1107.607836][ T150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.617330][ T150] usb 1-1: config 0 descriptor?? [ 1107.956395][ T150] usbhid 1-1:0.0: can't add hid device: -71 [ 1107.962539][ T150] usbhid: probe of 1-1:0.0 failed with error -71 [ 1107.971079][ T150] usb 1-1: USB disconnect, device number 114 [ 1108.446307][ T150] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1108.806368][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.817445][ T150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.827851][ T150] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1108.837461][ T150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.846122][ T150] usb 1-1: config 0 descriptor?? [ 1109.586302][ T150] usbhid 1-1:0.0: can't add hid device: -71 [ 1109.592278][ T150] usbhid: probe of 1-1:0.0 failed with error -71 [ 1109.599790][ T150] usb 1-1: USB disconnect, device number 115 [ 1110.296146][T20088] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1110.656223][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.667188][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.677674][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1110.687281][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.695974][T20088] usb 1-1: config 0 descriptor?? 09:05:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) 09:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 09:05:55 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0x2}, {0x80000006, 0x21, 0x0, 0x2}]}, 0xfffffffffffffe9d) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0x4) r6 = socket$netlink(0x10, 0x3, 0x1d) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r7 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) 09:05:55 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:55 executing program 4 (fault-call:6 fault-nth:95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:55 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair(0x2, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000100)={0x2b, 0x8, 0x89bc3103dd4fa08f, 0x20, 0x0, [@ipv4={[], [], @multicast2}, @private2={0xfc, 0x2, [], 0x1}, @mcast1, @private1={0xfc, 0x1, [], 0x1}]}, 0x48) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f00000001c0)={0x3}) [ 1110.849961][T25166] FAULT_INJECTION: forcing a failure. [ 1110.849961][T25166] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.851768][T25163] FAULT_INJECTION: forcing a failure. [ 1110.851768][T25163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.866997][T25166] CPU: 0 PID: 25166 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1110.885952][T25166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.896000][T25166] Call Trace: [ 1110.899293][T25166] dump_stack+0x14a/0x1ce [ 1110.904299][T25166] ? devkmsg_release+0x11c/0x11c [ 1110.909212][T25166] ? show_regs_print_info+0x12/0x12 [ 1110.914386][T25166] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1110.920432][T25166] should_fail+0x6fb/0x860 [ 1110.924827][T25166] ? setup_fault_attr+0x3d0/0x3d0 [ 1110.929849][T25166] ? __down_read+0xf1/0x210 [ 1110.934378][T25166] ? stack_trace_save+0x1f0/0x1f0 [ 1110.939467][T25166] ? ion_buffer_alloc+0x141/0x630 [ 1110.944466][T25166] should_failslab+0x5/0x20 [ 1110.948946][T25166] kmem_cache_alloc_trace+0x39/0x280 [ 1110.954215][T25166] ? arch_stack_walk+0xd8/0x120 [ 1110.959134][T25166] ion_buffer_alloc+0x141/0x630 [ 1110.963959][T25166] ion_dmabuf_alloc+0xcb/0x230 [ 1110.968699][T25166] ? track_buffer_created+0x1c0/0x1c0 [ 1110.974051][T25166] ? check_stack_object+0x5a/0x90 [ 1110.979046][T25166] ion_ioctl+0x2e8/0x9c0 [ 1110.983274][T25166] ? get_pid_task+0x86/0x90 [ 1110.987753][T25166] ? proc_fail_nth_write+0x18f/0x250 [ 1110.993008][T25166] ? debug_shrink_set+0x1b0/0x1b0 [ 1110.998010][T25166] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1111.003198][T25166] ? memset+0x1f/0x40 [ 1111.007169][T25166] ? fsnotify+0x13a0/0x1460 [ 1111.011652][T25166] ? debug_shrink_set+0x1b0/0x1b0 [ 1111.016649][T25166] do_vfs_ioctl+0x770/0x1750 [ 1111.021216][T25166] ? selinux_file_ioctl+0x73b/0x990 [ 1111.026386][T25166] ? ioctl_preallocate+0x250/0x250 [ 1111.031471][T25166] ? __fget+0x37c/0x3c0 [ 1111.035600][T25166] ? vfs_write+0x427/0x4f0 [ 1111.039993][T25166] ? fget_many+0x20/0x20 [ 1111.044212][T25166] ? ksys_write+0x25d/0x2c0 [ 1111.048700][T25166] ? file_open_root+0x450/0x450 [ 1111.053520][T25166] ? security_file_ioctl+0xad/0xc0 [ 1111.058603][T25166] __x64_sys_ioctl+0xd4/0x110 [ 1111.063256][T25166] do_syscall_64+0xcb/0x150 [ 1111.067741][T25166] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.073606][T25166] RIP: 0033:0x45d239 [ 1111.077490][T25166] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:55 executing program 3: r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) r2 = clone3(&(0x7f0000000440)={0x81200, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000200), {0x15}, &(0x7f0000000300)=""/230, 0xe6, &(0x7f0000000280)=""/57, &(0x7f0000000400)=[r0, r1, 0xffffffffffffffff], 0x3}, 0x58) ptrace$peek(0x1, r2, &(0x7f00000004c0)) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c7703000000000000002f66696c65302c00"]) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) recvmmsg(r3, &(0x7f0000005640)=[{{&(0x7f0000000500)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}, {&(0x7f0000001740)=""/77, 0x4d}, {&(0x7f00000017c0)=""/95, 0x5f}, {&(0x7f0000001840)=""/3, 0x3}], 0x6, &(0x7f0000001900)=""/146, 0x92}, 0x3bb}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/206, 0xce}, {&(0x7f0000001ac0)=""/2, 0x2}], 0x2, &(0x7f0000001b40)=""/117, 0x75}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/186, 0xba}, {&(0x7f0000001c80)=""/197, 0xc5}, {&(0x7f0000001d80)=""/152, 0x98}, {&(0x7f0000001e40)=""/227, 0xe3}, {&(0x7f0000001f40)=""/64, 0x40}], 0x5, &(0x7f0000002000)=""/32, 0x20}, 0x7ff}, {{&(0x7f0000002040)=@xdp, 0x80, &(0x7f0000003480)=[{&(0x7f00000020c0)=""/9, 0x9}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/69, 0x45}, {&(0x7f0000003180)=""/131, 0x83}, {&(0x7f0000003240)=""/216, 0xd8}, {&(0x7f0000003340)=""/170, 0xaa}, {&(0x7f0000003400)=""/95, 0x5f}], 0x7, &(0x7f0000003500)=""/33, 0x21}, 0xc998}, {{&(0x7f0000003540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005600)=[{&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/54, 0x36}], 0x3}, 0x8}], 0x5, 0x10000, 0x0) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0) preadv(r4, &(0x7f0000006800)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/110, 0x6e}], 0x2, 0x3e7ca5d3, 0x0) [ 1111.097073][T25166] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.105463][T25166] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1111.113410][T25166] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1111.121363][T25166] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.129305][T25166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1111.137354][T25166] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c 09:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1111.177124][T25163] CPU: 1 PID: 25163 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1111.187307][T25163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.197357][T25163] Call Trace: [ 1111.200643][T25163] dump_stack+0x14a/0x1ce [ 1111.201891][T25180] overlayfs: unrecognized mount option "w" or missing value [ 1111.204962][T25163] ? devkmsg_release+0x11c/0x11c [ 1111.204978][T25163] ? show_regs_print_info+0x12/0x12 [ 1111.222492][T25163] ? stack_trace_save+0x123/0x1f0 [ 1111.227493][T25163] ? kasan_alloc_pages+0x4a/0x60 [ 1111.232404][T25163] should_fail+0x6fb/0x860 [ 1111.236795][T25163] ? setup_fault_attr+0x3d0/0x3d0 [ 1111.241801][T25163] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1111.247145][T25163] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1111.252677][T25163] ? __rcu_read_lock+0x50/0x50 [ 1111.257414][T25163] handle_mm_fault+0x18e6/0x41e0 [ 1111.262320][T25163] ? __pagevec_release+0x130/0x130 [ 1111.267402][T25163] ? finish_fault+0x230/0x230 [ 1111.272047][T25163] ? lru_add_drain_cpu+0x3d9/0x510 [ 1111.277130][T25163] ? _raw_spin_unlock+0x5/0x20 [ 1111.281862][T25163] ? follow_page_mask+0x76a/0x1050 [ 1111.286944][T25163] __get_user_pages+0xca0/0x1420 [ 1111.291870][T25163] ? populate_vma_page_range+0xf0/0xf0 [ 1111.297296][T25163] ? memset+0x1f/0x40 [ 1111.301247][T25163] ? vmacache_update+0x9f/0xf0 [ 1111.305981][T25163] __mm_populate+0x3a0/0x560 [ 1111.310540][T25163] ? __get_user_pages+0x1420/0x1420 [ 1111.315708][T25163] ? ksys_write+0x25d/0x2c0 [ 1111.320180][T25163] do_mlock+0x4a2/0x540 [ 1111.324304][T25163] ? __ia32_sys_read+0x80/0x80 [ 1111.329037][T25163] __x64_sys_mlock+0x5c/0x70 [ 1111.333598][T25163] do_syscall_64+0xcb/0x150 [ 1111.338070][T25163] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.343932][T25163] RIP: 0033:0x45d239 [ 1111.347801][T25163] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.367469][T25163] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 09:05:55 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1111.375849][T25163] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1111.383792][T25163] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1111.391739][T25163] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.399681][T25163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005f [ 1111.407635][T25163] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c 09:05:55 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,woridqo=./file1,upperdir=./file0']) setxattr(&(0x7f0000000440)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x1, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSBRKP(r2, 0x5425, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000300)=ANY=[@ANYBLOB="0200a1feb5f8a2a79c74d795d96e0017b9e095646bbdb3b42dfaafbc7b3e022024000f2d7c57ce8729f49d4411de428cbec21ac193cf36a5e408869878bb12f8a5924a8b18956d33332a999a8eaafac7a14d8a05895e38b2a754020929f862f6215f7c6a4b85f41cf14f52f581b8d79825cfa9e5f921fed867a2df7fed49065abf5000"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) chdir(&(0x7f00000000c0)='./bus\x00') symlinkat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') [ 1111.436092][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1111.442466][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1111.460037][T20088] usb 1-1: USB disconnect, device number 116 [ 1111.466857][T25187] FAULT_INJECTION: forcing a failure. [ 1111.466857][T25187] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.468016][T25188] overlayfs: unrecognized mount option "woridqo=./file1" or missing value [ 1111.495745][T25187] CPU: 0 PID: 25187 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1111.505908][T25187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.515942][T25187] Call Trace: [ 1111.519215][T25187] dump_stack+0x14a/0x1ce [ 1111.523517][T25187] ? devkmsg_release+0x11c/0x11c [ 1111.528425][T25187] ? __kasan_kmalloc+0x189/0x1c0 [ 1111.533332][T25187] ? show_regs_print_info+0x12/0x12 [ 1111.538501][T25187] ? kmem_cache_alloc_trace+0xc3/0x280 [ 1111.543929][T25187] ? ion_buffer_alloc+0x141/0x630 [ 1111.549529][T25187] ? ion_dmabuf_alloc+0xcb/0x230 [ 1111.554436][T25187] ? do_vfs_ioctl+0x770/0x1750 [ 1111.559171][T25187] ? __x64_sys_ioctl+0xd4/0x110 [ 1111.563991][T25187] ? do_syscall_64+0xcb/0x150 [ 1111.568639][T25187] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.574675][T25187] should_fail+0x6fb/0x860 [ 1111.579059][T25187] ? setup_fault_attr+0x3d0/0x3d0 [ 1111.584052][T25187] ? mutex_lock+0xa6/0x110 [ 1111.588441][T25187] ? mutex_trylock+0xb0/0xb0 [ 1111.593000][T25187] ? ion_system_heap_allocate+0x584/0xbf0 [ 1111.598689][T25187] should_failslab+0x5/0x20 [ 1111.603162][T25187] kmem_cache_alloc_trace+0x39/0x280 [ 1111.608415][T25187] ? ion_page_pool_alloc+0x2c1/0x490 [ 1111.613669][T25187] ion_system_heap_allocate+0x584/0xbf0 [ 1111.619184][T25187] ? ion_system_heap_destroy_pools+0x70/0x70 [ 1111.625393][T25187] ? kmem_cache_alloc_trace+0xc3/0x280 [ 1111.630824][T25187] ion_buffer_alloc+0x20f/0x630 [ 1111.635645][T25187] ion_dmabuf_alloc+0xcb/0x230 [ 1111.640380][T25187] ? track_buffer_created+0x1c0/0x1c0 [ 1111.645739][T25187] ? check_stack_object+0x5a/0x90 [ 1111.650733][T25187] ion_ioctl+0x2e8/0x9c0 [ 1111.654946][T25187] ? get_pid_task+0x86/0x90 [ 1111.659418][T25187] ? proc_fail_nth_write+0x18f/0x250 [ 1111.664673][T25187] ? debug_shrink_set+0x1b0/0x1b0 [ 1111.669664][T25187] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1111.674831][T25187] ? memset+0x1f/0x40 [ 1111.678783][T25187] ? fsnotify+0x13a0/0x1460 [ 1111.683252][T25187] ? debug_shrink_set+0x1b0/0x1b0 [ 1111.688247][T25187] do_vfs_ioctl+0x770/0x1750 [ 1111.692808][T25187] ? selinux_file_ioctl+0x73b/0x990 [ 1111.697974][T25187] ? ioctl_preallocate+0x250/0x250 [ 1111.703054][T25187] ? __fget+0x37c/0x3c0 [ 1111.707180][T25187] ? vfs_write+0x427/0x4f0 [ 1111.711565][T25187] ? fget_many+0x20/0x20 [ 1111.715774][T25187] ? ksys_write+0x25d/0x2c0 [ 1111.720248][T25187] ? file_open_root+0x450/0x450 [ 1111.725066][T25187] ? security_file_ioctl+0xad/0xc0 [ 1111.730146][T25187] __x64_sys_ioctl+0xd4/0x110 [ 1111.734796][T25187] do_syscall_64+0xcb/0x150 [ 1111.739270][T25187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1111.745134][T25187] RIP: 0033:0x45d239 [ 1111.749003][T25187] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.768577][T25187] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.776982][T25187] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 09:05:55 executing program 4 (fault-call:6 fault-nth:96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) [ 1111.784937][T25187] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1111.792892][T25187] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.800845][T25187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.808794][T25187] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1111.827206][T25192] FAULT_INJECTION: forcing a failure. 09:05:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 1111.827206][T25192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1111.848090][T25192] CPU: 1 PID: 25192 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1111.858262][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.868308][T25192] Call Trace: [ 1111.871601][T25192] dump_stack+0x14a/0x1ce [ 1111.875929][T25192] ? devkmsg_release+0x11c/0x11c [ 1111.880868][T25192] ? show_regs_print_info+0x12/0x12 [ 1111.886066][T25192] ? stack_trace_save+0x123/0x1f0 [ 1111.891085][T25192] ? kasan_alloc_pages+0x4a/0x60 [ 1111.896021][T25192] should_fail+0x6fb/0x860 [ 1111.900424][T25192] ? setup_fault_attr+0x3d0/0x3d0 [ 1111.905428][T25192] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1111.910778][T25192] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1111.916302][T25192] ? __rcu_read_lock+0x50/0x50 [ 1111.921045][T25192] handle_mm_fault+0x18e6/0x41e0 [ 1111.926022][T25192] ? __pagevec_release+0x130/0x130 [ 1111.931105][T25192] ? finish_fault+0x230/0x230 [ 1111.935752][T25192] ? lru_add_drain_cpu+0x3d9/0x510 [ 1111.940834][T25192] ? _raw_spin_unlock+0x5/0x20 [ 1111.945565][T25192] ? follow_page_mask+0x76a/0x1050 [ 1111.950644][T25192] __get_user_pages+0xca0/0x1420 [ 1111.955551][T25192] ? populate_vma_page_range+0xf0/0xf0 [ 1111.960977][T25192] ? memset+0x1f/0x40 [ 1111.964929][T25192] ? vmacache_update+0x9f/0xf0 [ 1111.969659][T25192] __mm_populate+0x3a0/0x560 [ 1111.974216][T25192] ? __get_user_pages+0x1420/0x1420 [ 1111.979384][T25192] ? ksys_write+0x25d/0x2c0 [ 1111.983855][T25192] do_mlock+0x4a2/0x540 [ 1111.987976][T25192] ? __ia32_sys_read+0x80/0x80 [ 1111.992710][T25192] __x64_sys_mlock+0x5c/0x70 [ 1111.995987][T25180] overlayfs: unrecognized mount option "w" or missing value [ 1111.997273][T25192] do_syscall_64+0xcb/0x150 [ 1111.997290][T25192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1112.015859][T25192] RIP: 0033:0x45d239 [ 1112.019729][T25192] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1112.039302][T25192] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1112.047681][T25192] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1112.055627][T25192] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1112.063567][T25192] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1112.071507][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000060 [ 1112.079446][T25192] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1112.106231][T25188] overlayfs: unrecognized mount option "woridqo=./file1" or missing value [ 1112.345959][T20088] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1112.706015][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.716922][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.727429][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1112.736975][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.745699][T20088] usb 1-1: config 0 descriptor?? [ 1113.085886][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1113.091850][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1113.100205][T20088] usb 1-1: USB disconnect, device number 117 [ 1113.555849][T20088] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1113.915871][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.926760][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.937231][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1113.946672][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.955340][T20088] usb 1-1: config 0 descriptor?? 09:05:58 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:05:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 09:05:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x7, 0xa0, {0xa0, 0x1, "d13b522ec1a2b33048958f57bbade9953fa9f3b47b82e4c9d9f84794950e1e6410b8fbf5dd228fbd797ee383b03b29e248ffc2644ad4c8ae7012dca19fa749c5b711dd609dbc1f9e018515422f95d878cb6d54fe3835692e345979ac1849e491bafe72b9d45db51dad5db40964eff0784118b1af174e20d8d88875dabaf36d47781fea39771de3559578ab0dd762431fcbf082d5ad19bada1cee96b67eb8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x9, "8fb790eb"}, @global=@item_4={0x3, 0x1, 0x3, "2597e084"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x4, "1a"}, @local=@item_4={0x3, 0x2, 0x0, "109f89b4"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xa0, 0x1, {0x22, 0xabd}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x13, 0x11, "fda7211f3b522038d986b9724715ef1edf"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x1, 0xf2, "2cddfaf28ba34554abf36a7019f1258ff5b404741395978bc8e0b6ff92b97cf2e3e8b4b1cf1a64d4f41fc42cf3c8aa0f57ab32cef40aa62f194c5176eafb9dcc0bb1975ccec08b43d0d14129cbc00ad253f4f19928ce57501f370fce1d18237f435a84baa58577b648c43303b83aef1a653ca2b37ba8214401c116601c0996def9c9fa9b4a3987e19a4eacaf3c7473c7b30d23bcff7e19c99dfe0c65bb9e59b444f072a7bedac09666da3ebde0bec80882523d301993ab5a4abcaf4cc28899ea951b2e8df9efccade26caff9584ee2a02222b82b031e315d88338274a051f7cb668466526d13a945dbe2b4bb4436c7035f24"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 09:05:58 executing program 4 (fault-call:6 fault-nth:97): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000006c0)=0xb7e) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880), 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e37, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) shutdown(r1, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000680)) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xffff, 0x8, &(0x7f0000000700)=[{&(0x7f00000000c0)="76e1bf0c112bb02c9aada2b0411a26b047714c2887bf620fa0db17a527a6b0c8bf9ca1c1d61319bca514cf3c195bb5de9e10b31b85f601d5f561dbc557bc4c88c209b4c18724ac050f08ff665e0c25b061e8a8505322c46337ad4abc65afeec9d761d8515b41d8c5764a13fdac23fbdb743a9232680fb8a613599375faacc7c5518e7b9f1d8a0ac8c4db76a12fe87f4cf47e45ae071fd6168a2daef2c8ae47c49170217ad78d8ebc81a4b93eac87dae75654d18392c686", 0xb7, 0x9}, {&(0x7f00000001c0)="cd9e67cb4ab13cc6cab961b540d2bfc5295264e5a724726de52c82ac0b288ea70a1ee7223642502a38fff796a7b2d210b9acb9ada47bfc08a59f9b69c1cfd8aa06fc97316a9e16b0b256113bad227d08065a4ec6e42688b355b2f4", 0x5b, 0x9}, {&(0x7f0000000240)="23ccce9aae5c8b94166d30bfdead3da016f137a03b60352b3fa964205d1386accdcf353ef4f66aeb42d6caffb6c2fce23c856c65ad4461cb83d6959200aeced0c1ff1813ff609a5b496948e2954fbb0ee617ec4a8251b115502fe84ad16b06fdc8f2bc94ff313e1217f07c2defa790eea431164a52fe72f02d506ad8c83620c15fec376b190e90cbddfb53e2a546a29d4179198f0fc75702050fc9db9e248a9e8ce3aec1626b33eeb564e6be8ffa727b1dbb330bf6a116b2714a42fd3285e29e4116f728a33956021ce8f146cd9efba14e00a789b47765ac6300de004a2b5f9e9965b1f9e87dc5f2a855737e0bf56b483efe", 0xf2, 0xa638}, {&(0x7f0000000340)='V', 0x1, 0x8}, {&(0x7f0000000380)="c1ff9e00d8d745b8e420fb944f2216e115e8dcad4b27101dc74e897af77020dce1457d3b57821dcdca8bcaca3cd7f83ac7027973c4fc927e905d70fc782586d7ac275f16420d279fd362703a36600f6f8845177aaa87d9c25d9c0d5729206b02a58649a50d7b0e418a01073374f2b6d3e93b3052f758f39d6eff0382f92cb6c9e4eee681aa083d8a8ede72c77828b7b89293107aff19cb75", 0x98, 0xfffffffffffffffa}, {0x0, 0x0, 0xbe4}, {&(0x7f00000004c0)="f1", 0x1, 0x7fffffff}, {&(0x7f0000000680), 0x0, 0x6}], 0x40002, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f626c6f636b5f76616c69646974792c7573726a71756f74613d2e2f66696c65302c7374726970653d3078cf862d8214c3303030303030303030303031303030312c646f6e745f61707072616973652c6d61736b3d4d41595f"]) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="24014000", @ANYRES16=r2, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 09:05:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220500000093325f9cdfbe92e63471c4c56dfe5f7623a472ae65107596f48a7fc1e86d3195e8b825ac3ace7ae95972beb85daaa1229ee62861b17487cda349cffc38d0aa2c8470886c5e3990af6b5bfba74e2750ef2de6e4c0a56ea3e989c654bed1d70ea40fcf13144e85f92eac3ec40d8b106247fe935dd22621e7cafad189152c81569644531c82ffc325ca43b0a250cfd175a0b95bd5d5a1e5312c476e0800ae1d1b9e6d238d593f0dac6b38aabd"], 0x0}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x84014) write(r5, &(0x7f0000001140)="24000000200099f0003be90000ed190e020008160000104400ba1080080002007f196be0", 0x24) setsockopt$inet_group_source_req(r4, 0x0, 0x4, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setregs(0xf, r7, 0x10001, &(0x7f0000000400)="3c80662cd155aba98b0aceaa8b5c08e7b7e697354dc31acc01b2b1e4e399c00447504539b644712e859a89cb7a15960043b98e0f24b6ca9c67c92d2e1407de147d46ca0fe50f5d7709b11120a2d79b1dad69889f08b1acf88a438926757c98d6608a072de5039fe2473cbcdff58553ae078b58a6703b117eb3cd3f1147b523377691e7438f7007e796caa4871b583cfd4c8e7d3f87c0f54421a5718953b977f96daac98b9252df854a45b3194306f6f6ce10e302956c633975aed3fbed3c0a087dc20b727dc3d2") [ 1114.214651][T25220] FAULT_INJECTION: forcing a failure. [ 1114.214651][T25220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1114.231147][T25222] FAULT_INJECTION: forcing a failure. [ 1114.231147][T25222] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.243967][T25220] CPU: 1 PID: 25220 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1114.254119][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.264252][T25220] Call Trace: [ 1114.267530][T25220] dump_stack+0x14a/0x1ce [ 1114.271837][T25220] ? devkmsg_release+0x11c/0x11c [ 1114.276746][T25220] ? show_regs_print_info+0x12/0x12 [ 1114.281915][T25220] ? kasan_alloc_pages+0x4a/0x60 [ 1114.285776][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1114.286832][T25220] should_fail+0x6fb/0x860 [ 1114.286842][T25220] ? setup_fault_attr+0x3d0/0x3d0 [ 1114.293460][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1114.297127][T25220] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1114.297139][T25220] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1114.297152][T25220] ? __rcu_read_lock+0x50/0x50 [ 1114.297163][T25220] handle_mm_fault+0x18e6/0x41e0 [ 1114.297175][T25220] ? __pagevec_release+0x130/0x130 [ 1114.297185][T25220] ? finish_fault+0x230/0x230 [ 1114.297192][T25220] ? lru_add_drain_cpu+0x3d9/0x510 [ 1114.297205][T25220] ? _raw_spin_unlock+0x5/0x20 [ 1114.297214][T25220] ? follow_page_mask+0x76a/0x1050 [ 1114.297224][T25220] __get_user_pages+0xca0/0x1420 [ 1114.297233][T25220] ? populate_vma_page_range+0xf0/0xf0 09:05:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 1114.297240][T25220] ? memset+0x1f/0x40 [ 1114.297248][T25220] ? vmacache_update+0x9f/0xf0 [ 1114.297256][T25220] __mm_populate+0x3a0/0x560 [ 1114.297263][T25220] ? __get_user_pages+0x1420/0x1420 [ 1114.297276][T25220] ? ksys_write+0x25d/0x2c0 [ 1114.316897][T20088] usb 1-1: USB disconnect, device number 118 [ 1114.319446][T25220] do_mlock+0x4a2/0x540 [ 1114.319461][T25220] ? __ia32_sys_read+0x80/0x80 [ 1114.401810][T25220] __x64_sys_mlock+0x5c/0x70 [ 1114.406400][T25220] do_syscall_64+0xcb/0x150 [ 1114.410898][T25220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1114.416770][T25220] RIP: 0033:0x45d239 [ 1114.420638][T25220] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.440215][T25220] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1114.448614][T25220] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1114.456557][T25220] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1114.464512][T25220] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.472453][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000061 [ 1114.480493][T25220] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1114.495184][T25222] CPU: 1 PID: 25222 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1114.505345][T25222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.515373][T25222] Call Trace: [ 1114.518645][T25222] dump_stack+0x14a/0x1ce [ 1114.522944][T25222] ? devkmsg_release+0x11c/0x11c [ 1114.527867][T25222] ? show_regs_print_info+0x12/0x12 [ 1114.533035][T25222] should_fail+0x6fb/0x860 [ 1114.537427][T25222] ? setup_fault_attr+0x3d0/0x3d0 [ 1114.542424][T25222] ? sg_alloc_table+0x108/0x630 [ 1114.547243][T25222] should_failslab+0x5/0x20 [ 1114.551716][T25222] __kmalloc+0x5f/0x2d0 [ 1114.555844][T25222] sg_alloc_table+0x108/0x630 [ 1114.560491][T25222] ion_system_heap_allocate+0x5ab/0xbf0 [ 1114.566010][T25222] ? ion_system_heap_destroy_pools+0x70/0x70 [ 1114.571963][T25222] ? kmem_cache_alloc_trace+0xc3/0x280 [ 1114.577388][T25222] ? arch_stack_walk+0xd8/0x120 [ 1114.582209][T25222] ion_buffer_alloc+0x20f/0x630 [ 1114.587031][T25222] ion_dmabuf_alloc+0xcb/0x230 [ 1114.591763][T25222] ? track_buffer_created+0x1c0/0x1c0 [ 1114.597106][T25222] ? check_stack_object+0x5a/0x90 [ 1114.602099][T25222] ion_ioctl+0x2e8/0x9c0 [ 1114.606312][T25222] ? get_pid_task+0x86/0x90 [ 1114.610787][T25222] ? proc_fail_nth_write+0x18f/0x250 [ 1114.616043][T25222] ? debug_shrink_set+0x1b0/0x1b0 [ 1114.621035][T25222] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1114.626225][T25222] ? memset+0x1f/0x40 [ 1114.630182][T25222] ? fsnotify+0x13a0/0x1460 [ 1114.634655][T25222] ? debug_shrink_set+0x1b0/0x1b0 [ 1114.639677][T25222] do_vfs_ioctl+0x770/0x1750 [ 1114.644250][T25222] ? selinux_file_ioctl+0x73b/0x990 [ 1114.649424][T25222] ? ioctl_preallocate+0x250/0x250 [ 1114.654509][T25222] ? __fget+0x37c/0x3c0 [ 1114.658636][T25222] ? vfs_write+0x427/0x4f0 [ 1114.663021][T25222] ? fget_many+0x20/0x20 [ 1114.667230][T25222] ? ksys_write+0x25d/0x2c0 [ 1114.671704][T25222] ? file_open_root+0x450/0x450 [ 1114.676552][T25222] ? security_file_ioctl+0xad/0xc0 [ 1114.681646][T25222] __x64_sys_ioctl+0xd4/0x110 [ 1114.686304][T25222] do_syscall_64+0xcb/0x150 [ 1114.690792][T25222] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1114.696659][T25222] RIP: 0033:0x45d239 [ 1114.700526][T25222] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.720102][T25222] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.728481][T25222] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1114.736433][T25222] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1114.744385][T25222] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.752325][T25222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:05:59 executing program 4 (fault-call:6 fault-nth:98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:05:59 executing program 1 (fault-call:1 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1114.760270][T25222] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c 09:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 09:05:59 executing program 5: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x2d, &(0x7f0000000340)={0x5, 0xf, 0x2d, 0x1, [@generic={0x28, 0x10, 0xa, "5a862088c7c9df3cd7293955151f5afd70e2a60a9bc0c4abd6883fdbcd691073a383059ddc"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x140400) [ 1114.809935][T25244] FAULT_INJECTION: forcing a failure. [ 1114.809935][T25244] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.831284][T25248] FAULT_INJECTION: forcing a failure. [ 1114.831284][T25248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1114.845084][T25244] CPU: 1 PID: 25244 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1114.855235][T25244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.865276][T25244] Call Trace: [ 1114.868564][T25244] dump_stack+0x14a/0x1ce [ 1114.872892][T25244] ? devkmsg_release+0x11c/0x11c [ 1114.877820][T25244] ? show_regs_print_info+0x12/0x12 [ 1114.882996][T25244] ? memset+0x1f/0x40 [ 1114.886958][T25244] ? sg_alloc_table+0x313/0x630 [ 1114.891883][T25244] ? sg_next+0x8b/0xa0 [ 1114.895954][T25244] should_fail+0x6fb/0x860 [ 1114.900352][T25244] ? setup_fault_attr+0x3d0/0x3d0 [ 1114.905349][T25244] ? __up_read+0x6f/0x1b0 [ 1114.909655][T25244] ? _raw_spin_lock+0xa1/0x170 [ 1114.914393][T25244] ? kzalloc+0x1b/0x30 [ 1114.918441][T25244] should_failslab+0x5/0x20 [ 1114.922936][T25244] __kmalloc+0x5f/0x2d0 [ 1114.927069][T25244] kzalloc+0x1b/0x30 [ 1114.930938][T25244] dma_buf_export+0x166/0x7b0 [ 1114.935588][T25244] ion_dmabuf_alloc+0x199/0x230 [ 1114.940417][T25244] ? track_buffer_created+0x1c0/0x1c0 [ 1114.945769][T25244] ? check_stack_object+0x5a/0x90 [ 1114.950766][T25244] ion_ioctl+0x2e8/0x9c0 [ 1114.954985][T25244] ? get_pid_task+0x86/0x90 [ 1114.959461][T25244] ? proc_fail_nth_write+0x18f/0x250 [ 1114.964753][T25244] ? debug_shrink_set+0x1b0/0x1b0 [ 1114.965651][T20088] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1114.969757][T25244] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1114.969767][T25244] ? memset+0x1f/0x40 [ 1114.969781][T25244] ? fsnotify+0x13a0/0x1460 [ 1114.991004][T25244] ? debug_shrink_set+0x1b0/0x1b0 [ 1114.996011][T25244] do_vfs_ioctl+0x770/0x1750 [ 1115.000577][T25244] ? selinux_file_ioctl+0x73b/0x990 [ 1115.005750][T25244] ? ioctl_preallocate+0x250/0x250 [ 1115.010852][T25244] ? __fget+0x37c/0x3c0 [ 1115.014991][T25244] ? vfs_write+0x427/0x4f0 [ 1115.019391][T25244] ? fget_many+0x20/0x20 [ 1115.023628][T25244] ? ksys_write+0x25d/0x2c0 [ 1115.028117][T25244] ? file_open_root+0x450/0x450 [ 1115.032951][T25244] ? security_file_ioctl+0xad/0xc0 [ 1115.038041][T25244] __x64_sys_ioctl+0xd4/0x110 [ 1115.042697][T25244] do_syscall_64+0xcb/0x150 [ 1115.047179][T25244] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1115.053045][T25244] RIP: 0033:0x45d239 [ 1115.056915][T25244] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.076494][T25244] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.084880][T25244] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1115.092914][T25244] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1115.100877][T25244] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.108822][T25244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1115.116770][T25244] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1115.124726][T25248] CPU: 0 PID: 25248 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1115.125002][ T150] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1115.134863][T25248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.134866][T25248] Call Trace: [ 1115.134888][T25248] dump_stack+0x14a/0x1ce 09:05:59 executing program 1 (fault-call:1 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1115.134897][T25248] ? devkmsg_release+0x11c/0x11c [ 1115.134915][T25248] ? show_regs_print_info+0x12/0x12 [ 1115.170128][T25248] ? stack_trace_save+0x123/0x1f0 [ 1115.175148][T25248] ? kasan_alloc_pages+0x4a/0x60 [ 1115.176792][T25256] FAULT_INJECTION: forcing a failure. [ 1115.176792][T25256] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.180072][T25248] should_fail+0x6fb/0x860 [ 1115.180085][T25248] ? setup_fault_attr+0x3d0/0x3d0 [ 1115.202033][T25248] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1115.207384][T25248] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1115.212921][T25248] ? __rcu_read_lock+0x50/0x50 [ 1115.217686][T25248] handle_mm_fault+0x18e6/0x41e0 [ 1115.222599][T25248] ? __pagevec_release+0x130/0x130 [ 1115.227686][T25248] ? finish_fault+0x230/0x230 [ 1115.232337][T25248] ? lru_add_drain_cpu+0x3d9/0x510 [ 1115.237424][T25248] ? _raw_spin_unlock+0x5/0x20 [ 1115.242156][T25248] ? follow_page_mask+0x76a/0x1050 [ 1115.247238][T25248] __get_user_pages+0xca0/0x1420 [ 1115.252150][T25248] ? populate_vma_page_range+0xf0/0xf0 [ 1115.257580][T25248] ? memset+0x1f/0x40 [ 1115.261535][T25248] ? vmacache_update+0x9f/0xf0 [ 1115.266358][T25248] __mm_populate+0x3a0/0x560 [ 1115.270923][T25248] ? __get_user_pages+0x1420/0x1420 [ 1115.276092][T25248] ? ksys_write+0x25d/0x2c0 [ 1115.280568][T25248] do_mlock+0x4a2/0x540 [ 1115.284709][T25248] ? __ia32_sys_read+0x80/0x80 [ 1115.289446][T25248] __x64_sys_mlock+0x5c/0x70 [ 1115.294008][T25248] do_syscall_64+0xcb/0x150 [ 1115.298486][T25248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1115.304349][T25248] RIP: 0033:0x45d239 [ 1115.308230][T25248] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.327818][T25248] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1115.336202][T25248] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1115.344146][T25248] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1115.352093][T25248] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.360038][T25248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000062 [ 1115.367981][T25248] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1115.375936][T25256] CPU: 1 PID: 25256 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1115.378285][T18559] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1115.386073][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.386076][T25256] Call Trace: [ 1115.386096][T25256] dump_stack+0x14a/0x1ce 09:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 09:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1101}, 0x0) [ 1115.386105][T25256] ? devkmsg_release+0x11c/0x11c [ 1115.386111][T25256] ? show_regs_print_info+0x12/0x12 [ 1115.386125][T25256] should_fail+0x6fb/0x860 [ 1115.425664][T25256] ? setup_fault_attr+0x3d0/0x3d0 [ 1115.430681][T25256] ? new_inode_pseudo+0x131/0x240 [ 1115.435701][T25256] should_failslab+0x5/0x20 [ 1115.440193][T25256] kmem_cache_alloc+0x36/0x260 [ 1115.444949][T25256] new_inode_pseudo+0x131/0x240 [ 1115.449791][T25256] alloc_anon_inode+0x1a/0x2e0 [ 1115.454555][T25256] dma_buf_export+0x433/0x7b0 [ 1115.459226][T25256] ion_dmabuf_alloc+0x199/0x230 [ 1115.464070][T25256] ? track_buffer_created+0x1c0/0x1c0 [ 1115.469429][T25256] ? check_stack_object+0x5a/0x90 [ 1115.474435][T25256] ion_ioctl+0x2e8/0x9c0 [ 1115.478662][T25256] ? get_pid_task+0x86/0x90 [ 1115.483159][T25256] ? proc_fail_nth_write+0x18f/0x250 [ 1115.488436][T25256] ? debug_shrink_set+0x1b0/0x1b0 [ 1115.493457][T25256] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1115.498650][T25256] ? memset+0x1f/0x40 [ 1115.502615][T25256] ? fsnotify+0x13a0/0x1460 [ 1115.507193][T25256] ? debug_shrink_set+0x1b0/0x1b0 [ 1115.512186][T25256] do_vfs_ioctl+0x770/0x1750 [ 1115.516748][T25256] ? selinux_file_ioctl+0x73b/0x990 [ 1115.521917][T25256] ? ioctl_preallocate+0x250/0x250 [ 1115.526998][T25256] ? __fget+0x37c/0x3c0 [ 1115.531127][T25256] ? vfs_write+0x427/0x4f0 [ 1115.535511][T25256] ? fget_many+0x20/0x20 [ 1115.539722][T25256] ? ksys_write+0x25d/0x2c0 [ 1115.544193][T25256] ? file_open_root+0x450/0x450 [ 1115.549012][T25256] ? security_file_ioctl+0xad/0xc0 [ 1115.554091][T25256] __x64_sys_ioctl+0xd4/0x110 [ 1115.555684][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.558749][T25256] do_syscall_64+0xcb/0x150 [ 1115.558760][T25256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1115.558773][T25256] RIP: 0033:0x45d239 [ 1115.569713][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.574068][T25256] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.574073][T25256] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.574081][T25256] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1115.574089][T25256] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1115.587782][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1115.593514][T25256] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.593519][T25256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1115.593524][T25256] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1115.671356][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.681169][T20088] usb 1-1: config 0 descriptor?? [ 1115.815712][T18559] usb 6-1: No LPM exit latency info found, disabling LPM. [ 1115.835598][ T150] usb 4-1: Using ep0 maxpacket: 16 [ 1115.895689][T18559] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1115.955710][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.966669][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.977061][ T150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1116.035632][T20088] usbhid 1-1:0.0: can't add hid device: -71 [ 1116.041684][T20088] usbhid: probe of 1-1:0.0 failed with error -71 [ 1116.049902][T20088] usb 1-1: USB disconnect, device number 119 [ 1116.065622][ T150] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1116.074713][ T150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 1116.082845][ T150] usb 4-1: SerialNumber: syz [ 1116.088277][ T150] usb 4-1: config 0 descriptor?? [ 1116.165647][T18559] usb 6-1: string descriptor 0 read error: -22 [ 1116.171960][T18559] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1116.181803][T18559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.427155][T13097] usb 6-1: USB disconnect, device number 18 [ 1116.535511][T20088] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1116.885527][ T150] usbhid 4-1:0.0: can't add hid device: -71 [ 1116.891489][ T150] usbhid: probe of 4-1:0.0 failed with error -71 [ 1116.895574][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.900953][ T150] usb 4-1: USB disconnect, device number 13 [ 1116.910934][T20088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.924469][T20088] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1116.933531][T20088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.942515][T20088] usb 1-1: config 0 descriptor?? [ 1117.185457][T13097] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1117.417212][T20088] betop 0003:11C2:2208.0041: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 1117.428339][T20088] betop 0003:11C2:2208.0041: not enough fields in the report: 0 [ 1117.555480][T13097] usb 6-1: No LPM exit latency info found, disabling LPM. [ 1117.575510][ T150] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1117.618349][T25224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=25224 comm=syz-executor.0 [ 1117.632734][T20088] usb 1-1: USB disconnect, device number 120 [ 1117.635600][T13097] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1117.815398][ T150] usb 4-1: Using ep0 maxpacket: 16 [ 1117.826441][T13097] usb 6-1: string descriptor 0 read error: -71 [ 1117.832914][T13097] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1117.842213][T13097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.875530][T13097] usb 6-1: can't set config #1, error -71 [ 1117.882362][T13097] usb 6-1: USB disconnect, device number 19 [ 1117.935459][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.946448][ T150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.956222][ T150] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1118.045491][ T150] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1118.054674][ T150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 1118.063327][ T150] usb 4-1: SerialNumber: syz [ 1118.068879][ T150] usb 4-1: config 0 descriptor?? 09:06:02 executing program 3: mkdir(&(0x7f0000000000)='./bus\x00', 0x0) clone(0x210200077c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/hci\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c776f726b64691f32e4dbc9f3bd406c6f776572646958723d2e2f6275732c00feeac6351fb861190000005c41b401be6373979a8e2b8a5e94172e3329d0a3b233f9e3333e6a3ae72d9b11c340695c32232d8cee84a6d35009cb92114a7f464f9a515a478635ffa90280a03593c6923fb832ad00ce17b20a6e97aed508a9e785822c"]) write$hidraw(r1, &(0x7f0000000340)="32a173bf0780794e2361609d9c74c6239683fa054ecf2a5a9e2b04ca94dc180ab43849ca42d0d743d4f70978493519176a30a4a87f22609d4f42de3dea459758300786ac1cf70c4e8a62bd85371c7d4ab8af42f05063afc6c905e2a8cfb6186fa2459ff7a77ef92dc79e55e4a9bdf8a937933df0c15b7fdba4d970edc51f347a479fd0463bd0c5b66bf5bc65bbcaa49e9201b1763ab1a058b4a931d9e61c736b2df0ac99aaaba0630bc28dbb4d6a9e4f0a41899a9f45b4e31fe11d72f8e278f4475f6f0564fd30daa6", 0xc9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'netdevsim0\x00', @random="66a404962d74"}) 09:06:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 09:06:02 executing program 1 (fault-call:1 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) [ 1118.233755][T25300] FAULT_INJECTION: forcing a failure. [ 1118.233755][T25300] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.236813][T25302] overlayfs: missing 'lowerdir' [ 1118.249287][T25300] CPU: 1 PID: 25300 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1118.253564][T25302] overlayfs: missing 'lowerdir' [ 1118.261376][T25300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.261380][T25300] Call Trace: [ 1118.261403][T25300] dump_stack+0x14a/0x1ce [ 1118.261414][T25300] ? devkmsg_release+0x11c/0x11c [ 1118.261422][T25300] ? show_regs_print_info+0x12/0x12 [ 1118.261433][T25300] should_fail+0x6fb/0x860 [ 1118.261441][T25300] ? setup_fault_attr+0x3d0/0x3d0 [ 1118.261456][T25300] ? security_inode_alloc+0x32/0x1f0 [ 1118.261465][T25300] should_failslab+0x5/0x20 [ 1118.261475][T25300] kmem_cache_alloc+0x36/0x260 [ 1118.261483][T25300] ? from_kuid_munged+0x3b0/0x3b0 [ 1118.261498][T25300] security_inode_alloc+0x32/0x1f0 [ 1118.327972][T25300] inode_init_always+0x37c/0x800 [ 1118.332878][T25300] new_inode_pseudo+0x7b/0x240 [ 1118.337609][T25300] alloc_anon_inode+0x1a/0x2e0 [ 1118.342394][T25300] dma_buf_export+0x433/0x7b0 [ 1118.347047][T25300] ion_dmabuf_alloc+0x199/0x230 [ 1118.351908][T25300] ? track_buffer_created+0x1c0/0x1c0 [ 1118.357245][T25300] ? check_stack_object+0x5a/0x90 [ 1118.362283][T25300] ion_ioctl+0x2e8/0x9c0 [ 1118.366495][T25300] ? get_pid_task+0x86/0x90 [ 1118.370962][T25300] ? proc_fail_nth_write+0x18f/0x250 [ 1118.376232][T25300] ? debug_shrink_set+0x1b0/0x1b0 [ 1118.381243][T25300] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1118.386410][T25300] ? memset+0x1f/0x40 [ 1118.390359][T25300] ? fsnotify+0x13a0/0x1460 [ 1118.394828][T25300] ? debug_shrink_set+0x1b0/0x1b0 [ 1118.399927][T25300] do_vfs_ioctl+0x770/0x1750 [ 1118.404488][T25300] ? selinux_file_ioctl+0x73b/0x990 [ 1118.409653][T25300] ? ioctl_preallocate+0x250/0x250 [ 1118.414731][T25300] ? __fget+0x37c/0x3c0 [ 1118.418852][T25300] ? vfs_write+0x427/0x4f0 [ 1118.423271][T25300] ? fget_many+0x20/0x20 [ 1118.427481][T25300] ? ksys_write+0x25d/0x2c0 [ 1118.431948][T25300] ? file_open_root+0x450/0x450 [ 1118.436765][T25300] ? security_file_ioctl+0xad/0xc0 [ 1118.441839][T25300] __x64_sys_ioctl+0xd4/0x110 [ 1118.446485][T25300] do_syscall_64+0xcb/0x150 [ 1118.450955][T25300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1118.456923][T25300] RIP: 0033:0x45d239 [ 1118.460785][T25300] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1118.480354][T25300] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.488730][T25300] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1118.496668][T25300] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1118.504604][T25300] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.512541][T25300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1118.520577][T25300] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1118.595319][T13097] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1118.606072][ T150] usbhid 4-1:0.0: can't add hid device: -71 [ 1118.612030][ T150] usbhid: probe of 4-1:0.0 failed with error -71 [ 1118.620315][ T150] usb 4-1: USB disconnect, device number 14 09:06:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x408, 0x3001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0xdd, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0xcb, 0x3, 0x1, {0x22, 0x64a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x3, 0x1f}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x81, 0x9, 0x0, 0x20, 0x2}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0xef, 0xff, 0x8001, 0x84}]}, 0x2, [{0xee, &(0x7f0000000380)=@string={0xee, 0x3, "f35f331d59c8d39245cae2c9fdfd3835f28b022f73d8b023026a406d5fa8dcc3e798ab841aa0113fa7285c3c7bcdd452592ef1902642ab50492092f1d73bddbd6a08112e21e409e70a08ecd289cb406c606a1278e78b844f0c0678fa5e53b8d579e5bade1685c124c33d6141b77dd8eca31996a3b1954529ff2f2e9128323aeb2f70e27a625aed4f1676d17b1da20604011e31fd9ef3675b23816d1c6aebad751bcfad018964dee8284e07ccd3878ab3b9d47c7e1566f429251e26a0d1056b130b1e1876bb7df3b0f948e226f07418546378000d1d06fe85b7346d1a0ed8128066c285a1b0cd9be364681e6a"}}, {0xfb, &(0x7f0000000480)=@string={0xfb, 0x3, "cfdaee7812e9cb5afbc86aadbf4c4f216ff2af3a85d5fa8946a71dc3df534052d23629af500203236479770cd7e3b167a2e0a44d8fb47b98be4c7e806bc25c71ea9e11a6d3f9d7c6b8960f5366263e4f1df556c22e3de609c5f08dcf8a959aee2a7687c8bea9b41a4fd095c5f3f28faa64bddf96e6d5785aa150cf286b2e5f297e3f3d95ae893d08e7a3cfad202b1e7a6296bf530fdd8feca8d1d04b1c6fa2c8f4bddcbefac5733ca07d664fa80f6095d7470d08aaacc89fd610a2725074d305a4d2ead7082ac7dcdd794d35e3ea37ca1265144d0868008d783d11338b293cee3d2848ea72532cf956f8330a26b261cf0874a8052b289c3a08"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, &(0x7f0000000580)={0x0, 0xc, 0xa8, {0xa8, 0x5, "f001fbbc151d7fe2f5a328f7563f3cda2a3cbd7aff216a18ffc84fe9e79de7c55d65e3d9255c38d77b3621cdc50f11908e5962f943dabc31b6028e7ec7003eaeb2a5a8889899c4183452b891fe10a1daa07292dadb22104056f18a7fa907297d4a78c988fa2148cf509c50ef7efc18cd92fd28e41aac9431b74709d8e39a0eb078042f15f7d50359dea6ed316664231f9d8273854d6cf2bd01ff6026af7f99a90c28d9daaada"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="0003a9000000a903d07b2873073290156fcaa7502f998df9b9cf17d16ff583e870982dee053d1e30ca0ecf8d5060b517a99332672fbc0a66446d7758add0b88ba3d8c26aa3cad115d6112bb4ffffff7f9c6c864c1da724f78f5acc2c4ace328313e07f0670da0d86727bb4b490919b9549e9cc4e157ddf0ddf9650c99917982696f278b94651256955dd7abbd80233291f68a1d9c8bbc97c6dff52e5f3e6e66bd1e1e4"], &(0x7f0000000700)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, "c77b"}, @local=@item_4={0x3, 0x2, 0x2, "c52cec13"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x9c1}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000007c0)={0x40, 0x15, 0x39, "c06cc2a29730198f1c3a61a00096e6a92dd77eb4e9fc747685c3c1c2a242c2b5eb3ee569eca00c6933a1c3c7042061eb9d6a7cfc1f4bbd39fa"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x1, 0x9c, "4f6cf7fd1896f9d535d5a90dcc51f62d49efe71f092787221e10018c5582b40f404c6bac7685684bfe0b213121bee571c08cc70e0ebd483526222e4a9747032dd2d01cb8098c3ea85be4e92743695cb27ec7f6a5e99db1ea5ac6538e129909d23f07c1608398ea1f719f2afecefeecd8884fc6ce6f800616f6e18ed8d676791cfaf8b6777d04dd73b83399d05bd3dca01a72d7547de153167452c9a1"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x20}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb3d6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b93e2e1f47eaed68d05ffe0a3982247051dbbf842b3b9af9c8ab4fc47b7ab6e2a4210887add29eaaaa987e5c8eba1a6f4a6c3f6739c7277f2863b1d3553c67dcf7a89cb601043ef49e40c291540428a2ba2dad990319f25138ea03df7d0e4e7dcf191916d1b9d3801061800fbf4c035c5a54c23c7140d5df2aa0588955d96adc0752349e0685673043a566c82a398b5e83e4e493402043d6879131ac0e6c9d67ada2"], 0x0}, 0x0) 09:06:03 executing program 4 (fault-call:6 fault-nth:99): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1300}, 0x0) 09:06:03 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x20, 0x0, 0x1}) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = dup2(r3, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000003800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800a9a55256f71fe572fec2291bfca6c51c49b9dbe628c0212ec3241a", @ANYRES16=r6, @ANYBLOB="08002bbd7000fedb630204000000140003e8756172745f776966694dab9c1fe50462"], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="eaffffff", @ANYRES16=r6, @ANYBLOB="000227bd7000fedbdf250200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1c0}, 0x4040) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000001140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x40080) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="68000000f25fed6aed38788f2ad9b94d5ae5024e09c8903e174302f3684365e4db9242a9fb6e183690ca27093c526db0a69722c1f9e91ceaa08c8a25c400b6770bed28db6e397ad42285772eadbddab6604ef81c59b3826da52ac014c42970bfcc6fb07e57ff9990636a78b0447b3d455e277d5943fa48cff78a1aa2a33250709cfd0451c8f6b0708cc9b0bff4c6e721354614ca3f275680c9053cbc9ea3ff66a9b60ff1af02d2400d475120fa777d32879761f3afa42e2bfb896e5f626ce16de27d640ed03763a8afe8ae653f413afa5ba10823cd4f044d9186f4158acba7dece7e2728beb3650dffeb7ba070ca17008942ca84f426ac5ba77321c1bdb6e857eaedb20fba575d72100549693a7092cb59c6bc2b230a412c4cb3e9d8d3679d951ef50bcaadc2ec3b0cf3b8db72f353c197", @ANYBLOB="2e7a71ab4ac0644dcf75189a2d9c4264d9aa1402131842e5300ff584ad14a4aa9c5dc608dc43f1a380db56329388d12d228cf0a2b2e1f5", @ANYBLOB="000328bd7000ffdbdf25030073797a3200000000a5000300000014000200766574683106006f5f626f6e6400000009000300738f0a7b99dc480000bc694cba8f797a3100000000140002006d61637674617030000000000000000005000400020000007d81af0ebe37d0d266f24c4fb500000000000095330b19f1315a2f3eaf3051ff906208e518bc44fbe3220cc19e3bc8e172386313da31cef97764b4498b4454c9363d36e329c1afc6ceedd714c640afc8ea612dbda67e567eb209f1d642edea21d368e970662b484415c39eb90d83807de52ad4c86b13a48c88a0420d0234160cbb56682c31dc000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xc50) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="20002abd7000fedbdf25020000000900030073797a30000000000900010073797a30000000000900010073797a31000000001400020073797a6b616c6c6572310000000000000900030073797a300000000005000400020000000900030073797a310000810005000400010000000500040002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) lseek(r0, 0x10, 0x0) getdents(r0, 0x0, 0x7ffffffff000) 09:06:03 executing program 1 (fault-call:1 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:06:03 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="17c06bb7"], 0xe) ustat(0x1, &(0x7f0000000280)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 1118.958371][T25320] FAULT_INJECTION: forcing a failure. [ 1118.958371][T25320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.974720][T25320] CPU: 1 PID: 25320 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1118.984885][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1118.994931][T25320] Call Trace: [ 1118.998220][T25320] dump_stack+0x14a/0x1ce [ 1119.002553][T25320] ? devkmsg_release+0x11c/0x11c [ 1119.007485][T25320] ? show_regs_print_info+0x12/0x12 [ 1119.012782][T25320] ? kasan_alloc_pages+0x4a/0x60 [ 1119.017712][T25320] should_fail+0x6fb/0x860 [ 1119.022126][T25320] ? setup_fault_attr+0x3d0/0x3d0 [ 1119.027150][T25320] __alloc_pages_nodemask+0x1ee/0x7c0 [ 1119.032551][T25320] ? memcg_check_events+0xf8/0x520 [ 1119.037658][T25320] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 1119.043193][T25320] ? __rcu_read_lock+0x50/0x50 [ 1119.047951][T25320] handle_mm_fault+0x18e6/0x41e0 [ 1119.052881][T25320] ? __pagevec_release+0x130/0x130 [ 1119.057982][T25320] ? finish_fault+0x230/0x230 [ 1119.062649][T25320] ? lru_add_drain_cpu+0x3d9/0x510 [ 1119.067760][T25320] ? _raw_spin_unlock+0x5/0x20 [ 1119.072516][T25320] ? follow_page_mask+0x76a/0x1050 [ 1119.077623][T25320] __get_user_pages+0xca0/0x1420 [ 1119.082562][T25320] ? populate_vma_page_range+0xf0/0xf0 [ 1119.088010][T25320] ? memset+0x1f/0x40 [ 1119.088760][T25326] FAULT_INJECTION: forcing a failure. [ 1119.088760][T25326] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.091980][T25320] ? vmacache_update+0x9f/0xf0 [ 1119.091990][T25320] __mm_populate+0x3a0/0x560 [ 1119.092004][T25320] ? __get_user_pages+0x1420/0x1420 [ 1119.119214][T25320] ? ksys_write+0x25d/0x2c0 [ 1119.123696][T25320] do_mlock+0x4a2/0x540 [ 1119.127830][T25320] ? __ia32_sys_read+0x80/0x80 [ 1119.132566][T25320] __x64_sys_mlock+0x5c/0x70 [ 1119.137136][T25320] do_syscall_64+0xcb/0x150 [ 1119.141617][T25320] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.147480][T25320] RIP: 0033:0x45d239 [ 1119.151349][T25320] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1119.170925][T25320] RSP: 002b:00007f133c2ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1119.179304][T25320] RAX: ffffffffffffffda RBX: 000000000001fe80 RCX: 000000000045d239 [ 1119.187259][T25320] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 1119.195205][T25320] RBP: 00007f133c2ccca0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.203147][T25320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000063 [ 1119.211090][T25320] R13: 00007ffc98e06def R14: 00007f133c2cd9c0 R15: 000000000118cf4c [ 1119.219045][T25326] CPU: 0 PID: 25326 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1119.229186][T25326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1119.239234][T25326] Call Trace: [ 1119.242525][T25326] dump_stack+0x14a/0x1ce [ 1119.246003][T13097] usb 1-1: unable to read config index 0 descriptor/all [ 1119.246849][T25326] ? devkmsg_release+0x11c/0x11c [ 1119.256005][T13097] usb 1-1: can't read configurations, error -71 [ 1119.258669][T25326] ? show_regs_print_info+0x12/0x12 [ 1119.258683][T25326] should_fail+0x6fb/0x860 [ 1119.274480][T25326] ? setup_fault_attr+0x3d0/0x3d0 [ 1119.279504][T25326] ? __d_alloc+0x2a/0x6b0 [ 1119.283822][T25326] should_failslab+0x5/0x20 [ 1119.288316][T25326] kmem_cache_alloc+0x36/0x260 [ 1119.293076][T25326] __d_alloc+0x2a/0x6b0 [ 1119.297230][T25326] d_alloc_pseudo+0x19/0x70 [ 1119.301724][T25326] alloc_file_pseudo+0x15b/0x340 09:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 09:06:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400000) 09:06:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400003) [ 1119.306662][T25326] ? alloc_empty_file_noaccount+0x70/0x70 [ 1119.312374][T25326] ? alloc_anon_inode+0x213/0x2e0 [ 1119.317386][T25326] ? memcpy+0x38/0x50 [ 1119.321357][T25326] ? alloc_anon_inode+0x213/0x2e0 [ 1119.326379][T25326] dma_buf_export+0x4e0/0x7b0 [ 1119.331049][T25326] ion_dmabuf_alloc+0x199/0x230 [ 1119.335892][T25326] ? track_buffer_created+0x1c0/0x1c0 [ 1119.341255][T25326] ? check_stack_object+0x5a/0x90 [ 1119.346269][T25326] ion_ioctl+0x2e8/0x9c0 [ 1119.350505][T25326] ? get_pid_task+0x86/0x90 09:06:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x4000ef) [ 1119.355000][T25326] ? proc_fail_nth_write+0x18f/0x250 [ 1119.360886][T25326] ? debug_shrink_set+0x1b0/0x1b0 [ 1119.365903][T25326] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1119.371098][T25326] ? memset+0x1f/0x40 [ 1119.375068][T25326] ? fsnotify+0x13a0/0x1460 [ 1119.379558][T25326] ? debug_shrink_set+0x1b0/0x1b0 [ 1119.384572][T25326] do_vfs_ioctl+0x770/0x1750 [ 1119.389281][T25326] ? selinux_file_ioctl+0x73b/0x990 [ 1119.394468][T25326] ? ioctl_preallocate+0x250/0x250 [ 1119.399574][T25326] ? __fget+0x37c/0x3c0 [ 1119.403720][T25326] ? vfs_write+0x427/0x4f0 09:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) [ 1119.408118][T25326] ? fget_many+0x20/0x20 [ 1119.412343][T25326] ? ksys_write+0x25d/0x2c0 [ 1119.416835][T25326] ? file_open_root+0x450/0x450 [ 1119.421677][T25326] ? security_file_ioctl+0xad/0xc0 [ 1119.426778][T25326] __x64_sys_ioctl+0xd4/0x110 [ 1119.431453][T25326] do_syscall_64+0xcb/0x150 [ 1119.435952][T25326] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1119.441830][T25326] RIP: 0033:0x45d239 09:06:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1119.445707][T25326] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1119.465296][T25326] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1119.473702][T25326] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1119.481669][T25326] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1119.489632][T25326] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.497596][T25326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1119.505567][T25326] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1119.635301][T13097] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1119.675219][T20088] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1119.955230][T20088] usb 4-1: device descriptor read/64, error 18 [ 1119.995246][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.006160][T13097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.016608][T13097] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.40 [ 1120.026068][T13097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.034747][T13097] usb 1-1: config 0 descriptor?? [ 1120.355164][T20088] usb 4-1: device descriptor read/64, error 18 [ 1120.375204][T13097] usbhid 1-1:0.0: can't add hid device: -71 [ 1120.381258][T13097] usbhid: probe of 1-1:0.0 failed with error -71 [ 1120.391253][T13097] usb 1-1: USB disconnect, device number 122 [ 1120.625103][T20088] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1120.875085][T13097] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1120.895116][T20088] usb 4-1: device descriptor read/64, error 18 [ 1121.195124][T13097] usb 1-1: not running at top speed; connect to a high speed hub [ 1121.285098][T20088] usb 4-1: device descriptor read/64, error 18 [ 1121.285106][T13097] usb 1-1: config 1 interface 0 altsetting 221 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1121.285118][T13097] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1121.405127][T20088] usb usb4-port1: attempt power cycle [ 1121.465097][T13097] usb 1-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.40 [ 1121.474183][T13097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.482719][T13097] usb 1-1: Product: syz [ 1121.487186][T13097] usb 1-1: Manufacturer: 磮嫋죻굪䲿⅏㪯햅觺Ꝇ쌝叟剀㛒꼩ɐ⌃祤౷枱䶤뒏须䲾聾쉫煜黪ꘑ陸웗隸匏♦伾쉖㴮০쾍閊瘪좇ꦾ᪴큏얕ꪏ뵤雟헦婸傡⣏⹫⥟㽾锽覮࠽ꏧ귏⬠稞院县톨䯐漜좢뷴뻜엺㱳綠佦ྨ镠䟗ࠍ겪鿈ზ犢瑐ד튤ퟪ⨈秝㕍쨷攒䴔栈贀㵸㌑⦋⠽卲郎ਲ਼눦콡琈֨⠫㪜 [ 1121.523395][T13097] usb 1-1: SerialNumber: syz [ 1121.528994][T13097] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1121.538585][T13097] usb 1-1: no configuration chosen from 1 choice 09:06:06 executing program 1 (fault-call:1 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x9}) 09:06:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6802}, 0x0) 09:06:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x400300) 09:06:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000400)=""/119, 0x77, 0x2, &(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r3, 0xd, 0x0, 0x3, &(0x7f00000003c0)=[0x0], 0x1}, 0xffffffffffffffee) ftruncate(r1, 0x40) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) getsockopt$inet_buf(r5, 0x0, 0x24, &(0x7f0000000140)=""/123, &(0x7f0000000000)=0x7b) r6 = signalfd(r0, &(0x7f0000000100)={[0x5]}, 0x8) fgetxattr(r6, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/178, 0xb2) getsockopt$inet_tcp_buf(r4, 0x6, 0x10, 0x0, &(0x7f0000000040)=0xfffffffffffffef9) [ 1121.950221][ T142] usb 1-1: USB disconnect, device number 123 [ 1121.988755][T25381] FAULT_INJECTION: forcing a failure. 09:06:06 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) open_tree(r0, &(0x7f0000000000)='\x00', 0x1101) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) r2 = dup(r1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x422}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x88}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x1b0, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40041}, 0x8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x24a212c7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 09:06:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "32cef144"}]}}, 0x0}, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000000)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00', 0x2) r8 = openat(r7, &(0x7f0000000080)='./file0\x00', 0x480800, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000040)=""/33) sched_setattr(r2, 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000000)={&(0x7f0000000240)="230b0e4b99848f192d21312ac3bf28963c6871aa65a4d7380cb56010fc41470db6d0ed6931d787eb052bb3dc10a60c166863313f87c90573776d9f105ea471ee92bfd1336d7fc5d31f3c1e7016623dabddc783a510fa37797c51ed46e2dabdeef4823f960afb7873c42723739025335c27cac003de3298a5a36cc4d3c7e498baa1859147c12de33e4b67e232355e4243fe0062905b79c9f265f01c83d64fd26a1390afeb56040ab2dacdfdd4a4e2d98e664b2b2adf6c49caa9a4c75e7f47f07c24f8f8b4694e6ccafbb2e028db13af1962d13d", 0xd3}) 09:06:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6a02}, 0x0) [ 1121.988755][T25381] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.014200][T25381] CPU: 0 PID: 25381 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1122.024384][T25381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.034430][T25381] Call Trace: [ 1122.037720][T25381] dump_stack+0x14a/0x1ce [ 1122.042046][T25381] ? devkmsg_release+0x11c/0x11c [ 1122.046983][T25381] ? show_regs_print_info+0x12/0x12 [ 1122.052181][T25381] should_fail+0x6fb/0x860 [ 1122.056596][T25381] ? setup_fault_attr+0x3d0/0x3d0 [ 1122.061616][T25381] ? __alloc_file+0x26/0x390 [ 1122.066198][T25381] should_failslab+0x5/0x20 [ 1122.070693][T25381] kmem_cache_alloc+0x36/0x260 [ 1122.075708][T25381] ? _raw_spin_trylock_bh+0x190/0x190 [ 1122.081057][T25381] __alloc_file+0x26/0x390 [ 1122.085450][T25381] ? alloc_empty_file+0x49/0x1b0 [ 1122.090362][T25381] alloc_empty_file+0xa9/0x1b0 [ 1122.095124][T25381] alloc_file+0x58/0x4a0 [ 1122.099338][T25381] alloc_file_pseudo+0x28c/0x340 [ 1122.104246][T25381] ? alloc_empty_file_noaccount+0x70/0x70 [ 1122.109934][T25381] ? alloc_anon_inode+0x213/0x2e0 [ 1122.114929][T25381] ? memcpy+0x38/0x50 [ 1122.118885][T25381] ? alloc_anon_inode+0x213/0x2e0 [ 1122.123883][T25381] dma_buf_export+0x4e0/0x7b0 [ 1122.128542][T25381] ion_dmabuf_alloc+0x199/0x230 [ 1122.133363][T25381] ? track_buffer_created+0x1c0/0x1c0 [ 1122.138707][T25381] ? check_stack_object+0x5a/0x90 [ 1122.143712][T25381] ion_ioctl+0x2e8/0x9c0 [ 1122.147927][T25381] ? get_pid_task+0x86/0x90 [ 1122.152399][T25381] ? proc_fail_nth_write+0x18f/0x250 [ 1122.157668][T25381] ? debug_shrink_set+0x1b0/0x1b0 [ 1122.162659][T25381] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1122.167846][T25381] ? memset+0x1f/0x40 [ 1122.171798][T25381] ? fsnotify+0x13a0/0x1460 [ 1122.176270][T25381] ? debug_shrink_set+0x1b0/0x1b0 [ 1122.181276][T25381] do_vfs_ioctl+0x770/0x1750 [ 1122.185837][T25381] ? selinux_file_ioctl+0x73b/0x990 [ 1122.191003][T25381] ? ioctl_preallocate+0x250/0x250 [ 1122.196088][T25381] ? __fget+0x37c/0x3c0 [ 1122.200226][T25381] ? vfs_write+0x427/0x4f0 [ 1122.204613][T25381] ? fget_many+0x20/0x20 [ 1122.208827][T25381] ? ksys_write+0x25d/0x2c0 [ 1122.213300][T25381] ? file_open_root+0x450/0x450 [ 1122.218121][T25381] ? security_file_ioctl+0xad/0xc0 [ 1122.223301][T25381] __x64_sys_ioctl+0xd4/0x110 [ 1122.227949][T25381] do_syscall_64+0xcb/0x150 [ 1122.232862][T25381] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1122.238736][T25381] RIP: 0033:0x45d239 [ 1122.242604][T25381] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1122.262195][T25381] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.270601][T25381] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1122.278542][T25381] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1122.286501][T25381] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 09:06:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x404000) 09:06:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000000009040000490300000009210000000122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000340)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x80000006}]}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x401}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) timer_getoverrun(r1) r3 = syz_open_dev$hiddev(&(0x7f0000000100)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x0) 09:06:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9401}, 0x0) [ 1122.294441][T25381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1122.302383][T25381] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c [ 1122.374763][T25381] kasan: CONFIG_KASAN_INLINE enabled [ 1122.380414][T25386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25386 comm=syz-executor.3 [ 1122.393561][T25381] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1122.407160][T25381] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1122.414109][T25381] CPU: 0 PID: 25381 Comm: syz-executor.1 Not tainted 5.4.58-syzkaller-00211-g0881b55787d3 #0 [ 1122.424241][T25381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1122.434291][T25381] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 1122.439723][T25381] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb ed 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 c5 be d9 [ 1122.459300][T25381] RSP: 0018:ffff88819858f7e0 EFLAGS: 00010206 [ 1122.465336][T25381] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 1122.473279][T25381] RDX: ffffc900046c4000 RSI: 0000000000035252 RDI: 0000000000035253 [ 1122.481480][T25381] RBP: dffffc0000000000 R08: ffffffff817b504f R09: 0000000000000003 [ 1122.489423][T25381] R10: ffffed10330b1ee5 R11: 0000000000000004 R12: 0000000000000000 [ 1122.497365][T25381] R13: dffffc0000000000 R14: 1ffff1103a70d8aa R15: 1ffff1103a70d8bc [ 1122.505310][T25381] FS: 00007fcf807e8700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1122.514224][T25381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.520790][T25381] CR2: 0000560b62d50e80 CR3: 00000001ca733006 CR4: 00000000001606f0 [ 1122.528750][T25381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.536691][T25381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1122.544633][T25381] Call Trace: [ 1122.547900][T25381] ? dma_buf_fs_init_context+0x60/0x60 [ 1122.553331][T25381] __dentry_kill+0x41b/0x5a0 [ 1122.557894][T25381] dput+0x2e1/0x5e0 [ 1122.561674][T25381] path_put+0x35/0x60 [ 1122.565635][T25381] alloc_file_pseudo+0x2ac/0x340 [ 1122.570541][T25381] ? alloc_empty_file_noaccount+0x70/0x70 [ 1122.576247][T25381] ? alloc_anon_inode+0x213/0x2e0 [ 1122.581239][T25381] ? memcpy+0x38/0x50 [ 1122.585189][T25381] ? alloc_anon_inode+0x213/0x2e0 [ 1122.590183][T25381] dma_buf_export+0x4e0/0x7b0 [ 1122.594833][T25381] ion_dmabuf_alloc+0x199/0x230 [ 1122.599656][T25381] ? track_buffer_created+0x1c0/0x1c0 [ 1122.605021][T25381] ? check_stack_object+0x5a/0x90 [ 1122.610017][T25381] ion_ioctl+0x2e8/0x9c0 [ 1122.614243][T25381] ? get_pid_task+0x86/0x90 [ 1122.618719][T25381] ? proc_fail_nth_write+0x18f/0x250 [ 1122.623998][T25381] ? debug_shrink_set+0x1b0/0x1b0 [ 1122.629002][T25381] ? proc_fail_nth_read+0x1d0/0x1d0 [ 1122.634188][T25381] ? memset+0x1f/0x40 [ 1122.638261][T25381] ? fsnotify+0x13a0/0x1460 [ 1122.642766][T25381] ? debug_shrink_set+0x1b0/0x1b0 [ 1122.647768][T25381] do_vfs_ioctl+0x770/0x1750 [ 1122.652345][T25381] ? selinux_file_ioctl+0x73b/0x990 [ 1122.657525][T25381] ? ioctl_preallocate+0x250/0x250 [ 1122.662612][T25381] ? __fget+0x37c/0x3c0 [ 1122.666756][T25381] ? vfs_write+0x427/0x4f0 [ 1122.671144][T25381] ? fget_many+0x20/0x20 [ 1122.675369][T25381] ? ksys_write+0x25d/0x2c0 [ 1122.679853][T25381] ? file_open_root+0x450/0x450 [ 1122.684706][T25381] ? security_file_ioctl+0xad/0xc0 [ 1122.689799][T25381] __x64_sys_ioctl+0xd4/0x110 [ 1122.694455][T25381] do_syscall_64+0xcb/0x150 [ 1122.698938][T25381] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1122.704801][T25381] RIP: 0033:0x45d239 [ 1122.708670][T25381] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1122.728251][T25381] RSP: 002b:00007fcf807e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.736631][T25381] RAX: ffffffffffffffda RBX: 000000000000f440 RCX: 000000000045d239 [ 1122.744576][T25381] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1122.752628][T25381] RBP: 00007fcf807e7ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.760581][T25381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1122.768522][T25381] R13: 00007fff8e2c781f R14: 00007fcf807e89c0 R15: 000000000118cf4c 09:06:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9601}, 0x0) [ 1122.776469][T25381] Modules linked in: 09:06:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000180)='./bus\x00', 0x0) mlock(&(0x7f000000a000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x400000)=nil, 0x40efff) [ 1122.811537][T25381] ---[ end trace f7b0e775ef8146e7 ]--- [ 1122.817315][T25410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25410 comm=syz-executor.3 [ 1122.819380][T25381] RIP: 0010:dma_buf_release+0x44/0x2f0 [ 1122.844349][T25381] Code: fe 48 83 c3 78 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 bb ed 07 ff 4c 8b 23 49 8d 5c 24 48 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 34 02 00 00 8b 1b 31 ff 89 de e8 c5 be d9 [ 1122.869909][T25381] RSP: 0018:ffff88819858f7e0 EFLAGS: 00010206 [ 1122.879038][T25381] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000040000 [ 1122.887841][T25381] RDX: ffffc900046c4000 RSI: 0000000000035252 RDI: 0000000000035253 [ 1122.896590][T25381] RBP: dffffc0000000000 R08: ffffffff817b504f R09: 0000000000000003 [ 1122.904635][T25381] R10: ffffed10330b1ee5 R11: 0000000000000004 R12: 0000000000000000 [ 1122.913456][T25381] R13: dffffc0000000000 R14: 1ffff1103a70d8aa R15: 1ffff1103a70d8bc [ 1122.921782][T25381] FS: 00007fcf807e8700(0000) GS:ffff8881db800000(0000) knlGS:0000000000000000 [ 1122.924970][ T150] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1122.931446][T25381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.944911][T25381] CR2: 0000560b62d50e80 CR3: 00000001ca733002 CR4: 00000000001606f0 [ 1122.952868][T25381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.960870][T25381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1122.969024][T25381] Kernel panic - not syncing: Fatal exception [ 1122.975807][T25381] Kernel Offset: disabled [ 1122.980117][T25381] Rebooting in 86400 seconds..